Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.mft
File:                     S5Bbks7tDUBU_ZbHzP1d5m2PYq4.mft (raw, json)
Hash identifier:          5hVu4S2rqH2UR+z2Wbv6xSTHrgoA9zGp3giZS3LEdYw=
Subject key identifier:   C1:33:87:83:99:03:9F:6A:42:C5:BC:15:B7:DB:81:A3:9C:56:EB:DC
Authority key identifier: 4B:90:5B:92:CE:ED:0D:40:54:FD:96:C7:CC:FD:5D:E6:6D:8F:62:AE
Certificate issuer:       /CN=4b905b92ceed0d4054fd96c7ccfd5de66d8f62ae
Certificate serial:       01A1DE714A02D0E20A32AFB9E37912FC759B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.mft
Manifest number:          0171
Signing time:             Sun 15 Nov 2026 09:02:08 +0000
Manifest this update:     Sun 15 Nov 2026 09:02:08 +0000
Manifest next update:     Mon 16 Nov 2026 09:02:08 +0000
Files and hashes:         1: S5Bbks7tDUBU_ZbHzP1d5m2PYq4.crl (hash: YUbF34V/3LS53zRKOXfKdRN8JMNviSXAwWPdncawO4g=)
                          2: X00WP5hL284UqAVGxLXaNNV_5EU.roa (hash: Qq8OZKKabuQ4bEnBcQSngOYJ+I2wL1Rk9O2ngy1HvwE=)
                          3: l-XkXuf9XggQYZxtWN0dMNbMQYA.roa (hash: VtVN/POmbvS7tbXroTKgBcOB9/D/3PdK83che1VmeOE=)
                          4: mT6v6jSgHIygycLQjCb9jIj1ZFo.roa (hash: 3STcbpvfvavXclx/IAHFXEuz539gDMyFZGfO/1xoJjw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:71:4a:02:d0:e2:0a:32:af:b9:e3:79:12:fc:75:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b905b92ceed0d4054fd96c7ccfd5de66d8f62ae
        Validity
            Not Before: Nov 15 09:02:08 2026 GMT
            Not After : Nov 16 09:02:08 2026 GMT
        Subject: CN=c133878399039f6a42c5bc15b7db81a39c56ebdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:34:e4:1d:cf:55:1f:a2:74:b4:77:88:6c:73:
                    ea:a8:e7:06:fd:04:1b:a2:9a:bd:86:55:3d:37:6f:
                    b8:26:6f:23:2e:b6:ac:86:c6:ff:1b:dd:fd:2a:22:
                    e6:a6:04:a9:7a:88:3a:c5:20:7c:9f:30:a2:c1:92:
                    b5:d1:b6:8c:7e:77:95:03:13:f7:1d:69:9d:0e:ed:
                    da:b7:01:12:92:74:a4:cf:93:7e:52:06:35:a0:1e:
                    4a:84:0f:f7:8f:4c:32:97:f6:8c:e9:6e:dd:cc:9e:
                    48:3f:9a:98:4e:94:59:0b:5b:55:ee:97:44:a8:b2:
                    bc:db:f6:c1:05:fc:9a:c7:64:9d:47:5e:fe:c2:c2:
                    3d:67:8c:28:94:8b:94:66:ad:fe:93:94:8f:e6:4b:
                    76:9c:a5:db:51:7e:bb:53:4a:40:d0:f0:5f:0d:73:
                    44:5c:23:5f:e2:0b:b9:e4:a8:58:df:7b:2e:ce:ba:
                    9c:33:d4:9d:f1:fd:55:28:08:a5:cc:a1:cd:ba:a3:
                    20:ee:90:98:50:69:ae:c1:a4:f0:5e:a8:29:98:63:
                    00:e6:f4:44:fa:33:6a:63:42:a8:ca:93:91:a8:59:
                    02:51:ba:07:10:9a:d7:04:e1:48:4d:8c:05:1c:40:
                    e8:e6:ae:bc:83:80:8a:29:0f:6a:07:f3:e2:85:a8:
                    00:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:33:87:83:99:03:9F:6A:42:C5:BC:15:B7:DB:81:A3:9C:56:EB:DC
            X509v3 Authority Key Identifier:
                keyid:4B:90:5B:92:CE:ED:0D:40:54:FD:96:C7:CC:FD:5D:E6:6D:8F:62:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:37:8f:77:18:9f:82:a5:77:b1:03:21:b6:a6:26:48:e9:a3:
         5c:c3:a2:78:c1:14:a7:dc:d0:f5:f8:be:af:13:b1:12:8c:09:
         1f:5b:5f:86:02:4c:1e:97:48:2b:ed:0b:52:2d:18:f1:f5:43:
         8a:46:d5:22:a1:3c:bf:45:d8:1f:89:44:41:28:a4:d3:18:35:
         ba:92:7a:3f:70:dd:40:ae:95:5f:e6:7b:ab:4c:9a:05:c9:8b:
         77:41:38:e4:5d:31:78:0f:c6:f1:32:28:9d:f2:03:4c:6a:06:
         27:7f:42:d0:fb:ed:c5:2b:c7:12:9d:da:ac:68:52:fe:99:5f:
         46:bf:06:28:b1:2c:25:0b:86:d4:2a:05:bf:a5:41:e1:4f:71:
         68:59:27:8e:3e:25:83:ec:1d:47:29:25:ba:2d:32:b7:9c:71:
         2d:c8:30:f2:7d:05:a3:81:3f:d6:1e:d1:e3:d5:ff:4e:0c:5c:
         ff:2d:1e:84:6d:96:2e:57:d3:ed:b9:d7:c3:be:39:9b:f1:0f:
         07:c2:7a:c4:48:3f:55:48:93:f6:cc:63:31:6b:32:01:4a:b6:
         75:64:5e:56:b5:fd:90:ee:78:a0:89:df:d4:18:e4:f1:4b:21:
         0c:b9:22:49:da:ed:79:86:75:d2:5d:c8:bf:59:f7:60:4c:ef:
         66:fe:da:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:55:39 2026 by rpki-client