Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
File:                     COdUw6PbLtFKpsBqmdeXKRcCABw.mft (raw, json)
Hash identifier:          NQ3KzeOeB6Z0FB13WvGuFed3dJxDHU4KhumZpUEv49s=
Subject key identifier:   27:C4:2C:55:AD:A6:64:60:4C:D0:83:EC:FE:C1:87:31:18:28:34:90
Authority key identifier: 08:E7:54:C3:A3:DB:2E:D1:4A:A6:C0:6A:99:D7:97:29:17:02:00:1C
Certificate issuer:       /CN=08e754c3a3db2ed14aa6c06a99d797291702001c
Certificate serial:       01A1DD5E786C592C316843DEBDFFE28F13BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
Manifest number:          0716
Signing time:             Sun 15 Nov 2026 04:01:58 +0000
Manifest this update:     Sun 15 Nov 2026 04:01:58 +0000
Manifest next update:     Mon 16 Nov 2026 04:01:58 +0000
Files and hashes:         1: COdUw6PbLtFKpsBqmdeXKRcCABw.crl (hash: uby/6rg/jm7QS8+L79cNvxFXwc8Vb64VYcA2W0CParM=)
                          2: UIXAZ8txjJ28tjI6SmjoL7WxOag.roa (hash: lLU1RMXC6Ac97Z2Do9ddKzJUd44r/EFTzj2qCxh0kr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 04:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:5e:78:6c:59:2c:31:68:43:de:bd:ff:e2:8f:13:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08e754c3a3db2ed14aa6c06a99d797291702001c
        Validity
            Not Before: Nov 15 04:01:58 2026 GMT
            Not After : Nov 16 04:01:58 2026 GMT
        Subject: CN=27c42c55ada664604cd083ecfec1873118283490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bb:95:96:de:22:c3:cf:a6:85:79:de:6e:bf:
                    6b:b4:1d:f9:97:6c:85:2f:1b:07:c4:14:a8:30:6a:
                    83:d3:7f:63:75:a4:1a:81:46:11:82:c6:2e:9d:12:
                    de:9d:b9:09:6c:fc:68:f2:30:ce:10:7c:90:06:d9:
                    4a:84:b5:51:f2:31:2f:f5:38:76:3f:8f:a3:f2:5e:
                    41:82:3f:40:10:e9:5f:73:16:ff:3c:35:b6:89:d5:
                    9a:1d:d4:42:47:36:fa:59:57:6f:43:5a:24:ee:60:
                    30:e2:f7:19:8e:b2:87:5b:58:f9:00:00:45:9d:77:
                    e0:c1:56:1a:c0:92:ca:f9:bc:50:6d:61:7f:06:a4:
                    ce:df:02:e3:9b:a0:a4:d7:5b:3b:e2:db:ec:ed:44:
                    b6:33:c5:2d:c7:2a:a3:88:12:d6:cc:22:76:31:9b:
                    0a:aa:cc:03:f1:6a:b2:09:c6:2f:2f:47:50:38:c5:
                    8b:31:82:8c:eb:0d:c5:42:6e:ac:94:4d:07:2d:d4:
                    d5:0c:16:f1:09:3e:16:2f:1c:80:50:3f:e6:a1:f8:
                    d2:41:6e:1d:38:61:8f:32:d5:7a:85:ce:d2:a4:88:
                    30:72:98:fd:07:8a:ee:cc:df:71:a0:66:02:12:94:
                    f5:f1:73:d4:d4:ca:5b:33:ab:9e:08:7a:9a:f0:3d:
                    30:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C4:2C:55:AD:A6:64:60:4C:D0:83:EC:FE:C1:87:31:18:28:34:90
            X509v3 Authority Key Identifier:
                keyid:08:E7:54:C3:A3:DB:2E:D1:4A:A6:C0:6A:99:D7:97:29:17:02:00:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:2e:22:88:2c:cf:75:33:88:fe:e8:47:9a:c2:7d:ed:28:64:
         f1:7a:2a:9d:5f:e3:24:7e:cb:24:fa:e1:32:19:e5:49:44:80:
         3c:81:86:d0:5b:a0:7a:83:08:f7:2e:62:12:5f:15:7f:f9:57:
         53:9b:10:83:c2:6e:07:e0:a6:8b:e7:75:84:a0:13:89:7e:09:
         77:af:5f:54:34:70:49:10:75:82:99:3a:ab:72:5c:e5:d0:ba:
         98:a9:d8:cd:d1:0f:c5:38:14:9a:d0:bf:0e:16:22:77:10:dc:
         aa:4c:b8:72:17:1b:9c:f8:3e:9c:59:dc:86:08:61:ca:74:74:
         8d:d6:44:cc:4f:22:48:81:7a:ec:eb:dc:82:9e:14:2c:95:4b:
         44:b0:31:27:0f:d5:4e:b1:09:7d:b2:65:6e:5a:6a:66:e0:31:
         03:2d:a0:5a:af:39:01:16:0c:2f:5f:fd:bb:11:bc:43:99:df:
         76:f5:c0:35:c6:fa:4e:10:0a:0d:1a:24:7a:37:0c:4b:9d:b6:
         ea:2e:22:65:24:84:64:57:65:9e:48:e0:8e:90:db:0e:3f:07:
         65:62:2d:b2:0e:fa:db:11:bd:ec:9d:44:37:e2:06:5f:b8:6b:
         a3:3d:54:a0:ae:16:a2:54:9b:ff:9a:3f:17:cc:4f:81:e2:11:
         e6:f8:1f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:18:41 2026 by rpki-client