Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
File:                     9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft (raw, json)
Hash identifier:          JldSMMUpI06rzHSWN1MMIzVi8bXysNj09oRYu4Jvjtg=
Subject key identifier:   DC:3C:C5:37:6E:DD:F0:3C:86:92:9B:7B:A7:D3:3D:57:12:9A:4D:91
Authority key identifier: F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13
Certificate issuer:       /CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
Certificate serial:       01A1DEDEF979B3AF1A35581911CD9A8F37D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
Manifest number:          1B05
Signing time:             Sun 15 Nov 2026 11:01:57 +0000
Manifest this update:     Sun 15 Nov 2026 11:01:57 +0000
Manifest next update:     Mon 16 Nov 2026 11:01:57 +0000
Files and hashes:         1: 0QPtv0tHOhX4VrjF4QxuvNuT2jM.roa (hash: FrNTwxFKJDUxxkHL8muoEJtvm9gsprK0uRriivYNGpw=)
                          2: 1JViNUEn6ga0QROJtxU4AEvMLww.roa (hash: jcckW1pekqq2a3ZEiyHcZr/yXCAySkb6WGxv2ggL9FI=)
                          3: 5c-tVeqgckJuAp6JbI43ZWb85Ik.roa (hash: cjN5erR2DEEsrEuY7GbmW+pLwmDRQL+9OgSiLHhDtIc=)
                          4: 9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl (hash: cMI9R2RTdqKOSqymKhL8fHuoyTCluBeeKpwPewTw0zk=)
                          5: QEppDjVyRBerk3ujRwEpvlXiEWQ.roa (hash: SKIJd9REPViiCXVOQp27KMeIGa3T2cyw64X7SgOS//o=)
                          6: SCqPIEkOrt01ONxjT0XgajknB8k.roa (hash: W9QDPMAsjC59u8HP2lYvDC47+WKe629lFseH1cWFZZo=)
                          7: SiBbiHVr7AC0u90Fwok04bc86Is.roa (hash: IBa2+mQ/TjNwKvca48jtPUnqiSXDlYjx7SDm3vYP5Ys=)
                          8: YbDK1kvvrk8Ho1IdJerxyMGANJQ.roa (hash: m/hv4iobL1Tq4Hnl7IKJyfEevy78U6kNT70maANZhgM=)
                          9: i_WQhoivfiPNt_r8E0ASaD2knr0.roa (hash: ZsmBZD3QOznmcRlV4BtsmhxZ3ocoJk7WQB1P/qL5Ad0=)
                          10: zRYCcQ03Zo7Mtjwf5o0jfcWViDY.roa (hash: hObMfSwMh57HZlCx8OTlbluNMpET5Cy14GAtqwnhGDg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 11:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:de:f9:79:b3:af:1a:35:58:19:11:cd:9a:8f:37:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
        Validity
            Not Before: Nov 15 11:01:57 2026 GMT
            Not After : Nov 16 11:01:57 2026 GMT
        Subject: CN=dc3cc5376eddf03c86929b7ba7d33d57129a4d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:35:6a:d1:ce:49:64:1a:98:4e:3b:cc:2b:fb:
                    64:d4:ed:5d:6a:0f:fb:a1:8d:4f:2e:c5:1d:a7:8e:
                    a7:67:f5:9b:ae:23:5c:84:eb:47:a4:bd:97:e5:4d:
                    f6:27:92:b8:3e:6f:ef:11:f3:36:28:63:b1:3b:22:
                    8d:12:4f:17:af:2d:c3:f4:42:9d:53:36:b6:a7:38:
                    b9:3e:da:9b:45:35:2f:f6:4c:8b:c6:68:09:82:c6:
                    1c:b3:aa:de:41:16:a0:8a:f2:f1:56:3f:24:28:e6:
                    47:c3:9e:0e:a3:fa:7b:78:43:81:a7:1d:26:5e:d9:
                    f5:78:e7:c3:e6:72:c8:8d:c3:e3:ab:43:70:db:cf:
                    d8:b3:99:ba:6d:0d:5d:ce:e9:55:94:62:63:28:6a:
                    b3:56:d8:2d:5c:74:27:55:2e:fe:74:cc:17:06:9f:
                    fb:35:29:51:0a:0c:74:99:a9:af:55:d6:76:49:14:
                    4b:d7:8e:fb:91:a3:94:e0:40:a5:15:b7:33:0d:64:
                    19:a8:9b:97:a1:2e:92:c5:f5:5d:b8:5b:bf:c1:27:
                    f8:15:61:9a:dc:14:a9:3e:27:e6:51:09:ef:c4:82:
                    56:e3:cf:1c:cb:8a:cc:4f:69:38:17:7d:ba:c6:dc:
                    a6:94:42:4b:59:51:86:b4:61:dc:f6:b8:18:0d:2e:
                    7c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:3C:C5:37:6E:DD:F0:3C:86:92:9B:7B:A7:D3:3D:57:12:9A:4D:91
            X509v3 Authority Key Identifier:
                keyid:F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:27:5c:cc:7a:66:80:73:8c:a4:e7:75:7b:8b:de:a9:65:bc:
         ff:d8:4d:06:44:16:e8:c8:e0:fd:4e:a1:e4:29:7c:57:15:e8:
         2c:a1:96:5c:b4:fc:30:39:fd:15:20:06:b1:c3:35:13:a5:d3:
         27:b5:76:8e:90:1c:36:3c:66:f8:92:58:97:4f:1a:f4:fd:0d:
         5e:8d:4b:2d:8e:3e:95:ad:fb:9d:9e:fc:91:db:17:ac:37:5b:
         3d:6d:84:3d:0f:44:7b:46:7b:92:fa:61:69:c8:d5:ab:21:f4:
         24:88:50:80:da:b2:6c:d8:31:df:72:36:25:32:00:f2:12:fe:
         96:08:98:c6:5a:50:c5:0a:f9:28:bf:c7:8b:5e:3f:40:c1:37:
         c9:0a:74:0e:7e:ff:5a:0e:39:4d:1d:63:83:42:d7:18:0e:cb:
         9a:7c:6f:17:69:b4:21:b1:59:d8:f2:15:61:3b:7f:83:72:9e:
         11:c0:7e:dd:c0:32:9a:ad:8d:47:5d:88:c0:85:4a:a1:1b:3c:
         1f:53:a3:ba:2f:d0:41:e2:52:87:9b:c3:60:81:43:81:e0:65:
         7a:62:c0:cc:44:23:8c:f7:1c:e8:3c:dd:28:fa:e6:6f:9c:ce:
         05:bd:e2:ae:2d:12:a6:32:f3:78:d5:72:26:28:e4:41:a8:0a:
         3e:7b:6f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:54:35 2026 by rpki-client