Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft
File:                     vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft (raw, json)
Hash identifier:          IWE6ibbXE3ZrRvSWA/0RsSibLsEI8NEdyHl5ztLRR/U=
Subject key identifier:   7E:49:A9:51:4C:59:7A:BB:01:CA:D5:FC:6E:17:AD:BB:D7:D2:0D:65
Authority key identifier: BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F
Certificate issuer:       /CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
Certificate serial:       01A1DB6F92DC9A8C8AEB572AF51E0C428721
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft
Manifest number:          1AF6
Signing time:             Sat 14 Nov 2026 19:01:24 +0000
Manifest this update:     Sat 14 Nov 2026 19:01:24 +0000
Manifest next update:     Sun 15 Nov 2026 19:01:24 +0000
Files and hashes:         1: 1JOaqNM9A3nCFLqF-iNDuqob3ts.roa (hash: qr9TO0T1nkwwLSyPbZ6XdvaujTVE8opngK+YtQym/kk=)
                          2: WeUtp_Wo1t_B3_kDLfw7hscjYRk.roa (hash: GpBHGUwjt/PtYZx7u3aJW4dofQfCg23mdeFjGaXOPrA=)
                          3: fDiCNg82Ceatc0-Kb7qP2rEq54Q.roa (hash: OXn/GJfiGWG/hkB4epjpbpxfqCnDFVPW115sflUVJ1Y=)
                          4: vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl (hash: EHcZyIQ84wudD0EvEkRtikMtlLOOqMeOKN5Vpve/vPM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 19:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:6f:92:dc:9a:8c:8a:eb:57:2a:f5:1e:0c:42:87:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
        Validity
            Not Before: Nov 14 19:01:24 2026 GMT
            Not After : Nov 15 19:01:24 2026 GMT
        Subject: CN=7e49a9514c597abb01cad5fc6e17adbbd7d20d65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d8:01:99:9d:02:38:da:12:2b:77:1d:72:da:
                    1c:3a:16:91:36:33:2f:47:d6:9e:ab:9f:cb:63:4b:
                    44:d9:ae:90:c1:f2:4e:68:1f:df:15:68:a3:04:ec:
                    a4:08:4a:7f:d2:bc:4c:ef:5e:73:c7:9c:a6:85:05:
                    50:6e:e8:a3:c6:52:b0:8f:ff:19:7f:39:cd:5b:9c:
                    66:b8:7e:20:22:79:1d:17:60:b6:86:90:ab:30:a3:
                    c8:88:4d:9e:55:2e:af:28:af:f1:5c:c9:2b:85:ab:
                    4a:9c:67:30:ee:48:a6:c1:ca:fb:44:71:27:94:97:
                    13:0f:b1:3c:ae:7b:32:0a:d0:9a:05:14:a5:b0:c1:
                    6b:cd:61:0a:05:47:a8:3e:d5:3c:f3:22:cc:13:7b:
                    26:45:2f:32:19:2f:64:6f:8d:1a:10:69:d7:c9:05:
                    78:c6:aa:41:98:a7:ad:ed:0f:6f:53:47:e6:af:29:
                    b2:12:ba:34:75:1a:c1:b6:dd:f1:ab:7b:d8:16:cd:
                    c4:01:d0:d7:87:f2:bd:fe:00:91:4f:8b:ed:4a:fc:
                    69:9f:9f:29:5c:90:3b:f7:12:1b:3e:a1:3a:46:cb:
                    48:ad:2b:ee:fb:9f:17:1c:8b:4e:3f:01:4d:cb:0f:
                    ce:e2:7d:ef:27:06:28:e6:1b:46:d6:38:07:a9:d5:
                    02:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:49:A9:51:4C:59:7A:BB:01:CA:D5:FC:6E:17:AD:BB:D7:D2:0D:65
            X509v3 Authority Key Identifier:
                keyid:BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:af:16:84:b0:02:7c:35:28:6f:ba:f6:3c:51:ec:d7:fe:1d:
         e4:01:0a:3b:2a:34:9a:7b:0e:5b:ee:64:c2:4d:e3:5c:be:32:
         da:83:6b:0e:80:7b:75:35:57:4e:19:b4:5e:d6:1a:fb:14:9e:
         bd:d0:ae:0d:77:9a:07:7f:88:f4:11:1a:d1:70:24:67:95:81:
         a7:28:e1:18:06:13:4e:33:d8:13:2a:e5:23:bd:5e:50:be:9b:
         0d:4a:a2:08:74:e5:3c:eb:37:95:a7:c1:8b:59:23:1c:cd:93:
         ce:6c:53:2a:ba:39:cd:45:41:91:ed:89:f1:ab:c9:1f:21:b7:
         63:24:3b:83:34:04:02:71:5c:da:1b:3c:e0:21:02:c8:54:02:
         47:26:54:bd:7b:f3:82:7e:07:fe:e3:96:89:d2:ab:3e:a9:38:
         4a:6a:60:51:1e:5a:71:38:ba:c7:06:50:0c:9c:a8:c0:9f:ef:
         70:46:c6:d0:f4:1d:08:47:29:81:99:ac:fa:5b:48:db:00:20:
         dd:04:30:55:0c:ac:88:25:ec:a2:8e:d8:9d:ca:0f:6b:07:cb:
         3f:7d:7f:56:ae:8d:8a:4a:17:e4:72:a5:4f:90:16:2b:bf:4a:
         ae:83:8c:85:4a:35:d5:d3:2f:24:9b:36:af:6e:12:d4:df:75:
         3f:6c:1b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 02:40:39 2026 by rpki-client