Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
File:                     alg23em52u81qKf3TWMm9rQtp00.mft (raw, json)
Hash identifier:          yFxcw6lmSpDHv+9duCjnyb823ozJHtr+RVRaJOz6/0M=
Subject key identifier:   CB:C8:1F:35:22:A2:C5:60:71:25:70:95:EB:25:04:75:79:CD:70:F6
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Certificate issuer:       /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial:       01A1DD952DB6A836696F8E6EC6410AECC812
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
Manifest number:          11BF
Signing time:             Sun 15 Nov 2026 05:01:43 +0000
Manifest this update:     Sun 15 Nov 2026 05:01:43 +0000
Manifest next update:     Mon 16 Nov 2026 05:01:43 +0000
Files and hashes:         1: 6EUiuJ8TXDoeK6Y2RuzAg35CJbA.roa (hash: Un4utzLNvzKYAuJcK963IOIjiUf4/33T5NoFVrgzlkA=)
                          2: G8BPphhm9oFoNoaDVHCDJOi1A1I.roa (hash: o25EiApUpZto47Wgp7aaZGTEkqSv5P2WX51MC5xNgcg=)
                          3: JWw_FABd9Q-ewURwU3IZ1GpRRJY.roa (hash: ZCt1hbjV0Oxdybocx7QzONRXEhTOvQ3xXy28wEkffEM=)
                          4: M0vUEBMIUgT4jDZek6CAIPYaSIg.roa (hash: PIpybvqNjJxeWjfkr7UEGiD+MMuADppLXWFHDY6S5Vc=)
                          5: alg23em52u81qKf3TWMm9rQtp00.crl (hash: fv4cptW9kdllUFKM7YLUpBoyS1VGO2zD31+AljtrwzM=)
                          6: cx2hNcUqecSEJqe3n2yH1nbkzcQ.roa (hash: VM9cV3NpEOzoGjoegWLpfoVKjMdeb/qreQ0du+7oLuc=)
                          7: lbJDMqkl3r_zP_8RcjCwdgnRqqQ.roa (hash: MLj9IAZg1W5TsVOSKsUt+tjSOZpaYeIgJDEMRDXfZGo=)
                          8: mQKWGJcUH9K-JRzm__zzvh8RY30.roa (hash: kWUBDBmUmrcdRJVoYANr5CHiRnOgTYOm1wjhrADWFGE=)
                          9: pcGsYQ6WmjLQ7fW-l50FaHq8fAw.roa (hash: OyCY6h+GWUv+mGKdOjMTfLCqD3xuf3tOl0/vrW+coks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 05:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:95:2d:b6:a8:36:69:6f:8e:6e:c6:41:0a:ec:c8:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
        Validity
            Not Before: Nov 15 05:01:43 2026 GMT
            Not After : Nov 16 05:01:43 2026 GMT
        Subject: CN=cbc81f3522a2c56071257095eb25047579cd70f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c5:fd:a2:df:16:58:7e:60:1c:51:c4:9b:39:
                    ec:ab:16:2f:f6:93:e4:53:1e:6d:60:eb:7b:cc:37:
                    82:91:93:1c:2e:99:1b:e1:7d:6b:6e:7c:2f:04:2b:
                    c7:a0:9a:69:a4:4e:3d:1e:96:a8:f1:8a:b3:4d:a1:
                    a8:a9:2e:4a:c6:20:83:10:6a:1e:25:e9:14:ac:bd:
                    de:77:d3:19:6f:75:a7:58:e2:52:6e:37:c5:d5:61:
                    48:b5:c1:2d:9f:45:71:19:01:06:6b:19:64:6a:1e:
                    c4:4c:eb:a2:72:b4:5e:6d:86:b6:21:df:d5:7c:71:
                    aa:e4:ed:77:ef:2e:af:ad:e6:0a:47:b0:1c:6f:37:
                    29:e4:64:d6:e4:7e:65:f8:ee:8d:e6:e4:b1:e7:c0:
                    78:ce:0b:c1:67:9d:34:6f:cd:12:9b:ad:5d:6c:63:
                    b4:6b:11:85:b3:5b:5e:c2:bb:c7:49:3f:94:61:6e:
                    ad:78:e3:cf:26:5e:aa:b0:74:ea:df:36:01:f0:48:
                    e4:22:9c:dd:d8:08:04:c8:21:a5:ec:67:c3:bb:3f:
                    83:10:d1:9c:97:19:41:57:0a:42:13:69:1a:c2:3e:
                    51:3e:2e:cf:a6:b0:f2:80:c5:f6:7a:5a:33:44:1f:
                    8e:64:58:ff:3e:66:06:9d:e6:04:b5:e5:05:ce:3f:
                    9f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C8:1F:35:22:A2:C5:60:71:25:70:95:EB:25:04:75:79:CD:70:F6
            X509v3 Authority Key Identifier:
                keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:09:9d:c6:ec:72:aa:13:44:9b:c7:35:cb:f5:be:aa:f0:de:
         fc:2c:d3:17:dc:73:0c:0c:25:70:2c:2e:68:bb:a9:c3:e4:7d:
         82:e7:2a:16:3f:32:95:94:26:bb:f2:f4:3e:9a:9d:53:1a:a2:
         69:c1:6f:aa:93:57:d4:be:e3:f3:44:be:6d:f8:07:fa:b8:05:
         e8:b5:fa:5a:ae:9b:01:06:56:c4:8b:7f:98:ab:79:1f:44:69:
         20:29:14:5e:c8:f7:dc:b2:24:7b:d6:91:b4:2c:a0:de:bf:6f:
         aa:7c:e1:73:2d:73:02:c2:d7:34:ce:fe:0b:08:79:22:be:b1:
         2c:e7:63:2e:a3:7f:e1:5b:67:61:a7:0a:6d:13:e2:7e:f5:22:
         06:ae:cb:cb:43:1a:5e:04:d9:7e:f0:f4:1c:40:5f:d1:0c:d0:
         1e:04:f8:39:7c:a0:8c:42:26:78:a0:dd:b9:5d:45:0c:89:fb:
         53:6e:6d:70:fc:1a:25:53:80:ef:a4:a3:46:4a:5b:04:43:ec:
         35:cc:cc:36:5a:04:bb:13:1b:61:4a:d9:db:0a:1e:b2:34:7f:
         5b:68:01:3f:62:59:f0:43:99:01:8c:a5:fb:49:53:a7:53:47:
         93:20:83:a0:f8:65:71:13:99:8d:3e:99:2f:9d:65:d4:78:21:
         bd:1d:33:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:47:10 2026 by rpki-client