Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/l5oEa_9hohu7Kche9ClhJoX7g0s.mft
File:                     l5oEa_9hohu7Kche9ClhJoX7g0s.mft (raw, json)
Hash identifier:          eRLwhepCwsc+8rReyTpRDSXGPIbwwi47ke9abkO0GkA=
Subject key identifier:   C2:72:08:E7:69:CE:75:F4:C4:D0:2F:E5:0B:30:A1:C2:F3:C4:73:E7
Authority key identifier: 97:9A:04:6B:FF:61:A2:1B:BB:29:C8:5E:F4:29:61:26:85:FB:83:4B
Certificate issuer:       /CN=979a046bff61a21bbb29c85ef429612685fb834b
Certificate serial:       01A1DA9382B6CAEEF5D29B4B7AD9D1A731D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l5oEa_9hohu7Kche9ClhJoX7g0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/l5oEa_9hohu7Kche9ClhJoX7g0s.mft
Manifest number:          016F
Signing time:             Sat 14 Nov 2026 15:01:02 +0000
Manifest this update:     Sat 14 Nov 2026 15:01:02 +0000
Manifest next update:     Sun 15 Nov 2026 15:01:02 +0000
Files and hashes:         1: 4UrXqTyIhsiIh5MLmWgIum1q7pw.roa (hash: 2Njc07dtF+G/jfmcnG8T0/AFPXKazhzNBGgSu3w0kFk=)
                          2: 5-DKG8fn4QobpRmv9gABaxQoiuE.roa (hash: DUPw9M0VyA/Xw3DEIPcetVhxVErX2fs+ure40DbwSwQ=)
                          3: gcoprSDzcSsV57DfpyN6ORzFOu0.roa (hash: e7PiSt8oPiVMxtHNp1MWSD4g+jfiUZHkgB0+FgMdhXo=)
                          4: l5oEa_9hohu7Kche9ClhJoX7g0s.crl (hash: ke3ZGMZgYKmPir2L5QFm2bmk+SeIjleS5x4EvpcQFtI=)
                          5: t5alOfpywogJ69ms_ghfbpQSXMo.roa (hash: Xm7EQvutEbyH9q4RgfnjrzY/7bndMKJ0WVlpuryg+3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/l5oEa_9hohu7Kche9ClhJoX7g0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/l5oEa_9hohu7Kche9ClhJoX7g0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l5oEa_9hohu7Kche9ClhJoX7g0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 15:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:da:93:82:b6:ca:ee:f5:d2:9b:4b:7a:d9:d1:a7:31:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979a046bff61a21bbb29c85ef429612685fb834b
        Validity
            Not Before: Nov 14 15:01:02 2026 GMT
            Not After : Nov 15 15:01:02 2026 GMT
        Subject: CN=c27208e769ce75f4c4d02fe50b30a1c2f3c473e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7e:33:a2:dc:ab:ea:3b:24:a1:e9:55:cb:ed:
                    0a:70:de:32:ea:45:cc:1c:03:39:a0:f8:a3:27:78:
                    a2:1e:7d:67:26:f4:dd:a5:bc:8e:18:5b:73:ba:6f:
                    19:85:cc:45:51:17:bd:42:e1:37:2e:3a:6e:c4:09:
                    ef:2a:b4:29:ae:1b:c0:89:91:fd:62:d0:68:e3:ea:
                    01:dc:0c:7f:b5:5b:ae:b1:13:95:e6:ba:1a:da:d0:
                    ad:e4:3d:3b:6f:7f:3a:84:78:30:af:7f:10:83:e6:
                    23:0a:44:88:44:23:46:b5:a3:37:a5:55:ff:40:cc:
                    22:99:2b:58:47:d0:43:fa:db:94:7b:2a:1c:22:f7:
                    40:60:80:64:bc:d0:46:44:5e:50:26:82:37:6f:ea:
                    8b:2d:88:c5:29:e2:bc:52:63:32:f0:4d:84:7a:33:
                    d1:3b:7e:02:45:63:ed:71:0e:bf:27:52:a8:e0:f8:
                    ed:4a:d1:0c:9f:3b:aa:23:da:a7:43:46:a0:dd:0e:
                    e1:d1:85:c8:0c:1d:d1:84:f1:00:48:82:d3:87:c4:
                    d2:99:93:bb:d1:fd:ea:7c:47:ab:07:68:48:74:33:
                    6c:5c:7d:0e:ee:83:08:2e:2a:73:8e:b2:e6:db:22:
                    7f:27:7e:5d:20:1c:4a:4e:15:db:f6:5c:bf:c5:39:
                    f2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:72:08:E7:69:CE:75:F4:C4:D0:2F:E5:0B:30:A1:C2:F3:C4:73:E7
            X509v3 Authority Key Identifier:
                keyid:97:9A:04:6B:FF:61:A2:1B:BB:29:C8:5E:F4:29:61:26:85:FB:83:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5oEa_9hohu7Kche9ClhJoX7g0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/l5oEa_9hohu7Kche9ClhJoX7g0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/l5oEa_9hohu7Kche9ClhJoX7g0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:c0:68:74:24:34:fd:80:a7:7b:a7:97:be:5c:cf:70:c1:c2:
         3d:16:5b:6d:c5:c5:69:66:27:42:ca:1d:df:81:75:e1:33:3a:
         f9:38:67:75:6f:f3:7c:4b:90:c3:a8:25:2f:d0:f2:5a:3e:6a:
         62:11:83:17:1e:6b:d5:e6:b2:73:0a:a2:65:18:27:3e:86:c2:
         35:1e:8a:3d:84:dd:f4:a4:65:31:8b:4c:a7:39:8d:c7:41:3e:
         fe:3d:80:05:ad:f4:59:46:79:7c:f1:de:11:9f:57:9f:eb:df:
         26:9d:81:8b:d8:42:a6:f9:15:b4:53:5f:8f:99:f9:48:78:be:
         1a:2e:4f:83:41:c9:e5:47:d0:40:a8:2d:78:0c:14:23:7a:15:
         15:85:88:33:01:ed:00:aa:15:18:90:6a:b7:75:d2:44:20:a9:
         35:46:83:f1:cb:5a:1e:87:e9:99:8b:50:72:78:b9:fa:c5:0c:
         9d:b2:96:ee:2a:a2:fd:ab:31:5d:28:2c:59:aa:c9:5f:08:cc:
         9e:65:af:16:51:e8:71:49:5f:a4:75:10:64:81:59:38:c5:0e:
         33:55:6f:e4:b4:b9:2f:f4:d4:fc:ab:36:52:b3:67:14:fd:17:
         56:cc:f3:6c:d4:f5:5c:26:63:b5:c6:e4:e9:22:fa:81:05:a4:
         2e:b2:5a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 02:40:46 2026 by rpki-client