Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.mft
File:                     gRAUn9EhMLPNzzWGKw3NuYqUcck.mft (raw, json)
Hash identifier:          NSX5Vk+qFhPDAqh2Nbw5ZLgb+aK0BivbnzzIMhbrLKI=
Subject key identifier:   79:A1:E7:13:EA:CE:1B:33:0F:20:4B:DD:AB:F1:C7:61:74:12:07:B7
Authority key identifier: 81:10:14:9F:D1:21:30:B3:CD:CF:35:86:2B:0D:CD:B9:8A:94:71:C9
Certificate issuer:       /CN=8110149fd12130b3cdcf35862b0dcdb98a9471c9
Certificate serial:       01A1E027BB2BB62886EBA1632B988D2281E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.mft
Manifest number:          1537
Signing time:             Sun 15 Nov 2026 17:01:02 +0000
Manifest this update:     Sun 15 Nov 2026 17:01:02 +0000
Manifest next update:     Mon 16 Nov 2026 17:01:02 +0000
Files and hashes:         1: 8SQmgdkK0KsfXA0AaqFVFyW45As.roa (hash: fxN83lzpsUSm7eGjIimHE3kwgJziubYYBHi6/BB/u4I=)
                          2: A6iNMP0GraSgW6_j4orJfWQjE0o.roa (hash: lSRG12LN2giLsE/xo290FIB2nk9ZuI4BSXvCilXtaZM=)
                          3: Pq02UuVgPsEQJnxfmqHmAw9ZrRY.roa (hash: Z4q0gZP6TZCVbicLemekk+usml+xCUXFfIPrfXm7A+k=)
                          4: gRAUn9EhMLPNzzWGKw3NuYqUcck.crl (hash: +FUx8rn8mKoAmv76O14eL6IvbNZ3bxj9ZGszO8KXK2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:e0:27:bb:2b:b6:28:86:eb:a1:63:2b:98:8d:22:81:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8110149fd12130b3cdcf35862b0dcdb98a9471c9
        Validity
            Not Before: Nov 15 17:01:02 2026 GMT
            Not After : Nov 16 17:01:02 2026 GMT
        Subject: CN=79a1e713eace1b330f204bddabf1c761741207b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6c:67:81:e9:8e:35:bd:10:dd:c2:34:6e:c3:
                    e9:a5:58:a9:36:75:59:81:e0:ac:ca:02:0b:f4:1a:
                    f4:ba:dd:14:ff:46:aa:60:49:22:32:7b:51:40:02:
                    70:79:1a:62:d9:41:cb:23:3d:8f:40:88:00:82:a8:
                    09:86:6d:89:8c:db:9d:58:f1:5a:07:77:b9:0b:5a:
                    d0:f1:24:e6:a3:cc:0b:c5:3c:7c:32:f2:dd:ef:17:
                    d2:a2:f3:b0:6b:92:13:98:05:7b:b9:ba:a3:4e:e2:
                    3b:c1:26:27:c4:78:3b:4c:18:92:a9:ea:ae:b3:e1:
                    41:e2:10:88:81:7c:a6:7e:67:61:6d:58:bb:c7:fd:
                    93:d9:5d:bb:c8:c9:20:11:74:38:97:aa:0e:2d:b9:
                    c0:2b:50:1b:0f:be:2e:a1:51:2c:40:e8:e3:74:8b:
                    9a:89:cf:51:a2:ae:27:e1:88:4a:91:aa:73:11:56:
                    33:94:bf:4e:0b:11:73:39:9a:33:a3:68:59:1d:a1:
                    5b:20:22:8a:0b:f8:b2:4f:71:31:0a:26:e1:d7:31:
                    da:38:54:8b:c0:f5:21:3c:2b:ee:12:64:8d:07:23:
                    32:0f:77:26:3a:96:2a:1f:a0:31:d9:57:c3:79:67:
                    b3:c2:03:a9:12:c4:95:20:b6:c1:fe:e4:3e:b5:c8:
                    f5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A1:E7:13:EA:CE:1B:33:0F:20:4B:DD:AB:F1:C7:61:74:12:07:B7
            X509v3 Authority Key Identifier:
                keyid:81:10:14:9F:D1:21:30:B3:CD:CF:35:86:2B:0D:CD:B9:8A:94:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:af:99:96:ad:de:ee:d7:b9:a8:fc:02:6f:62:a4:59:bc:ba:
         ba:6f:cf:d5:af:21:ff:e5:e0:67:ae:97:e2:af:87:26:88:b4:
         01:47:32:f1:60:9c:cd:5e:7c:07:23:a4:40:cc:53:4b:45:01:
         70:09:8e:a4:98:ae:ad:97:d0:85:a1:a4:cf:b1:08:cb:2f:d2:
         b4:12:d4:fb:62:de:f4:80:7b:76:20:d9:f4:6b:88:f2:4d:73:
         40:8d:87:4a:da:73:d0:f5:82:76:d8:89:6c:3f:e2:fd:fe:47:
         5f:31:b4:49:66:c1:68:66:fd:1c:2c:84:ae:9a:a5:c8:0d:2e:
         99:a4:56:12:b2:57:74:2a:81:f8:f4:66:22:26:33:56:a4:fe:
         c2:2d:35:a7:cb:d5:9a:3b:9f:02:72:5e:cd:fc:22:b1:99:89:
         d9:fa:b0:fc:96:07:88:d8:c6:fc:c3:98:0a:c8:70:03:46:b5:
         0c:f5:03:f6:e5:80:c5:54:3b:d9:c1:c9:ef:a9:96:58:60:0c:
         bf:7e:22:9f:c6:9b:aa:b9:75:4f:63:80:d5:46:69:ab:a8:ff:
         db:d0:13:d2:31:d1:26:b9:a4:c4:61:09:d1:c6:31:4c:15:51:
         9b:2c:d7:ed:cc:05:c8:72:1c:b3:73:4b:fc:a1:17:7a:53:0d:
         0e:ae:d1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:51:59 2026 by rpki-client