Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft
File:                     1-F0E5sULqQb5rBHC51vz9dEEKmI.mft (raw, json)
Hash identifier:          NcJAQtKtF+yYSDqrEOLO0Bv+TEMexz8eFiXXzCl32H4=
Subject key identifier:   E7:E9:EB:F7:17:2F:E1:79:79:3F:0B:D6:9C:82:25:FE:21:3C:08:3A
Authority key identifier: F8:5D:04:E6:C5:0B:A9:06:F9:AC:11:C2:E7:5B:F3:F5:D1:04:2A:62
Certificate issuer:       /CN=f85d04e6c50ba906f9ac11c2e75bf3f5d1042a62
Certificate serial:       01A1DF8396387C7DDA20F44B9E0988160972
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft
Manifest number:          1AFC
Signing time:             Sun 15 Nov 2026 14:01:45 +0000
Manifest this update:     Sun 15 Nov 2026 14:01:45 +0000
Manifest next update:     Mon 16 Nov 2026 14:01:45 +0000
Files and hashes:         1: 1-F0E5sULqQb5rBHC51vz9dEEKmI.crl (hash: wFAZY3tgYwBailXPdSVWsAZu3lU5285mCBEUL9kgyoQ=)
                          2: BoWpyd3JOZi5Y_vkexanhVBW_Ag.roa (hash: TuPfakwU0uajSPw+NwpFbys7R8R7VeHveufD46rtpys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:83:96:38:7c:7d:da:20:f4:4b:9e:09:88:16:09:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f85d04e6c50ba906f9ac11c2e75bf3f5d1042a62
        Validity
            Not Before: Nov 15 14:01:45 2026 GMT
            Not After : Nov 16 14:01:45 2026 GMT
        Subject: CN=e7e9ebf7172fe179793f0bd69c8225fe213c083a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e5:a4:0b:47:f7:52:a9:77:4c:70:44:d3:75:
                    8f:02:63:6c:7c:f8:92:dd:4c:ac:7d:55:dc:d6:78:
                    4b:ea:4a:13:a1:48:63:fe:ac:9d:2c:f8:f0:a2:e7:
                    f8:41:6a:fd:0d:3f:1d:c2:17:93:68:80:5b:37:11:
                    24:e4:a3:c8:4b:56:f4:58:dd:63:bf:2f:41:c4:31:
                    fb:04:6d:74:c9:95:38:17:39:38:4d:6b:48:6b:8f:
                    d6:ad:60:7a:71:98:03:a9:45:a1:f7:8e:35:72:41:
                    14:2f:6b:c2:00:bc:d4:e0:94:89:cb:d9:90:54:fa:
                    91:85:e3:36:31:36:00:0b:1b:f5:94:12:29:c4:c9:
                    13:04:e8:70:a1:45:36:e4:cd:66:0c:61:7e:82:54:
                    67:ea:1c:d7:cd:28:dc:c8:c5:9b:a1:03:f2:fe:f1:
                    dd:55:01:96:0c:e7:0f:4c:10:e7:b1:78:fa:0e:f8:
                    aa:17:8b:56:c5:eb:b6:29:14:4a:c8:5c:9f:9b:18:
                    81:32:37:0c:19:e9:a5:af:71:17:c9:24:34:25:07:
                    95:88:d1:53:e3:c0:c0:84:10:fc:e0:d4:79:57:27:
                    8b:15:21:3f:9a:a3:56:08:24:49:73:82:2b:4c:4a:
                    7d:aa:4c:b0:3b:1f:fa:37:49:59:f9:d7:d4:7f:da:
                    b9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E9:EB:F7:17:2F:E1:79:79:3F:0B:D6:9C:82:25:FE:21:3C:08:3A
            X509v3 Authority Key Identifier:
                keyid:F8:5D:04:E6:C5:0B:A9:06:F9:AC:11:C2:E7:5B:F3:F5:D1:04:2A:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:85:2f:47:8b:08:53:e4:77:1a:67:f1:a7:20:d0:f4:c8:3c:
         cc:2c:e8:73:a8:9b:90:af:09:b5:ee:48:bc:e8:90:fd:7e:a6:
         89:14:2b:15:b7:b0:e0:e0:b2:d2:f2:51:1d:95:68:6a:17:1a:
         1a:b0:c7:a6:17:69:d4:0d:5d:6a:f9:37:94:ca:7c:c0:56:16:
         b8:4b:3c:41:77:ff:03:c7:1a:e1:de:27:65:87:13:12:e5:3c:
         a2:a3:a7:fb:3b:19:3a:c7:39:41:6a:1c:af:de:1f:2b:12:7a:
         6b:e0:ce:c2:bb:2b:54:ca:7e:6e:97:ba:30:ed:84:cf:1b:f4:
         08:e8:7c:81:84:b2:89:ba:66:d4:a3:ba:6b:d8:3a:00:de:58:
         84:cf:f8:28:9c:97:a8:a9:00:f7:1a:a3:72:c3:de:f9:94:41:
         e9:a6:7b:f0:28:83:ff:fa:be:d3:8d:67:5c:bd:fa:ff:12:7c:
         1c:82:41:f4:f8:1e:8a:f7:55:ab:b4:a1:e5:60:c8:7a:5c:41:
         7b:ef:9c:18:e5:9d:ac:34:c3:ec:8f:cc:b1:5d:c5:e9:ca:74:
         9e:a4:75:5e:ec:1c:82:4f:bd:ad:ad:d4:98:11:30:9c:a0:39:
         a6:05:83:d0:c5:d6:03:46:d5:74:1a:48:8e:4e:36:99:57:96:
         b4:94:76:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:20:20 2026 by rpki-client