Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/uTS2FvVrv9BdC9ScZjBvTZCCZhs.mft
File:                     uTS2FvVrv9BdC9ScZjBvTZCCZhs.mft (raw, json)
Hash identifier:          dWN1rEj+Vkk5VEs7+gpAN1u8An7ykYzakNTAv/iviyA=
Subject key identifier:   CF:F8:00:D1:54:2C:E3:B1:78:B9:36:BF:BA:7F:39:C4:F2:EA:42:07
Authority key identifier: B9:34:B6:16:F5:6B:BF:D0:5D:0B:D4:9C:66:30:6F:4D:90:82:66:1B
Certificate issuer:       /CN=b934b616f56bbfd05d0bd49c66306f4d9082661b
Certificate serial:       01A1DC824DEED30A00BEBD78E5AC7F13BA66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uTS2FvVrv9BdC9ScZjBvTZCCZhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/uTS2FvVrv9BdC9ScZjBvTZCCZhs.mft
Manifest number:          0170
Signing time:             Sun 15 Nov 2026 00:01:29 +0000
Manifest this update:     Sun 15 Nov 2026 00:01:29 +0000
Manifest next update:     Mon 16 Nov 2026 00:01:29 +0000
Files and hashes:         1: uTS2FvVrv9BdC9ScZjBvTZCCZhs.crl (hash: grQIV3L29J16wjMqDmS4qSU4SP0WR2DjdVs7XPqSb7o=)
                          2: wEJikxHblT6L9s-bWi71LrsBZRI.roa (hash: bunPLGyVfPKxwGeY/HVdEI1aNYchPYcPFBV30VR16pY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/uTS2FvVrv9BdC9ScZjBvTZCCZhs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/uTS2FvVrv9BdC9ScZjBvTZCCZhs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uTS2FvVrv9BdC9ScZjBvTZCCZhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 21:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dc:82:4d:ee:d3:0a:00:be:bd:78:e5:ac:7f:13:ba:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b934b616f56bbfd05d0bd49c66306f4d9082661b
        Validity
            Not Before: Nov 15 00:01:29 2026 GMT
            Not After : Nov 16 00:01:29 2026 GMT
        Subject: CN=cff800d1542ce3b178b936bfba7f39c4f2ea4207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bb:ab:6b:4f:16:10:db:57:07:4c:2d:3d:19:
                    10:3b:fd:62:e8:a5:45:69:ab:da:69:86:9a:dd:c1:
                    4e:5f:91:25:9b:dc:df:f0:03:2d:58:20:6c:e7:5e:
                    ca:87:7b:3e:d6:e3:4d:f0:00:40:02:8b:d8:6b:b1:
                    59:59:e5:fa:fa:22:f9:5a:f3:26:62:77:db:b9:8c:
                    c4:60:45:11:f3:45:18:76:23:26:ba:61:2d:81:9a:
                    4c:50:18:ea:53:2a:f2:07:35:d6:dd:dc:e2:a2:3d:
                    a5:c3:f3:40:d8:7b:63:e1:6a:1e:a0:6a:56:1d:f9:
                    99:c7:f5:7e:7f:cc:60:6f:40:0e:b8:b6:d2:82:a5:
                    7c:0f:5b:df:c4:8c:1c:ae:0c:37:f5:2f:71:aa:a5:
                    b5:99:0c:97:ca:ba:69:c5:95:41:a6:d9:95:80:d7:
                    ed:c4:0a:d6:d1:fe:c6:a1:a4:17:27:cd:74:35:37:
                    35:38:3f:ff:d9:73:84:60:09:d3:8a:70:f8:85:14:
                    56:cf:0f:9b:c4:c4:50:62:ca:74:c3:ae:cb:b7:a3:
                    b7:49:43:ef:cf:5f:4a:d3:7c:46:d0:10:e9:1c:01:
                    6a:59:10:7b:42:85:95:70:05:d7:e1:45:ba:fb:8f:
                    4b:e8:2d:da:04:64:f1:eb:c1:ed:a8:23:3c:7d:76:
                    c4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F8:00:D1:54:2C:E3:B1:78:B9:36:BF:BA:7F:39:C4:F2:EA:42:07
            X509v3 Authority Key Identifier:
                keyid:B9:34:B6:16:F5:6B:BF:D0:5D:0B:D4:9C:66:30:6F:4D:90:82:66:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTS2FvVrv9BdC9ScZjBvTZCCZhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/uTS2FvVrv9BdC9ScZjBvTZCCZhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/uTS2FvVrv9BdC9ScZjBvTZCCZhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:5c:27:c1:33:69:f2:a5:b6:a8:ed:b2:04:04:f5:ec:14:ad:
         32:5c:24:64:01:6d:c5:62:e2:12:89:69:be:8e:9f:32:8d:63:
         5c:36:a0:b7:a6:ba:b9:e7:89:f9:76:61:1a:c0:08:75:6c:3d:
         d2:ba:b9:5b:6d:cf:80:08:02:df:30:9f:62:91:d5:83:92:fb:
         e2:e3:4c:21:61:c4:37:bc:f8:5a:67:ec:1b:c2:90:d7:6c:74:
         92:d2:5c:b6:e7:79:b6:57:3e:ed:e2:83:f6:c4:b5:7d:03:34:
         df:d5:e1:88:aa:a6:62:bd:c9:b9:97:a6:67:82:b5:c2:1e:17:
         e7:64:e0:96:fb:31:ad:6f:6c:de:14:cf:a8:b5:f8:0c:be:b8:
         1f:0b:b3:a4:ef:31:7c:2a:bc:5d:87:60:6c:02:10:22:29:d6:
         f5:ef:88:a9:3b:07:40:fe:64:d4:38:80:77:a3:1e:5b:fc:17:
         96:b7:df:19:a3:82:f8:70:8c:af:ae:2d:b9:59:91:4b:b5:c6:
         be:10:07:76:5a:06:3c:ad:c7:75:3e:ef:37:3c:56:1e:7b:a7:
         e6:ef:28:49:0d:68:8d:6d:83:17:8d:1c:5c:75:25:b6:a8:89:
         9e:e9:80:20:e5:bf:71:d0:d4:da:8d:5d:92:e2:02:f7:f0:e4:
         f5:66:b1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:37:06 2026 by rpki-client