Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft
File:                     5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft (raw, json)
Hash identifier:          ZtkkG6Q9n7zsIV2WYIiTQPtBrxtM7cKkNcroqPNVVV0=
Subject key identifier:   A9:BB:5F:C6:A1:C2:87:D0:7A:F2:A3:CB:D2:35:23:F9:9E:6C:32:78
Authority key identifier: E4:FB:64:09:46:D8:CF:AE:FE:56:48:94:87:02:AD:60:34:A0:E8:B9
Certificate issuer:       /CN=e4fb640946d8cfaefe5648948702ad6034a0e8b9
Certificate serial:       01A1D9EEFF4687F3A640510B4370F78B4FD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5PtkCUbYz67-VkiUhwKtYDSg6Lk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft
Manifest number:          0F8B
Signing time:             Sat 14 Nov 2026 12:01:21 +0000
Manifest this update:     Sat 14 Nov 2026 12:01:21 +0000
Manifest next update:     Sun 15 Nov 2026 12:01:21 +0000
Files and hashes:         1: 5PtkCUbYz67-VkiUhwKtYDSg6Lk.crl (hash: fQxBYBh0cH2WodDzBo/SeNrfsyCZr4jC7CmRCGsVlaQ=)
                          2: P14uHlGf2lrMoUspqcAN6H9BcUc.roa (hash: qn6hIwu5/DuOQPvMM2Oe2W+KkeROqHy0+cq0AjAaLwQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5PtkCUbYz67-VkiUhwKtYDSg6Lk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 10:37:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:d9:ee:ff:46:87:f3:a6:40:51:0b:43:70:f7:8b:4f:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4fb640946d8cfaefe5648948702ad6034a0e8b9
        Validity
            Not Before: Nov 14 12:01:21 2026 GMT
            Not After : Nov 15 12:01:21 2026 GMT
        Subject: CN=a9bb5fc6a1c287d07af2a3cbd23523f99e6c3278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a0:a0:d9:72:72:87:0d:46:55:68:6c:f7:89:
                    18:24:3c:41:49:f1:b9:ee:2d:75:ec:35:05:8e:c6:
                    30:44:f7:8f:c7:08:3b:d5:91:0f:0a:b3:38:b5:ec:
                    a8:6d:59:29:f4:d7:0b:05:28:dc:b6:6b:96:49:83:
                    2c:79:54:eb:91:27:a2:56:5a:97:55:56:40:5d:a1:
                    c3:7e:44:c6:82:36:43:fc:35:a9:95:03:6d:df:e1:
                    0b:73:99:aa:3e:ca:d8:e5:8f:08:7f:7a:71:36:4e:
                    d9:5a:d9:8e:6e:60:19:99:79:22:03:6a:9e:07:88:
                    34:c1:03:5d:c2:8d:ae:f1:a2:6d:4a:7c:d9:d6:f5:
                    5a:90:56:5e:32:db:ce:15:ac:64:97:84:9a:41:f7:
                    ad:69:ce:dd:6e:a1:65:76:42:f6:98:8c:03:eb:0e:
                    28:be:c9:c2:f0:4d:62:c9:1a:25:78:c0:59:ee:78:
                    56:5a:42:9e:0e:28:94:c5:aa:01:42:5e:41:1b:67:
                    c7:8c:c7:71:e3:78:36:4f:ab:91:ae:18:7c:c0:95:
                    bf:85:83:ef:43:9d:a1:4c:22:15:be:ef:71:b6:89:
                    15:b3:9e:eb:31:69:1f:50:4e:1d:03:a5:91:64:57:
                    9e:6d:cc:a5:2e:5a:3b:71:a5:88:e0:e1:0e:bf:65:
                    34:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:BB:5F:C6:A1:C2:87:D0:7A:F2:A3:CB:D2:35:23:F9:9E:6C:32:78
            X509v3 Authority Key Identifier:
                keyid:E4:FB:64:09:46:D8:CF:AE:FE:56:48:94:87:02:AD:60:34:A0:E8:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PtkCUbYz67-VkiUhwKtYDSg6Lk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:42:88:a0:fb:d1:bc:63:89:64:20:56:b7:3c:56:93:cf:4e:
         c2:d8:b1:b2:62:a3:ee:5c:4b:72:99:45:06:11:c8:d0:f8:b8:
         f2:c0:8a:af:0f:aa:12:b4:b3:36:4b:17:d5:1c:36:28:1f:ea:
         d4:60:fe:e1:bd:23:0a:7f:80:d8:28:fc:5e:7e:5f:3c:a1:4a:
         53:63:4b:8d:fc:2c:b7:c8:36:4b:c2:85:96:6e:ce:11:fa:2d:
         99:4c:7c:e3:9f:a8:ad:b8:64:b2:8b:ea:bf:a9:b0:3c:e2:c6:
         96:44:a8:b6:4c:3d:ba:3c:30:8a:1e:a3:a3:25:66:b3:42:ee:
         5c:4c:1a:ac:aa:e1:4d:77:89:7b:98:b2:4f:53:b5:67:27:a5:
         54:1f:b8:c3:da:65:b0:10:e5:cb:07:5f:9f:ed:6c:de:2a:d0:
         7e:2e:ae:1b:0d:55:02:00:ff:27:fa:c4:64:aa:04:34:0a:b0:
         13:20:de:35:5c:70:2d:b0:af:03:3b:ca:a5:d9:23:81:66:9b:
         ad:49:77:f5:c9:bf:8e:9a:a0:44:73:0e:8a:45:3c:ce:1f:39:
         d2:bd:2b:a4:57:47:c3:6e:5d:4f:f1:a1:5d:09:5a:a3:dd:f3:
         fb:2f:9e:c0:25:03:5d:b3:f0:29:6a:14:56:73:3f:62:f7:56:
         30:f3:9a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:43:23 2026 by rpki-client