Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
File:                     MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft (raw, json)
Hash identifier:          B876qQydTKxxA1MinY49GnzotcxJajwoGsbKtAs1EIE=
Subject key identifier:   4E:3E:61:6C:3A:F4:66:9B:D0:BB:FB:DB:1C:7D:D0:2F:EC:E6:08:48
Authority key identifier: 32:26:39:B3:5E:5D:9D:0F:B3:69:6F:E2:FD:61:CB:6F:4C:3F:A5:04
Certificate issuer:       /CN=322639b35e5d9d0fb3696fe2fd61cb6f4c3fa504
Certificate serial:       01A1DF4C597F8BC8FD2439CB83AD321DE2A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
Manifest number:          1490
Signing time:             Sun 15 Nov 2026 13:01:24 +0000
Manifest this update:     Sun 15 Nov 2026 13:01:24 +0000
Manifest next update:     Mon 16 Nov 2026 13:01:24 +0000
Files and hashes:         1: AczQ5m07bagbCSpYHKyOOUGJiuU.roa (hash: ZZkvh7a+nFDXqMju+v84npxtkZQE+y45PmWF7YuV5vg=)
                          2: E50dRzelevPp0RPUUn-X1whUhzs.roa (hash: ESKLNPEXcUQlYreIgYSRyGc6RpOOENWjDiinLW02gqM=)
                          3: KnXc9wIdUwOgGPZNVY_TSbLRRoY.roa (hash: Ur+szLOeyaAy0p6WFfKNCA4+hET9D0q8Orh268HfdLU=)
                          4: MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl (hash: vVsD/+xnFoLAoTs9QLs52buoCvhmphuDsQ/QuEuTsF8=)
                          5: _YrGQaV-xv0pIG914t75tY-lgq4.roa (hash: mceOdmff8pDALeUaOfa99NehQO4QsbAd1TsnHGDmlpY=)
                          6: fyxsLRJZFn7CTFSJ2VnoPkiPR2s.roa (hash: 8HFUKsLTWzFpdFnaVvVRZkBC3eF7vcFOlN74+dbWE3g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:4c:59:7f:8b:c8:fd:24:39:cb:83:ad:32:1d:e2:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=322639b35e5d9d0fb3696fe2fd61cb6f4c3fa504
        Validity
            Not Before: Nov 15 13:01:24 2026 GMT
            Not After : Nov 16 13:01:24 2026 GMT
        Subject: CN=4e3e616c3af4669bd0bbfbdb1c7dd02fece60848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:43:83:4a:5b:cf:6c:37:1f:67:27:fb:e0:69:
                    82:5f:23:2d:b0:35:8d:89:80:39:24:c4:4e:b6:9c:
                    71:a4:41:77:11:03:74:2a:f5:a5:96:8e:99:82:6a:
                    35:76:2a:c2:bf:98:6b:6b:98:12:d2:30:e8:fa:2b:
                    7c:c6:bf:ae:67:20:2b:47:ae:cb:df:75:7f:96:80:
                    36:b2:53:45:1e:81:b1:17:79:eb:31:3d:5b:1c:49:
                    3d:42:d4:30:6d:ac:ce:3a:b4:18:a2:57:ea:dc:e2:
                    e4:9c:a4:26:d9:92:ea:64:88:ae:36:38:65:6a:ff:
                    ce:35:a5:10:f6:f3:32:5e:5a:43:90:4c:e1:c9:b9:
                    06:0f:00:21:de:5c:94:e9:e4:dc:69:94:b6:4f:3f:
                    d5:ae:0a:21:5a:e0:a0:11:b1:eb:c6:ba:4e:c6:ea:
                    dd:02:2f:e5:ca:bc:33:76:16:cd:9e:f8:6c:31:69:
                    bb:0f:6e:5f:bb:7b:4a:03:ed:72:33:d5:3c:ea:7a:
                    aa:2c:18:5f:38:cc:4e:f6:c1:09:ce:f6:af:47:dd:
                    84:6d:12:d5:e3:0d:b7:a1:80:29:97:cf:33:0e:3c:
                    5a:ff:6f:a2:50:20:f3:0d:0a:49:52:ab:50:74:96:
                    55:1d:fe:ac:fe:53:13:e9:02:02:64:9b:25:fc:27:
                    7c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:3E:61:6C:3A:F4:66:9B:D0:BB:FB:DB:1C:7D:D0:2F:EC:E6:08:48
            X509v3 Authority Key Identifier:
                keyid:32:26:39:B3:5E:5D:9D:0F:B3:69:6F:E2:FD:61:CB:6F:4C:3F:A5:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:8a:16:7f:62:f2:ea:90:18:d1:71:52:7e:ec:9a:ab:63:ac:
         72:b0:fc:9d:a7:4a:db:31:d7:ad:08:08:61:3a:cc:3a:2e:95:
         e4:ab:6c:53:22:7f:11:cd:54:ea:16:89:86:5b:27:ab:76:c3:
         e1:39:b4:1b:c9:44:87:a1:9c:4e:88:c5:ce:78:8a:b5:6c:2c:
         ce:b9:1f:d9:51:10:15:39:39:a6:95:87:ac:40:22:13:a1:81:
         b2:dd:b8:59:1a:4e:c3:ba:b3:08:01:c6:a3:8a:0e:59:f5:e9:
         3c:02:47:53:b9:f9:be:7d:ce:c1:97:de:7d:15:ac:4d:2e:88:
         cd:45:6c:45:2a:3e:58:2c:13:bc:33:ff:0a:41:3f:81:0f:4d:
         af:4b:a7:36:a6:c6:69:27:c6:7a:16:fd:0d:87:c2:92:02:30:
         4f:ba:95:24:ac:41:65:a7:ce:5e:0a:b8:64:d2:34:c7:c3:7b:
         8b:26:2a:07:a4:cf:b2:47:69:ed:7c:34:01:b9:27:49:64:d6:
         a5:25:7a:2c:f2:6d:9d:06:35:9d:26:95:12:2a:c7:4b:77:52:
         f8:8e:63:b2:25:fb:80:d0:d1:5d:a3:6b:a1:d8:b5:bd:19:cb:
         4a:01:8d:91:24:4f:18:28:1f:dd:a6:44:dc:ab:3b:38:57:32:
         fc:0a:5e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:43:53 2026 by rpki-client