Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
File:                     oyLyKe3C8xSi-l7w168d3bSZ6jE.mft (raw, json)
Hash identifier:          SrbaJ84z19AbIWcmG+23ahUi10olT9mamECheG9UKBA=
Subject key identifier:   9F:7F:FB:B0:69:60:0D:A8:FB:96:00:3D:55:DB:2A:E1:7D:0D:4C:C0
Authority key identifier: A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
Certificate issuer:       /CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Certificate serial:       01A1DF150B9EFC06442A698A6BAB9F02FA5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
Manifest number:          1B01
Signing time:             Sun 15 Nov 2026 12:01:00 +0000
Manifest this update:     Sun 15 Nov 2026 12:01:00 +0000
Manifest next update:     Mon 16 Nov 2026 12:01:00 +0000
Files and hashes:         1: 99rTPUxETvNMqfh_u46spNvm14U.asa (hash: OYr40XHPvFduVqWreF0V2gPqIbJQNJPu2B4CaD9kosk=)
                          2: IEznk0K2jOJf0RAjHOt5CDCVLX8.asa (hash: uB1bFFV0qe10qLxLSlYG0HlTrXjZ4rIZEEW06Lw18P8=)
                          3: aKOg2Qlf1jhwBI08TxCbNxaldGM.asa (hash: +qzCT97QYuXyotwiBxnGvPknSk4Zw2ZUn8hoKsEK4QU=)
                          4: hmi29bDH7pvd0FedsYNLU_RmrhA.asa (hash: uNJiYqOqB5CD4fkOxxcK5N87GxluuemI20dLeQMwHGw=)
                          5: j9ww1jAwapmyeB5Mda6akaTrn0o.roa (hash: UwM+UovIswrmaEoszqiNrb1qkN6U8QlTDAf/jDU0nmE=)
                          6: k45hDQDW5QvPS-wSqExMPGV9b9E.roa (hash: rZfIBJAHm9qJyp7jxnj7VeKyOR2YVXy0cyWacYrYiYI=)
                          7: oyLyKe3C8xSi-l7w168d3bSZ6jE.crl (hash: 4vOYrDAKQ4c/sEyi8fS+HHc9R6pysgDAtgapLHPw+sA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:15:0b:9e:fc:06:44:2a:69:8a:6b:ab:9f:02:fa:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
        Validity
            Not Before: Nov 15 12:01:00 2026 GMT
            Not After : Nov 16 12:01:00 2026 GMT
        Subject: CN=9f7ffbb069600da8fb96003d55db2ae17d0d4cc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ab:8b:c4:2a:97:40:83:1c:e9:78:9b:69:04:
                    39:57:2b:c2:30:45:15:2f:0e:25:c7:46:73:28:a1:
                    99:96:52:7d:11:19:df:8f:c0:62:32:91:c5:74:4b:
                    2e:fa:57:79:b2:cb:93:f6:4d:a2:8a:5d:3e:f6:6b:
                    c9:4b:46:95:40:8d:8a:91:1a:1f:6f:73:c5:2d:00:
                    e6:f8:5b:92:0f:b1:00:7a:7a:51:ff:0a:a8:46:6d:
                    11:95:9f:ee:61:1c:7f:24:2b:2d:92:ca:6f:ff:74:
                    83:40:f0:11:71:ad:7e:98:15:35:8b:72:80:89:58:
                    6c:5b:f9:2e:ad:95:42:ad:a7:1d:2f:f2:be:82:f4:
                    b7:82:6b:bf:e7:57:a0:a7:9b:f6:8b:94:54:b9:b3:
                    33:7e:da:64:ff:13:80:e9:29:12:63:96:ed:a5:ce:
                    4a:04:2e:54:fb:27:fa:ff:74:ca:7c:4f:19:03:ca:
                    59:53:cc:70:23:87:e0:88:f1:81:b2:ac:b5:54:a0:
                    c2:45:24:1b:84:36:48:d0:1f:67:64:30:50:5a:3e:
                    98:a0:17:ff:e8:a0:74:5b:b5:0a:3f:2e:6f:ef:71:
                    14:86:24:12:bf:8a:36:7b:c6:ac:d6:3a:ee:91:22:
                    5a:fa:ef:55:1f:45:fc:2c:f4:2d:8c:59:0a:6f:28:
                    90:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:7F:FB:B0:69:60:0D:A8:FB:96:00:3D:55:DB:2A:E1:7D:0D:4C:C0
            X509v3 Authority Key Identifier:
                keyid:A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:0e:86:bb:03:cf:dd:71:3d:70:d4:35:c7:c1:6d:2d:f3:25:
         8c:d2:1f:03:09:b8:43:ee:3f:cc:0c:3c:9f:b1:77:c3:36:24:
         22:7b:08:d0:20:0c:82:3b:1d:a2:de:ce:ee:4c:6a:a6:4b:51:
         00:f7:37:99:6a:73:ac:f7:9f:6b:c5:45:eb:bc:b2:20:e3:f1:
         9d:1c:12:7e:d3:e0:bd:27:13:24:1c:d6:2b:c8:c9:fa:71:7b:
         b4:88:e8:fe:1e:b9:a6:66:4a:2c:fd:ed:b3:d0:06:b3:13:10:
         5d:d5:a6:1f:30:2c:c1:d6:b5:19:87:55:dc:e3:35:91:cb:fb:
         8a:be:9b:8f:fb:0b:b5:c8:63:90:b1:73:e5:d1:dd:fc:b1:5d:
         31:8c:0c:dc:63:1c:ee:0e:e4:89:d4:a6:97:7a:e2:06:51:50:
         81:61:8f:4b:8c:9c:86:77:d2:48:f8:56:b9:05:b7:bc:81:5d:
         51:b1:68:ac:69:18:b8:1f:2f:e1:e4:66:ba:c7:92:9d:78:e4:
         5f:5a:e1:73:40:aa:56:b4:ba:03:75:f2:e2:8d:4f:2d:a0:27:
         41:93:68:d0:f3:fd:31:47:70:85:6f:b0:89:8b:de:b2:8b:56:
         cf:d0:82:a0:84:fa:07:cc:84:18:77:bf:68:21:dd:38:64:db:
         81:40:be:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:32:33 2026 by rpki-client