Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
File:                     dzalyFoI2AdJBBy5z6UX-31Ym6g.mft (raw, json)
Hash identifier:          waLtIbxAbE5+0BDq+Ro+L/5AF1TmBkEOHMP5aR7Bj+4=
Subject key identifier:   58:C6:E6:A0:A6:10:92:07:EE:DD:02:2F:F4:6B:6D:05:D2:01:0D:FB
Authority key identifier: 77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8
Certificate issuer:       /CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
Certificate serial:       01A1DEA73309F7F89D059178EA10D51E87D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
Manifest number:          1B04
Signing time:             Sun 15 Nov 2026 10:01:01 +0000
Manifest this update:     Sun 15 Nov 2026 10:01:01 +0000
Manifest next update:     Mon 16 Nov 2026 10:01:01 +0000
Files and hashes:         1: F-CmXISe8_wy3eRoL0KRLsrxsXE.roa (hash: UCcyvZA9JM0sa9RbXSB/RJ7CyrNNZcFxjhxeu1LfJcA=)
                          2: PAja4hjsJ8MQANg3sK1YfTlvaJQ.roa (hash: FIbqd2XK2BTIGA9oFREaVlM92WRa45cXlUCU71SKJfk=)
                          3: WU9_Bg7MRX2JICB9SeOwvcZbOag.roa (hash: qcY3U3QmyFWt8nMp8jcO6HAmRnTyhZhKK7zRNJxKVks=)
                          4: dzalyFoI2AdJBBy5z6UX-31Ym6g.crl (hash: 0JdEc4+8nMOQe4S0l00ZfPeWREn9YNwZlPtO3fffDxo=)
                          5: gYsdgAs4KIaJroqJZMhZmwRNn38.roa (hash: t90AwEAZ729TPglZyxHbnIWUY3pMyQTtaWuzn+iV9DQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:a7:33:09:f7:f8:9d:05:91:78:ea:10:d5:1e:87:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
        Validity
            Not Before: Nov 15 10:01:01 2026 GMT
            Not After : Nov 16 10:01:01 2026 GMT
        Subject: CN=58c6e6a0a6109207eedd022ff46b6d05d2010dfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:31:b6:92:ea:7f:f1:de:86:3d:2f:c6:e0:17:
                    d7:27:d1:37:33:4a:80:95:8b:21:27:eb:9c:7c:c2:
                    b2:21:e1:69:4a:76:0f:ad:13:17:2b:d7:1f:c3:9f:
                    a5:cb:f6:e0:98:9a:07:e3:ce:3d:70:7f:47:ca:04:
                    12:20:ac:2d:53:43:05:a9:8f:79:01:72:d3:2a:6a:
                    17:2d:17:e6:67:a1:55:40:96:91:f5:f4:8c:26:67:
                    81:4a:bb:48:50:df:69:fa:be:dc:88:a2:d3:e6:ef:
                    0f:74:ff:57:12:31:30:2c:d5:f9:fc:d8:4d:ac:4e:
                    9d:a5:dc:80:2f:34:b4:76:be:95:de:59:9e:b2:d5:
                    4f:82:5c:73:79:21:32:3d:34:b5:42:55:8f:19:a3:
                    d0:61:ce:0b:b4:01:ae:9f:4b:d5:f2:09:cc:b2:3a:
                    97:73:99:56:09:1c:65:81:51:9d:b8:09:b2:d1:e4:
                    17:8a:ed:69:f5:8a:8c:bd:53:fa:e5:f3:0e:ab:37:
                    d7:ca:81:95:c2:d9:04:d9:aa:87:7f:e8:78:42:5a:
                    a7:d7:06:bb:00:87:54:11:d5:eb:99:21:ad:1e:15:
                    04:d2:87:0c:fa:62:f6:b1:d0:1e:0b:b7:0a:fb:5a:
                    54:86:54:4d:b6:d2:b5:e3:6a:66:c3:49:9f:fc:41:
                    4b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C6:E6:A0:A6:10:92:07:EE:DD:02:2F:F4:6B:6D:05:D2:01:0D:FB
            X509v3 Authority Key Identifier:
                keyid:77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:d7:1a:0b:be:7d:6f:bc:99:f5:17:06:27:07:a7:b3:a1:ce:
         eb:25:e5:66:3f:bd:1f:4b:7e:34:40:e6:30:b8:6d:3e:36:ab:
         13:20:9b:f7:c5:45:57:84:26:9e:6b:47:96:45:e7:58:78:15:
         58:64:a1:1a:43:e3:e8:58:d2:25:fb:99:0b:fe:c1:ee:59:e0:
         21:3e:49:d5:52:99:a2:2b:75:cd:bf:d3:47:ea:c7:d4:a7:db:
         74:79:fe:af:8a:a9:0a:87:54:85:ca:01:50:62:47:21:fe:75:
         74:21:96:c5:5c:6a:3d:2b:b5:c9:ae:f0:9d:31:83:7c:4b:0e:
         25:9f:28:a6:31:8a:0b:ce:18:3a:cb:c5:5b:37:46:92:a5:6b:
         20:02:95:3f:89:27:c9:fe:fb:b8:3e:8c:6b:b3:33:29:09:84:
         d6:93:71:29:52:0d:5b:44:79:e2:12:00:6f:3c:e9:74:64:5b:
         49:3f:43:46:fc:29:43:94:77:43:23:05:bf:a9:3f:d7:ec:c0:
         3d:ff:de:24:c2:cb:46:fb:1c:df:ed:d5:4f:c6:3f:c9:b4:3a:
         1a:eb:bc:2f:1a:bc:ef:91:79:2f:7d:a6:52:0b:39:63:ff:ce:
         32:ed:57:4f:31:c3:44:71:d7:51:ef:6c:64:0e:bf:ae:a9:1b:
         6b:7b:00:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:32:04 2026 by rpki-client