Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.mft
File:                     d8gAVOEzDKcbSQDWFcLPLDzmzwQ.mft (raw, json)
Hash identifier:          trsWjXGlvfnqYIzbUMV9kKwEOkoTZqWogAT8JtAFhFw=
Subject key identifier:   A1:3E:BA:46:59:EC:F7:22:B4:5F:C5:16:F8:D8:E9:9D:A3:B5:ED:8B
Authority key identifier: 77:C8:00:54:E1:33:0C:A7:1B:49:00:D6:15:C2:CF:2C:3C:E6:CF:04
Certificate issuer:       /CN=77c80054e1330ca71b4900d615c2cf2c3ce6cf04
Certificate serial:       01A1DC14BE50864AA07402F04BA35FAF626C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.mft
Manifest number:          0171
Signing time:             Sat 14 Nov 2026 22:01:49 +0000
Manifest this update:     Sat 14 Nov 2026 22:01:49 +0000
Manifest next update:     Sun 15 Nov 2026 22:01:49 +0000
Files and hashes:         1: 31s38qTNO6yt_t2cWViMVU8rzT8.roa (hash: hHBR9FRB8VGB5NgdUu2OjlV3tCFxVK0wgLqKuADUEY4=)
                          2: VXztzk4Ee02YToFvK1hXq4z0ngg.roa (hash: TG73c3Jp5R3Lk7QQ+JsM9RhJbp3eNPxZOiVn6niYjI4=)
                          3: XC2qgnZMd7KoCxUvbJDEOOAZ6gY.roa (hash: lNqu83Yibp25n37JenqiUawc+hvvEVurC151viVxI6Y=)
                          4: XPBmD8Gtnws4nIHrF49jMceOosg.roa (hash: O2+V+IZD88cCJbaxnDGHuAzNsGo6UPNKZgTbgUxV0l0=)
                          5: cwbV0vWcQ5Wj6E31oIeSxEVrBuY.roa (hash: /Is553alSS62yiVoav4+HU2iTt1j95KP3P9CAryXxjU=)
                          6: d8gAVOEzDKcbSQDWFcLPLDzmzwQ.crl (hash: IHpugJ7a0gNVgVe6op4PfibdvsndXNXDi3C6L+gmHx8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 22:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dc:14:be:50:86:4a:a0:74:02:f0:4b:a3:5f:af:62:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c80054e1330ca71b4900d615c2cf2c3ce6cf04
        Validity
            Not Before: Nov 14 22:01:49 2026 GMT
            Not After : Nov 15 22:01:49 2026 GMT
        Subject: CN=a13eba4659ecf722b45fc516f8d8e99da3b5ed8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fa:8b:2f:84:a5:8a:7c:e6:c0:71:c1:37:14:
                    40:8a:1b:d3:1b:00:7f:7f:ae:ca:d6:82:f7:1a:6f:
                    b8:0d:e0:27:37:52:67:f1:83:a7:82:31:0c:33:4f:
                    3c:6c:7e:96:40:66:42:16:a6:51:df:b2:a3:0f:39:
                    d5:81:9b:d7:21:41:ab:eb:d6:8f:ff:e4:ee:f5:a4:
                    b0:80:c6:22:7b:e8:9f:95:5c:8c:67:81:8e:b8:bb:
                    f9:99:b8:57:5a:01:f4:62:65:b9:ac:34:fa:40:e1:
                    55:c8:d1:4a:10:38:a3:08:5a:b9:82:5c:10:01:77:
                    9f:ea:e7:ee:60:f7:b8:19:74:93:4f:2d:ce:e0:a7:
                    71:50:fe:32:3c:28:98:96:df:32:99:34:e5:bc:5e:
                    72:48:b2:06:53:a7:0f:26:59:82:8c:12:dd:d7:21:
                    64:a0:fb:72:51:42:82:25:ba:d9:9d:10:fc:89:2e:
                    95:00:de:b0:3b:25:0a:42:90:d3:ac:1c:b6:70:fa:
                    d3:cc:e5:15:ad:cf:c9:fc:64:39:b2:62:5f:99:00:
                    2a:11:0d:04:fb:f2:69:ff:61:e1:61:c2:35:38:06:
                    15:9a:09:3c:9e:8b:05:98:8f:28:9c:7c:d8:11:57:
                    cb:df:bc:94:17:67:dc:9a:5e:86:ca:bb:11:0b:4f:
                    8a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:3E:BA:46:59:EC:F7:22:B4:5F:C5:16:F8:D8:E9:9D:A3:B5:ED:8B
            X509v3 Authority Key Identifier:
                keyid:77:C8:00:54:E1:33:0C:A7:1B:49:00:D6:15:C2:CF:2C:3C:E6:CF:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:4b:a8:11:29:cc:bd:14:dd:b3:dc:30:d4:ec:28:9f:73:4e:
         70:c2:c3:ef:8a:23:c2:0c:3e:58:a7:ca:70:33:ca:68:88:97:
         4c:3c:72:6a:4a:f2:61:53:fe:21:08:01:d7:57:f2:86:02:d1:
         ae:2e:ca:37:78:05:28:3a:0a:12:57:d7:f5:c5:f0:0f:8f:bc:
         a7:07:6e:2e:b6:32:43:8c:3e:c2:35:45:dd:2c:03:77:81:83:
         b8:d0:b0:0c:34:d0:18:c1:09:48:15:37:e9:f1:b0:1c:73:8e:
         e9:83:87:12:71:9b:10:ff:96:8b:6d:cc:47:24:cb:d8:1b:35:
         24:2f:ef:66:1e:95:4a:a0:e5:ee:57:2e:61:59:8d:ad:23:d2:
         6a:e0:27:53:c6:a6:99:2a:6b:83:f3:74:92:28:0d:a1:13:44:
         2a:cf:33:31:ed:11:50:33:ea:cf:87:f4:23:e4:96:5e:86:00:
         e6:28:34:f1:d2:a2:8c:d1:5f:dd:30:21:a2:6f:8c:d5:1f:11:
         c2:75:c9:2a:b5:7a:89:54:b4:93:ce:54:7a:ec:45:17:b1:da:
         02:0e:4a:fc:fc:84:ab:98:c0:4c:67:54:6e:1d:4b:38:f3:fe:
         9e:b2:90:03:2e:40:21:73:65:23:f7:e9:ed:ce:68:20:f6:b4:
         de:a8:de:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 09:50:39 2026 by rpki-client