Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
File:                     pyREUNHHhV34SPNDGOHwlIkA2NU.mft (raw, json)
Hash identifier:          Sru1oYgO29MF7Gh58eOJUlucg5vvY1Q+T0ZkoqvoQKM=
Subject key identifier:   C6:19:2F:BE:B4:1F:9F:9C:CE:62:4D:CD:92:00:C9:0A:79:A7:5A:B6
Authority key identifier: A7:24:44:50:D1:C7:85:5D:F8:48:F3:43:18:E1:F0:94:89:00:D8:D5
Certificate issuer:       /CN=a7244450d1c7855df848f34318e1f0948900d8d5
Certificate serial:       01A1DF838B00EFD7D6F4655DEA54B31F70D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
Manifest number:          0919
Signing time:             Sun 15 Nov 2026 14:01:42 +0000
Manifest this update:     Sun 15 Nov 2026 14:01:42 +0000
Manifest next update:     Mon 16 Nov 2026 14:01:42 +0000
Files and hashes:         1: I9uXijOFB1Buptjj8cSJTpw6dR8.asa (hash: 17y24aXIYzYapxA2/6x0iuPWu56wHFQvEJudXooiTwY=)
                          2: nHQieqZyPaOUuSrsXR7xvDoHvxg.roa (hash: zeyi1Qv46B7/sJB4zwdu9/Bq3e1lVsP+coEZ1xodVu0=)
                          3: pyREUNHHhV34SPNDGOHwlIkA2NU.crl (hash: tQA79R4assyOOcAhKZ9mX16PT6bftrn3D3+2/hNysz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:83:8b:00:ef:d7:d6:f4:65:5d:ea:54:b3:1f:70:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7244450d1c7855df848f34318e1f0948900d8d5
        Validity
            Not Before: Nov 15 14:01:42 2026 GMT
            Not After : Nov 16 14:01:42 2026 GMT
        Subject: CN=c6192fbeb41f9f9cce624dcd9200c90a79a75ab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:84:48:fb:57:57:dd:ec:70:c9:39:57:8d:1a:
                    45:b5:b8:30:62:9d:3b:6d:f5:4b:d8:66:2d:16:d0:
                    6c:8e:a4:25:a8:04:2c:e1:9a:22:10:5f:61:bd:a6:
                    ea:cc:47:95:dd:1b:c6:2f:43:d7:05:a4:ac:04:87:
                    e7:6a:75:0a:f8:c5:85:14:3b:c4:40:0b:31:10:97:
                    dd:f5:c8:71:99:90:3e:e8:14:7c:5b:20:e3:e8:18:
                    49:e7:84:33:7e:19:d0:82:c5:99:9b:08:d2:e1:3e:
                    79:e8:7b:82:4e:98:a3:96:42:66:f4:5b:14:ec:ae:
                    4a:e0:e8:31:69:07:2f:ab:c6:d2:29:fb:55:fe:22:
                    7c:52:d0:7d:1d:1b:6e:d3:0a:b0:05:29:d7:cc:13:
                    ce:87:f2:2f:59:34:91:ec:6e:be:da:ab:c8:86:af:
                    c0:d9:10:16:2d:d5:a8:03:c7:a3:c5:b8:37:23:7b:
                    f9:bb:d5:7d:8b:16:a1:d1:46:3f:07:93:77:fa:93:
                    da:3d:22:df:7e:4a:c1:d8:c7:dd:cc:09:1a:c7:f7:
                    f8:05:ce:12:77:fb:e4:10:ce:1f:fe:7d:df:01:35:
                    c3:81:0c:88:38:93:e0:7c:43:68:7a:c4:d5:27:d6:
                    69:a0:35:c4:2f:ba:2e:82:18:c9:af:c7:e4:cf:9e:
                    d9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:19:2F:BE:B4:1F:9F:9C:CE:62:4D:CD:92:00:C9:0A:79:A7:5A:B6
            X509v3 Authority Key Identifier:
                keyid:A7:24:44:50:D1:C7:85:5D:F8:48:F3:43:18:E1:F0:94:89:00:D8:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:b6:f6:85:7f:cb:3f:12:0b:4f:e9:34:a8:02:3e:44:a6:2c:
         4e:11:d4:a2:8a:e6:fd:26:a7:2e:5b:8d:21:3d:3d:50:e4:0d:
         16:11:b1:53:f5:b8:27:b2:67:05:94:b7:3d:4b:b3:7b:48:96:
         8c:80:a3:c3:87:bf:7b:d2:ea:d2:e5:e0:84:39:1d:fd:08:fc:
         62:c2:69:b1:9c:d0:0f:99:8a:71:74:0b:69:a7:3e:f3:1a:ac:
         00:22:90:b7:10:d2:be:14:f1:e1:50:a9:1d:3a:20:05:e1:16:
         6e:d6:e9:ee:af:38:bb:b3:16:a1:6f:97:66:59:7e:47:60:13:
         e8:e5:b3:dd:a9:e5:e9:4a:ea:3c:fe:c5:97:ea:dd:30:72:46:
         29:e6:0d:22:00:0e:76:8f:7e:14:43:c7:18:19:c6:9f:90:36:
         bc:ac:75:28:1b:ae:f9:34:5d:e3:76:7f:f5:43:d9:74:16:ca:
         94:43:8a:45:8f:c9:9d:41:db:dc:c8:68:94:cd:1f:7a:e6:fa:
         0a:b5:7d:83:4e:d1:91:a8:a6:de:13:2c:ee:3f:f5:43:a7:41:
         70:f2:ab:cc:ed:bd:01:b7:b6:ee:2f:ea:8a:c1:5f:7b:95:2b:
         98:88:53:af:7a:da:83:3c:cb:16:d0:7d:52:69:b1:87:b3:22:
         22:de:1a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:18:11 2026 by rpki-client