Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft
File:                     9YQK34T7C3WOuopaE1qYA5Pov3M.mft (raw, json)
Hash identifier:          iRoTRSvTwxxqgIWRu55BCZLhDpQgrpKEFEMFJZgJL1s=
Subject key identifier:   D4:F7:9F:57:6F:EB:87:A9:49:34:02:17:2D:E3:BE:F6:22:76:24:30
Authority key identifier: F5:84:0A:DF:84:FB:0B:75:8E:BA:8A:5A:13:5A:98:03:93:E8:BF:73
Certificate issuer:       /CN=f5840adf84fb0b758eba8a5a135a980393e8bf73
Certificate serial:       01A1DEA746B5C7BE744A3067FFD8D35C5886
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9YQK34T7C3WOuopaE1qYA5Pov3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft
Manifest number:          06A3
Signing time:             Sun 15 Nov 2026 10:01:06 +0000
Manifest this update:     Sun 15 Nov 2026 10:01:06 +0000
Manifest next update:     Mon 16 Nov 2026 10:01:06 +0000
Files and hashes:         1: 9YQK34T7C3WOuopaE1qYA5Pov3M.crl (hash: bLIFn+FGOMlq4t2bsTqw0KuVEXRC/Qb+sXrSUyEHA8g=)
                          2: drA-qEeuOhXaBIliMFDyRwjzUIs.roa (hash: LRSsWiFp5H7cghjLHXgtjNhMqPss6jgTVs0oIRjr8vo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9YQK34T7C3WOuopaE1qYA5Pov3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 10:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:a7:46:b5:c7:be:74:4a:30:67:ff:d8:d3:5c:58:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5840adf84fb0b758eba8a5a135a980393e8bf73
        Validity
            Not Before: Nov 15 10:01:06 2026 GMT
            Not After : Nov 16 10:01:06 2026 GMT
        Subject: CN=d4f79f576feb87a9493402172de3bef622762430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:56:02:80:9c:db:7d:18:43:9a:c4:68:f4:90:
                    ea:91:3f:e3:cc:31:68:a0:8e:78:f1:3d:cb:f2:84:
                    ab:ab:68:8c:72:be:43:46:7a:02:54:ab:15:9f:97:
                    3b:09:56:5b:50:e9:7b:f8:64:58:b9:35:cb:78:bf:
                    ee:13:31:7d:24:f3:be:7d:2f:8b:e4:04:e3:0a:8c:
                    5e:02:13:d6:ed:a6:38:5a:75:90:15:4c:bf:fa:8d:
                    0d:5f:e5:e9:1c:27:6d:16:cb:99:f0:d0:81:af:a4:
                    94:74:ff:79:64:19:54:80:13:bd:13:a3:13:d1:45:
                    82:68:85:24:09:13:44:7b:20:a0:7a:10:c2:86:a5:
                    78:c0:c1:05:7b:f3:ab:a3:35:15:90:28:33:4f:51:
                    af:bd:47:2b:26:75:d0:55:0d:d6:4e:5c:03:e7:4b:
                    be:55:a1:98:b1:d7:1d:9b:0a:11:eb:fa:16:ad:6b:
                    be:c5:25:2d:73:d2:d4:26:cb:8c:5d:48:e0:76:34:
                    1a:ef:25:fa:cd:c9:ce:5a:e1:cb:25:7c:be:20:b0:
                    16:29:87:f1:19:eb:49:aa:08:dd:69:1b:a1:12:e0:
                    02:d7:61:74:ec:f3:d7:48:ed:2d:e3:19:1d:0a:36:
                    54:8c:5d:17:cf:82:46:33:0b:25:b8:c9:fa:3b:97:
                    7a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F7:9F:57:6F:EB:87:A9:49:34:02:17:2D:E3:BE:F6:22:76:24:30
            X509v3 Authority Key Identifier:
                keyid:F5:84:0A:DF:84:FB:0B:75:8E:BA:8A:5A:13:5A:98:03:93:E8:BF:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YQK34T7C3WOuopaE1qYA5Pov3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:47:dd:4b:14:27:59:76:f6:23:f9:a0:72:48:17:19:5a:7a:
         71:1f:71:0e:fb:eb:6e:94:5e:20:ed:e0:51:5b:3e:c4:61:a9:
         e7:52:6a:27:a8:06:46:4d:dc:ae:74:0e:c0:70:01:90:f6:5d:
         78:c1:5f:2b:1b:8a:13:04:c5:fe:8a:2c:c8:d0:f5:e7:e4:2a:
         4e:e0:11:7a:e1:c6:b6:ae:b0:fb:47:ca:88:12:de:5c:ac:74:
         5c:de:f1:c7:03:f8:5e:c6:33:f5:ac:e5:2d:b8:86:61:66:a7:
         fc:5e:53:0c:1f:dc:fd:2d:f3:72:63:30:bf:5a:d9:ae:c2:bc:
         83:6a:7b:20:c0:96:48:c7:95:f7:4f:6e:16:aa:3b:c4:38:4c:
         3c:09:93:55:88:40:4c:c1:2f:db:18:d7:8a:dc:c4:57:a5:a6:
         f9:fd:f6:0b:46:86:d4:2a:2d:16:19:27:8e:75:d1:17:b2:4f:
         1b:c2:fe:ce:67:17:31:70:eb:73:3f:e9:a9:9e:91:25:f4:84:
         8d:fb:c9:bc:78:4c:76:b0:3e:d6:eb:69:3d:8b:f3:b1:82:53:
         2b:61:3b:13:af:d7:59:f7:81:6b:6d:b9:19:87:64:2f:68:57:
         b1:c8:fd:df:ce:22:59:4f:31:81:d9:e3:a7:fa:b8:40:0e:ce:
         4d:0f:44:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:44:57 2026 by rpki-client