Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
File:                     p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft (raw, json)
Hash identifier:          ju1VI9gX+EjPmcMk/yq0/ve9CW5VLzUn/6H3ky6yNcs=
Subject key identifier:   32:74:68:CA:78:9C:62:1D:A8:07:68:61:5D:97:48:D2:36:2C:99:50
Authority key identifier: A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47
Certificate issuer:       /CN=a750263823402b83c11c5014d32666dcab111447
Certificate serial:       01A1DF159E156212319B74D1771BD1C84F2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
Manifest number:          059B
Signing time:             Sun 15 Nov 2026 12:01:38 +0000
Manifest this update:     Sun 15 Nov 2026 12:01:38 +0000
Manifest next update:     Mon 16 Nov 2026 12:01:38 +0000
Files and hashes:         1: p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl (hash: Y3U46jZ377Ku+EHdE00/70LjPxiow61e3x0LElKQAm4=)
                          2: uIYw_8iiZTupx6FQ8I2_JU4U5OU.roa (hash: j0RS1RQJQSNrBv7ngDU2LKpRzV2MtQ6zJxmWtahtrSI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:15:9e:15:62:12:31:9b:74:d1:77:1b:d1:c8:4f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a750263823402b83c11c5014d32666dcab111447
        Validity
            Not Before: Nov 15 12:01:38 2026 GMT
            Not After : Nov 16 12:01:38 2026 GMT
        Subject: CN=327468ca789c621da80768615d9748d2362c9950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6a:9e:99:81:22:22:a3:24:c2:72:13:68:8c:
                    c3:5d:81:1c:53:0b:4c:10:81:84:41:f9:23:c1:38:
                    47:b8:c8:eb:a1:53:62:c2:a5:2b:57:8b:5c:a4:8f:
                    6d:12:e1:a8:93:52:61:9f:ec:03:22:f8:be:7a:a6:
                    5b:af:8c:c6:8a:43:18:68:2b:27:14:c2:3d:16:9f:
                    63:06:a1:85:b1:06:3e:8e:de:d0:9b:fe:00:36:ee:
                    97:e9:16:48:b0:0b:2a:70:5b:29:e8:62:d2:c4:b5:
                    46:a1:98:4e:3f:0b:a0:77:c5:09:fe:a1:27:60:c8:
                    83:52:33:37:a0:d6:ff:b7:f9:68:94:de:af:6e:73:
                    07:ec:d2:b3:4c:44:7e:cc:42:3e:78:d8:3e:d4:a9:
                    69:1f:1e:da:60:b8:79:99:ee:dc:97:53:de:bf:da:
                    f7:9a:89:d5:61:22:9c:5f:a0:22:1c:ac:1e:e2:c1:
                    f8:21:29:1f:57:94:ce:ef:8e:72:70:6c:6d:16:9c:
                    25:55:e7:bc:d5:37:76:c1:d6:2a:0b:32:8d:a3:1e:
                    aa:c8:30:4a:d9:19:9e:57:2a:ca:c6:7e:87:e5:7e:
                    4d:bb:7c:71:c4:66:5c:3e:a7:17:26:65:86:fc:5a:
                    d4:62:93:a4:d5:e7:96:94:f9:0a:ef:cf:a9:ee:4d:
                    64:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:74:68:CA:78:9C:62:1D:A8:07:68:61:5D:97:48:D2:36:2C:99:50
            X509v3 Authority Key Identifier:
                keyid:A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:16:3c:db:cf:e6:74:52:8d:e2:e9:2e:b6:aa:4f:26:65:df:
         2e:fe:b9:f6:d5:ff:fa:db:46:aa:73:46:43:e6:50:76:20:7d:
         93:43:e2:ab:ce:c4:b8:8b:14:f1:80:87:bd:ce:88:c3:b0:19:
         01:67:c7:b7:45:e1:8e:6b:b5:1c:4e:94:92:93:aa:ec:89:34:
         6b:12:10:18:db:2a:87:da:0e:f3:96:6a:96:74:7e:1b:7c:70:
         d3:37:40:ce:20:61:72:0f:56:ba:f3:39:48:a9:77:ec:27:25:
         68:40:24:de:f0:97:f4:78:a8:ff:a7:d0:40:6d:4d:d6:6f:be:
         7d:76:58:c3:a8:af:f9:d3:6f:d6:ec:09:2e:40:29:8d:47:28:
         9f:dd:07:f3:23:53:50:6b:fc:87:21:4c:b8:97:28:4a:7a:49:
         e4:47:41:4b:2b:df:ca:6a:eb:29:73:69:a2:07:97:4e:e7:ad:
         ae:58:ca:07:3c:c5:e3:7b:b3:51:03:3a:e8:77:5f:69:3f:13:
         80:0e:8d:24:82:af:1d:70:c1:16:66:2a:37:a9:ff:a4:94:4b:
         3e:bc:bd:95:27:07:6e:72:14:4e:0d:f5:76:34:70:fb:c2:10:
         bd:02:3a:b1:c9:bf:2a:7f:6d:ad:9f:0e:31:e3:71:c0:74:9f:
         67:b5:3f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:49:30 2026 by rpki-client