Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft
File:                     apwfqpeD36srelPaP7D970zP6uU.mft (raw, json)
Hash identifier:          Y86IfsMG5mZlRJ3RZ+a6sDbCcnP6Wpsvyu3Cx5zZ29o=
Subject key identifier:   3F:3E:A2:36:93:A2:14:C7:6D:45:7D:3F:79:E7:00:49:22:2B:71:9E
Authority key identifier: 6A:9C:1F:AA:97:83:DF:AB:2B:7A:53:DA:3F:B0:FD:EF:4C:CF:EA:E5
Certificate issuer:       /CN=6a9c1faa9783dfab2b7a53da3fb0fdef4ccfeae5
Certificate serial:       01A1DE7040F21BC66399A1B494A63EE29A71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft
Manifest number:          060F
Signing time:             Sun 15 Nov 2026 09:01:00 +0000
Manifest this update:     Sun 15 Nov 2026 09:01:00 +0000
Manifest next update:     Mon 16 Nov 2026 09:01:00 +0000
Files and hashes:         1: 4zGh0MUBekk_HwtHmTkO_YAQ85M.roa (hash: icZiFcOIbyfJDrtWOCLjWTmQXRjfFoXv0NM7bdtAKsM=)
                          2: DQFOw0x8RJL47XlL4ZturBkmc6E.roa (hash: R/q0l9NVDtxc2lMCCEWPf2Muc4aJ1zn9HBgJtXqaF0o=)
                          3: LePh5vrzBhoNO_6lU5I-FVwrIes.roa (hash: vYighBqDvO9MOWcU3J1pLlniKaytN1uAuJFxTtn+okE=)
                          4: UP2Wk7sOC_pJ-r2D-fCXTCeDSaE.roa (hash: ZCG1VWbK0Rc7KJ4YKyLYUpNJzUQV3wJoH1bAvG5hfNM=)
                          5: apwfqpeD36srelPaP7D970zP6uU.crl (hash: ehO3NZe8Sqk+F6mdnwvVio4CFzJOVlQ9gKku6vL6npQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:70:40:f2:1b:c6:63:99:a1:b4:94:a6:3e:e2:9a:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a9c1faa9783dfab2b7a53da3fb0fdef4ccfeae5
        Validity
            Not Before: Nov 15 09:01:00 2026 GMT
            Not After : Nov 16 09:01:00 2026 GMT
        Subject: CN=3f3ea23693a214c76d457d3f79e70049222b719e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:72:34:da:48:34:5e:6a:e5:c3:d3:1e:c1:18:
                    9a:1b:38:59:0e:cd:5d:c4:b2:c1:88:d9:f2:8a:19:
                    e3:6e:f7:e9:a4:46:6a:9c:0b:77:22:47:b6:a0:8d:
                    31:63:b5:dc:cb:20:08:ba:7b:56:cb:09:06:5e:00:
                    55:a2:80:3a:82:e2:73:19:af:b0:70:26:08:e0:f3:
                    5e:4d:4c:a4:b7:e8:68:dc:25:1f:58:ea:9c:66:88:
                    07:55:91:5c:a1:6a:0c:94:92:f9:0e:59:e0:4e:2a:
                    be:8e:f8:ef:d6:af:52:d2:35:71:03:f0:12:7e:f2:
                    e6:b4:44:b3:72:54:f8:58:28:88:e3:e4:0d:79:13:
                    0c:1d:a9:42:ed:7a:b9:11:3d:d8:27:a3:87:f4:90:
                    40:e7:3e:c9:08:23:77:79:ba:e8:a8:10:ca:b4:b8:
                    57:d3:6f:ae:26:ff:ba:d8:33:39:0c:81:58:40:93:
                    9b:4e:42:2e:5f:f0:1e:ac:eb:b1:0e:e7:5d:f3:d0:
                    7c:c8:8c:ca:69:4e:a2:b2:fe:d3:aa:2f:e8:ef:4f:
                    1a:5f:f8:a8:d8:a2:fa:90:e4:91:74:b7:f5:27:cb:
                    3c:3f:88:9a:e0:87:f8:d4:27:73:f1:7f:ca:ff:06:
                    2c:bc:88:f4:4f:c5:d4:bd:b4:f8:be:d0:87:c1:c1:
                    be:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:3E:A2:36:93:A2:14:C7:6D:45:7D:3F:79:E7:00:49:22:2B:71:9E
            X509v3 Authority Key Identifier:
                keyid:6A:9C:1F:AA:97:83:DF:AB:2B:7A:53:DA:3F:B0:FD:EF:4C:CF:EA:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:d8:e5:71:40:48:15:4f:2f:ee:73:59:cf:6a:b8:4d:50:d8:
         3a:37:7c:b7:22:e0:f0:98:08:a2:7d:59:12:25:a2:31:5b:f7:
         59:87:ed:28:fc:a3:a7:f1:3a:47:c2:9b:2a:3e:b2:06:3c:45:
         c0:9c:b9:c2:e0:89:c6:f7:df:05:4d:f7:ab:fe:17:f4:71:3a:
         4d:28:9d:59:d8:fe:85:14:29:08:d3:a3:4a:09:5f:62:92:9c:
         44:d8:15:87:91:b9:a9:32:80:b0:7a:91:c8:4d:1e:9b:e2:09:
         48:f7:d5:53:3e:47:09:e5:85:81:c5:21:e1:9a:74:9b:d4:5d:
         4d:bf:06:53:7a:93:eb:8d:6c:73:69:ff:de:20:4d:1e:6d:54:
         46:12:b4:f1:70:61:fc:6b:63:b3:7c:d4:9d:c4:32:78:4c:77:
         f2:55:b7:36:c6:5a:a0:40:df:4f:6b:79:7a:8c:9d:95:8d:0a:
         6d:7c:c2:44:43:fe:28:b3:eb:02:08:c5:3f:ad:83:24:75:b0:
         49:01:7b:b8:35:5d:cd:69:3c:80:7e:db:4b:22:bc:b3:69:a3:
         51:c7:70:8c:da:8b:95:cf:00:2b:f2:6d:1d:f0:9b:8e:21:68:
         e2:12:31:94:ba:05:5b:fa:c8:2e:7f:f7:81:4f:19:13:62:e7:
         4a:ec:98:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:19:48 2026 by rpki-client