Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.mft
File:                     MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.mft (raw, json)
Hash identifier:          kc8gEEiovTjbL+RtAM1hpGnclSxRSOJhq/E/gE2ZZmI=
Subject key identifier:   4D:2B:AF:6F:9A:63:DD:DE:48:FF:17:40:C7:4A:AB:C3:6A:99:51:E7
Authority key identifier: 31:25:2C:E3:07:78:1D:03:19:FC:D7:49:4F:A6:4F:26:04:50:16:AC
Certificate issuer:       /CN=31252ce307781d0319fcd7494fa64f26045016ac
Certificate serial:       01A1DFF1639E0AF3D2BDC015D3DBEEA4168C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.mft
Manifest number:          03AF
Signing time:             Sun 15 Nov 2026 16:01:41 +0000
Manifest this update:     Sun 15 Nov 2026 16:01:41 +0000
Manifest next update:     Mon 16 Nov 2026 16:01:41 +0000
Files and hashes:         1: MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.crl (hash: 1JVjpgv5UnJTbmVyUZVDKfOPzhTVVrBCq6JAVLurslk=)
                          2: aIZV0uRK5CsOfYDj0JIzyKbeZkw.roa (hash: 4yLd5mUThQNWdy1JWFgNhTCT5EuvmfZ9l6+q6YACcrQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:f1:63:9e:0a:f3:d2:bd:c0:15:d3:db:ee:a4:16:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31252ce307781d0319fcd7494fa64f26045016ac
        Validity
            Not Before: Nov 15 16:01:41 2026 GMT
            Not After : Nov 16 16:01:41 2026 GMT
        Subject: CN=4d2baf6f9a63ddde48ff1740c74aabc36a9951e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c9:87:1b:d9:0f:e2:1e:53:6e:61:05:b5:eb:
                    21:1d:e4:72:52:53:66:ef:e9:9b:df:30:01:70:53:
                    6d:54:79:f2:e0:b1:72:43:d2:1c:eb:57:c7:fc:28:
                    8d:17:65:0e:e5:fd:84:14:a2:ee:5f:8b:43:b0:a0:
                    8f:11:93:6e:c1:5d:52:2c:de:2e:0f:b8:cb:ed:05:
                    13:b9:00:ba:1e:c1:e4:b0:9d:8e:8e:b7:da:cb:3f:
                    17:45:25:c1:c7:e7:5a:c0:51:72:5f:91:12:47:9c:
                    ed:f1:36:4b:59:49:ea:73:62:a3:e9:08:d4:3a:8c:
                    b3:0b:37:9e:b4:13:da:6c:77:84:8f:85:38:7e:d1:
                    7e:e5:c7:d6:9b:cb:f6:21:a6:9a:08:81:a7:83:29:
                    16:fb:3a:92:11:2e:ff:9c:9f:33:ab:d1:b2:09:c1:
                    23:7d:14:d1:89:dc:4b:8e:b9:5f:5f:fd:3c:37:8d:
                    8c:a4:22:e7:58:cd:f9:af:40:44:78:6b:fb:d6:39:
                    84:98:36:17:dc:f4:f9:4c:d5:39:3d:fa:cb:aa:bd:
                    fc:d8:17:b4:fc:be:32:9a:d7:e0:7c:54:dc:d4:67:
                    79:10:76:a6:24:30:3b:b5:12:a5:9d:84:6b:e5:fd:
                    d3:71:a8:ac:61:82:12:0e:ab:2e:80:61:b5:cc:6e:
                    4f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2B:AF:6F:9A:63:DD:DE:48:FF:17:40:C7:4A:AB:C3:6A:99:51:E7
            X509v3 Authority Key Identifier:
                keyid:31:25:2C:E3:07:78:1D:03:19:FC:D7:49:4F:A6:4F:26:04:50:16:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:27:8b:15:9a:10:0e:8a:ee:63:6f:14:6c:1f:ad:5c:77:3a:
         67:38:db:da:3f:67:c1:53:c2:d5:8a:de:2f:f8:e9:a2:bc:10:
         68:2f:fe:b2:cc:e0:94:64:f7:cc:64:6a:7e:14:39:58:a8:b6:
         db:cc:d1:b8:2b:06:50:19:20:ff:06:a7:6e:82:e5:f3:0b:be:
         8c:0e:fb:d8:a8:55:63:07:a4:2a:3e:49:b2:0c:64:db:ad:25:
         2e:4a:d3:ad:01:17:14:73:97:4c:99:57:18:2e:95:ea:31:13:
         bc:9c:06:45:62:de:24:85:13:f6:96:8a:fa:2f:61:1c:da:49:
         ed:8b:77:04:a2:34:aa:26:05:dc:55:ad:2c:8a:10:61:2c:d8:
         c9:76:17:13:2c:81:3d:7c:2e:32:91:8b:de:06:42:36:86:b7:
         a4:82:ce:07:5b:4c:07:61:8a:44:e1:34:8c:46:e4:e7:8f:8d:
         c1:ea:7f:48:8d:2a:34:b5:8e:9e:b0:c6:70:75:cc:91:b7:00:
         d0:18:d3:1f:96:d8:9c:87:0e:cd:24:49:3a:8e:6f:49:33:44:
         46:ce:ea:07:34:93:29:20:3f:c4:ac:2d:3f:17:06:de:7c:64:
         cd:bb:7a:b2:d3:29:43:f2:f4:d3:ad:f1:cd:36:aa:0b:b2:be:
         bf:8d:6b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:11:20 2026 by rpki-client