Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft
File:                     p_ANG___OlPpT4Z9dD0DG5IttbE.mft (raw, json)
Hash identifier:          DCElcMUHhnemhwQXc+UTjzeUw/C9eRrx/7C98P+FoQA=
Subject key identifier:   03:9D:31:35:4F:B8:E0:0F:5F:6E:76:6B:6C:08:A6:46:0B:0E:E5:2D
Authority key identifier: A7:F0:0D:1B:FF:FF:3A:53:E9:4F:86:7D:74:3D:03:1B:92:2D:B5:B1
Certificate issuer:       /CN=a7f00d1bffff3a53e94f867d743d031b922db5b1
Certificate serial:       01A1DE3955BA09AFDF462516F9D9D2C71BDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft
Manifest number:          10FF
Signing time:             Sun 15 Nov 2026 08:01:01 +0000
Manifest this update:     Sun 15 Nov 2026 08:01:01 +0000
Manifest next update:     Mon 16 Nov 2026 08:01:01 +0000
Files and hashes:         1: 4oUREHHyIkiOh0co8Pudi6bs10M.roa (hash: PRIF2dM2ftg0MEjLw3V/ihyVcrr3WlqQhGD4KoMtYPw=)
                          2: CqnSPAR5hx5wngRbC5k9LUXkoA8.roa (hash: aGbrhbaxU+LsZBoIPFkr4v6QWHwOe3+O/Syqf2zUoUE=)
                          3: eTcAXTyhlwWH5fSp-Pjurm6-nUM.roa (hash: gBUrxzmGNJtSzYyVURltnbxrnWTt23qYR68F7kLRdUM=)
                          4: p_ANG___OlPpT4Z9dD0DG5IttbE.crl (hash: Zt9kbOXUpHgQvEFlJuWEhXTPOwhHl4SaWEZv3IkEcP4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 08:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:39:55:ba:09:af:df:46:25:16:f9:d9:d2:c7:1b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7f00d1bffff3a53e94f867d743d031b922db5b1
        Validity
            Not Before: Nov 15 08:01:01 2026 GMT
            Not After : Nov 16 08:01:01 2026 GMT
        Subject: CN=039d31354fb8e00f5f6e766b6c08a6460b0ee52d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:74:ac:24:49:f9:64:8e:60:e8:be:2d:00:86:
                    e8:c2:6c:e7:37:e0:69:f2:66:1f:e9:0c:da:b4:07:
                    45:46:61:9b:0b:bf:a2:98:9a:42:b5:f4:7f:db:40:
                    a0:16:ad:cc:4b:90:d5:72:4f:76:46:b9:cc:75:7e:
                    59:d9:06:2a:3a:1b:cd:d8:30:f5:31:61:d5:34:2d:
                    69:a7:b4:c0:72:b2:08:6e:8b:f0:fc:46:36:fc:b3:
                    69:af:59:39:aa:63:06:f8:0e:6f:0a:3f:a6:32:c6:
                    33:fc:7e:fe:45:44:be:db:a0:69:98:47:b4:2f:48:
                    97:a7:fd:09:c1:dc:bd:aa:55:dd:6f:08:60:6d:7c:
                    fa:d9:bd:f9:17:e2:83:da:29:8c:6b:a4:86:22:27:
                    c8:3b:a2:8f:33:cc:8a:ef:49:02:f6:4b:22:b2:c9:
                    9f:76:36:0b:fc:48:3b:2c:33:c6:c2:04:0e:82:1f:
                    e9:78:46:fa:e6:05:b0:41:cf:22:49:86:09:e7:ce:
                    bc:d7:61:4c:03:1c:1f:64:17:70:91:0e:fe:8c:54:
                    19:a0:b3:93:56:91:e6:86:40:ca:76:3f:1c:55:41:
                    73:6b:80:d4:2b:f6:5d:d7:76:dd:f5:a7:6d:e4:a6:
                    07:54:bb:6c:db:02:70:0d:de:f0:28:b0:dc:fd:ea:
                    20:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9D:31:35:4F:B8:E0:0F:5F:6E:76:6B:6C:08:A6:46:0B:0E:E5:2D
            X509v3 Authority Key Identifier:
                keyid:A7:F0:0D:1B:FF:FF:3A:53:E9:4F:86:7D:74:3D:03:1B:92:2D:B5:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:f1:2a:bc:6d:5e:4a:fa:9b:ac:19:c0:9b:77:8b:db:62:00:
         e2:e9:81:1b:ab:ae:23:1c:d9:34:a6:cd:d6:42:53:a9:58:98:
         9b:22:5e:60:8b:30:b1:3b:d9:c4:2a:b6:f4:34:ce:bd:c1:7d:
         3b:43:53:72:df:e4:bd:21:cc:29:d4:95:2d:34:a8:e2:e1:e9:
         26:10:b2:39:a2:ee:c8:5c:b3:60:3d:cf:fb:f3:45:5e:30:83:
         b7:e0:4a:43:e7:c8:95:24:97:61:68:81:42:0e:0a:39:e0:a8:
         d0:91:13:0f:7f:d8:b1:cb:6c:fd:78:01:02:30:11:85:c6:4b:
         86:cc:6f:b2:4c:52:7e:64:3a:c0:8b:4e:78:cc:dc:d3:c0:47:
         89:cf:7d:45:d0:33:68:bc:ec:34:de:19:6a:00:81:00:f5:4c:
         19:df:c7:22:9f:41:c7:08:04:b7:a3:24:31:c9:65:31:2b:25:
         35:3f:dc:3a:e6:bb:eb:71:cb:eb:4e:d2:43:67:de:cb:b3:aa:
         7b:f8:ae:5b:2e:85:c7:40:fd:e3:30:d2:42:da:42:86:3f:8e:
         e6:1c:69:d9:d6:8c:f2:aa:4f:98:76:fb:2e:32:bb:69:85:94:
         5e:13:1b:2b:cd:27:fd:94:db:4b:43:53:51:28:03:fc:34:d3:
         83:21:a5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:56:27 2026 by rpki-client