Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
File:                     n_M9TzrAqIeECihM3Bq-t91kLwE.mft (raw, json)
Hash identifier:          /653K3x+6U5V5/s8yZFP4zB5QLcNJb1VH3Lv6Goeh+4=
Subject key identifier:   6B:71:4E:9D:5B:D3:EE:87:34:6F:DC:14:11:62:19:66:97:91:1A:D9
Authority key identifier: 9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
Certificate issuer:       /CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Certificate serial:       01A1DFBA71379C06C22BD3F111B54B7369E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
Manifest number:          1433
Signing time:             Sun 15 Nov 2026 15:01:40 +0000
Manifest this update:     Sun 15 Nov 2026 15:01:40 +0000
Manifest next update:     Mon 16 Nov 2026 15:01:40 +0000
Files and hashes:         1: 2gnx3T23gnHyfvabZqmNGBx5Pow.roa (hash: i0LgVwZpQThjIoASyjjPv5gqtQrxp+pQb/U1rW/VoOg=)
                          2: JhHZEdKJAkP34-ikWpJJrLVsEs4.roa (hash: KnIixUB21MIMX8vhmGnPkdfsgJQVtWJkg4ouIc7Q8O8=)
                          3: L6kvFhmw2HRimiOHYbmI9LP_LC8.roa (hash: bz6jH/jd8xJJNx0vVfwgOgrPiMsJ1ZK1zrtVm+WmTlk=)
                          4: n_M9TzrAqIeECihM3Bq-t91kLwE.crl (hash: uuF3jzD0Thi0D9dHE2lEkIxyXJezgrebE4Zp8lD+xYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:ba:71:37:9c:06:c2:2b:d3:f1:11:b5:4b:73:69:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
        Validity
            Not Before: Nov 15 15:01:40 2026 GMT
            Not After : Nov 16 15:01:40 2026 GMT
        Subject: CN=6b714e9d5bd3ee87346fdc141162196697911ad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4a:47:c9:a3:bc:1e:a3:1c:7b:39:36:58:79:
                    81:62:7d:01:b8:77:29:73:1d:58:8e:5b:f7:fb:8f:
                    56:f5:ce:10:aa:27:8d:28:b3:9b:b3:25:c6:89:18:
                    42:ea:69:d0:72:e6:b6:cc:4f:fa:f5:5b:d0:1b:c9:
                    c2:0f:07:64:8e:5a:af:71:ff:d6:f7:a6:84:cf:6e:
                    57:e7:ad:41:46:f0:d9:09:81:78:08:9a:ae:0d:b1:
                    6b:b3:41:85:a5:f0:b8:d6:29:fe:fe:60:ec:03:47:
                    d3:5a:20:76:a8:fb:99:f9:ff:23:81:9c:9b:40:16:
                    17:13:c9:55:44:a5:36:12:28:f7:00:56:48:89:03:
                    b7:07:58:ce:6a:ee:29:cb:2f:bb:0f:7e:9f:28:dd:
                    da:6a:ad:8c:26:4f:b8:af:fe:c4:f4:06:c6:af:36:
                    c7:17:7b:d4:bc:95:53:20:29:6c:3e:81:ad:9f:69:
                    c8:6e:c4:6f:41:9c:f4:2c:80:e4:c4:c5:7b:dc:b8:
                    19:c9:5e:99:61:14:21:ce:56:a5:0d:71:08:55:c9:
                    27:a5:f3:75:4b:a0:3d:26:75:28:af:54:a7:80:73:
                    f4:0d:65:ed:de:6e:42:79:74:24:33:34:bf:c6:15:
                    50:2f:0b:12:bc:bf:17:9d:9c:54:17:8e:06:8e:8a:
                    e5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:71:4E:9D:5B:D3:EE:87:34:6F:DC:14:11:62:19:66:97:91:1A:D9
            X509v3 Authority Key Identifier:
                keyid:9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:63:4a:bc:ea:f0:7d:a6:d7:ed:61:8f:f8:85:0a:d8:d1:1c:
         33:0d:a5:08:92:e1:89:4e:f6:50:17:d3:ce:d1:18:cd:f0:99:
         10:c0:3d:e2:df:6c:93:68:86:50:d4:94:5d:40:92:ee:4a:50:
         63:32:34:34:89:af:d5:2a:16:9b:1b:cc:b8:d8:27:b5:7b:37:
         cb:fc:9c:a6:96:85:7f:b4:bd:7e:c8:33:1b:c8:74:ca:12:23:
         c3:e8:80:94:ee:1c:67:f7:d8:85:ea:57:40:da:3e:b4:0d:16:
         97:63:9c:3a:ee:8b:91:c3:cf:f9:1e:f9:9a:af:5c:eb:db:bf:
         55:0d:fc:56:36:bb:04:64:be:2b:da:63:b1:6f:54:08:45:52:
         ff:8d:2d:cc:63:c3:90:a8:b4:c7:3d:ae:09:cc:10:b2:3c:fe:
         2f:c4:32:99:83:91:7d:af:72:c7:4c:80:e7:49:34:ce:c5:c9:
         31:31:ac:88:2a:9f:74:7e:6a:fe:88:13:47:d1:0d:70:a1:83:
         87:c8:1e:14:ac:5d:d8:61:72:64:3e:bd:20:08:15:37:2c:e6:
         05:50:13:71:6f:6b:24:2f:b6:d3:7e:7c:86:65:88:3f:be:11:
         ab:36:a2:4a:77:e9:a3:14:2f:a0:7b:64:ef:26:74:74:0f:69:
         66:5c:c1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:01:08 2026 by rpki-client