Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
File:                     sL_SyF5redRg5mDPlmTe5V3MyMw.mft (raw, json)
Hash identifier:          dWCCfQsherpiekU6vgEkFBjA7EcPTryWaKe/G5VYJrA=
Subject key identifier:   79:B3:48:B8:23:FA:23:63:B0:C0:E9:66:B3:74:68:FB:32:ED:36:10
Authority key identifier: B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC
Certificate issuer:       /CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc
Certificate serial:       01A1E09627A3D480F58B8C074C52C36CBE1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
Manifest number:          13D0
Signing time:             Sun 15 Nov 2026 19:01:39 +0000
Manifest this update:     Sun 15 Nov 2026 19:01:39 +0000
Manifest next update:     Mon 16 Nov 2026 19:01:39 +0000
Files and hashes:         1: 1pIm4CEu_J6GPn1TUy1UPhKMBUk.roa (hash: kC5aY81+7wV5FaAuCbcDPO88uURjqA0og191H8ou4nk=)
                          2: IArcm7KHrcc-PY-XbMM0EYnJC8o.roa (hash: D8OnazQ4CkBXy0mTUKLIq9zAP3v8FKdV/2bmVQK5YE4=)
                          3: Wsun9qUEkz7Qte-mPAle0T2WkOc.roa (hash: 3L85Zuxdwbe+qNboOx36lUzHEqWROzqfxPyAEkPek0w=)
                          4: sL_SyF5redRg5mDPlmTe5V3MyMw.crl (hash: H7kRYDPcySv3eliRIZcffc+dSTg4GiY+Mc2zE4C9Ws4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:e0:96:27:a3:d4:80:f5:8b:8c:07:4c:52:c3:6c:be:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc
        Validity
            Not Before: Nov 15 19:01:39 2026 GMT
            Not After : Nov 16 19:01:39 2026 GMT
        Subject: CN=79b348b823fa2363b0c0e966b37468fb32ed3610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:6a:43:09:5d:26:8f:4a:5e:92:a1:9a:3d:0f:
                    46:85:37:f8:3a:af:bb:1b:70:41:8a:cf:ff:8a:1b:
                    d2:73:65:eb:95:be:d7:1f:58:e1:f5:cd:8a:3b:df:
                    44:78:c6:a9:a9:37:b3:14:b7:df:9b:41:fc:bb:cf:
                    e1:84:00:3d:d4:52:09:34:73:28:c2:53:5b:0e:84:
                    5a:81:f0:13:b3:95:8d:fe:ce:ba:77:6e:9f:8a:70:
                    4c:6a:ab:91:fe:46:85:c3:fe:cc:d5:1d:ba:a5:bb:
                    50:24:80:49:f0:fd:9b:44:81:54:30:56:b1:52:44:
                    cb:c5:c1:af:e9:4e:7a:6b:fc:b5:61:55:d3:6b:90:
                    11:24:5c:c8:c4:ad:64:83:03:69:ba:6e:1a:a9:10:
                    e4:6f:43:f0:29:9a:ac:fb:de:46:36:40:ba:ff:1b:
                    63:e8:68:c2:14:6c:2f:f4:41:b8:ba:b1:1d:7a:e1:
                    91:9e:91:ab:0b:b7:78:e8:c3:49:88:9c:04:f9:0b:
                    39:3e:8f:4c:0e:3a:90:d1:0c:28:75:fc:fe:d0:b6:
                    81:d1:a4:ba:be:54:5b:b2:0b:5f:d9:6f:7e:70:0c:
                    41:21:57:90:94:70:29:b1:c0:36:74:ce:01:e2:6c:
                    d8:22:a9:03:69:04:fb:04:e9:3d:3e:2a:a7:76:d7:
                    85:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B3:48:B8:23:FA:23:63:B0:C0:E9:66:B3:74:68:FB:32:ED:36:10
            X509v3 Authority Key Identifier:
                keyid:B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:bf:7d:79:04:9a:c3:9a:77:90:f7:20:cc:82:3a:c1:22:5d:
         22:40:09:6b:ac:0a:c9:2d:1f:d7:45:dd:2d:fc:69:bf:91:7f:
         21:87:a8:70:88:9d:28:fc:b6:da:f9:b7:d7:0c:d5:3a:66:f4:
         6e:2e:fd:2b:f3:7a:e3:0b:bb:2e:71:3e:33:1a:d2:d5:7a:ff:
         72:77:0c:e5:62:b8:35:58:d3:78:5a:f8:c4:bc:89:ed:74:d3:
         f0:a2:d5:82:67:63:ad:86:26:b2:40:6e:07:fd:21:34:b0:75:
         56:e6:5c:11:d2:8d:1c:04:b4:69:66:1e:33:1a:a7:90:5b:a9:
         36:38:cb:66:21:73:c4:2b:2f:3d:76:24:dc:d4:93:eb:ce:d6:
         61:34:c9:f6:1e:6c:16:a8:e3:c4:1b:7c:ef:12:e3:da:ca:91:
         a5:10:91:89:27:7b:31:ae:81:65:6b:ca:12:0d:4e:cb:0c:d1:
         dc:d4:9a:71:4a:43:98:d8:67:75:d5:22:c3:c5:05:fe:29:5d:
         a8:e8:2e:78:be:ea:0f:dc:8a:ea:b5:6a:c4:f5:8c:26:e4:60:
         e5:3b:c6:49:36:04:f9:e5:6e:8e:17:2d:89:5e:40:79:43:c0:
         63:c2:17:55:80:7a:4d:c8:e4:14:64:af:fc:29:0a:d2:bd:29:
         4c:f6:da:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:33:34 2026 by rpki-client