Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft
File:                     Mw5kD51jupQ6l7PcENTGhEpdPcE.mft (raw, json)
Hash identifier:          ahaWZiOKodQEEVDWuMOz85OTQUFjRzLbUXQgu4OVjIM=
Subject key identifier:   27:BB:58:A9:6D:2A:F4:FE:42:5E:E5:E0:33:DB:91:76:A1:1D:30:FB
Authority key identifier: 33:0E:64:0F:9D:63:BA:94:3A:97:B3:DC:10:D4:C6:84:4A:5D:3D:C1
Certificate issuer:       /CN=330e640f9d63ba943a97b3dc10d4c6844a5d3dc1
Certificate serial:       01A1DC14474BFF1339AE8A7DEB191C7C8B9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mw5kD51jupQ6l7PcENTGhEpdPcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft
Manifest number:          1B04
Signing time:             Sat 14 Nov 2026 22:01:18 +0000
Manifest this update:     Sat 14 Nov 2026 22:01:18 +0000
Manifest next update:     Sun 15 Nov 2026 22:01:18 +0000
Files and hashes:         1: 4OOnw9_jHGgqLY_psG6GZezPHtM.roa (hash: +U00qFyQxJuR5jHOa7i18wqaZcM160zgJxPC72SDiBo=)
                          2: Mw5kD51jupQ6l7PcENTGhEpdPcE.crl (hash: 6xNDA3pdkKOruz0GJzBHW51G+5BrYnYJTRNmHBg23MU=)
                          3: Z4u2ZuPRjtoJ1T7Bu7YaM-zHnb8.roa (hash: buF5g5hLeGHRRo3x/BwwzJhPSsDj5JSRKGK8mj4wcYU=)
                          4: cMli-vLDtEWVXqBnbPb2AmIMArw.roa (hash: yaXUPoTmaKSP0dIBZd+WqyCpfByX0KSPwLkW7J++kbI=)
                          5: dUzsM6a19GkdNIFlIA4P-4ydvho.roa (hash: uiC0tqNUZz32Kx4oM8PGGqs16V38TxlgadgXl3+nxY8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mw5kD51jupQ6l7PcENTGhEpdPcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 21:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dc:14:47:4b:ff:13:39:ae:8a:7d:eb:19:1c:7c:8b:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=330e640f9d63ba943a97b3dc10d4c6844a5d3dc1
        Validity
            Not Before: Nov 14 22:01:18 2026 GMT
            Not After : Nov 15 22:01:18 2026 GMT
        Subject: CN=27bb58a96d2af4fe425ee5e033db9176a11d30fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:31:a7:25:3d:d2:74:10:de:c6:9e:44:0e:94:
                    7e:5f:31:02:e0:5b:08:94:97:2e:7d:2e:dd:d3:2b:
                    cb:63:90:9b:1a:c7:83:25:f7:7f:15:4e:45:7c:9d:
                    df:a8:54:44:07:51:ee:a9:80:d3:13:bb:95:64:76:
                    95:e5:67:b4:1e:2f:d1:39:d0:e5:63:ef:12:8a:3a:
                    0e:73:81:00:7c:c5:42:c9:ba:ad:a7:bb:b1:f3:ca:
                    68:f8:9a:fc:37:e6:e8:06:c7:f7:50:fb:17:20:ef:
                    b3:ff:b5:8c:8f:0a:ca:d1:c3:72:a4:31:95:18:75:
                    93:2f:a6:0d:ba:2d:95:f7:d2:4f:9e:35:7c:f4:32:
                    17:5c:ab:cb:92:e2:ac:c9:1b:2f:7a:d2:79:fc:6d:
                    b4:42:50:0c:62:1d:29:b6:b7:61:b7:4d:b3:8a:90:
                    16:a6:89:3d:77:8c:a1:64:fa:5b:46:aa:6f:95:8b:
                    8b:22:40:9d:38:60:65:dc:ed:53:2a:14:ad:69:c6:
                    a6:ce:f5:ea:0e:c8:3b:1b:1f:2e:f7:a5:8b:a8:29:
                    1d:58:ea:a3:ff:aa:78:2d:3f:b7:d7:01:ec:7b:d4:
                    07:06:3a:d3:1b:44:94:da:0c:64:41:af:17:e0:49:
                    f5:05:e2:35:05:c2:17:39:30:8d:f1:9a:46:f6:24:
                    c9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:BB:58:A9:6D:2A:F4:FE:42:5E:E5:E0:33:DB:91:76:A1:1D:30:FB
            X509v3 Authority Key Identifier:
                keyid:33:0E:64:0F:9D:63:BA:94:3A:97:B3:DC:10:D4:C6:84:4A:5D:3D:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw5kD51jupQ6l7PcENTGhEpdPcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:32:df:a2:27:c3:e4:38:36:69:69:e8:41:fc:35:8f:97:1c:
         ae:5e:51:ad:25:c9:93:56:6f:5f:15:57:8f:e7:f4:88:a5:b9:
         2b:04:6f:0e:4e:a5:31:f8:09:61:cd:e8:86:4e:e3:6a:33:43:
         84:77:ac:cf:2b:0f:53:35:b7:35:38:43:2f:9f:34:ed:a5:66:
         86:7f:42:26:5e:d1:fd:db:1a:56:55:55:a5:20:d9:c3:5e:6b:
         bb:46:bc:cb:ee:0d:f5:6d:79:28:47:36:24:f8:e9:ab:c9:81:
         d4:d6:aa:04:90:f3:8f:70:ca:dd:04:2a:8f:45:34:9d:09:79:
         d6:8c:ef:09:cd:61:25:0b:92:d8:13:10:65:2a:78:a9:ea:8e:
         36:ef:99:0d:8d:42:2a:77:74:27:06:03:2c:c3:0c:eb:cd:03:
         af:01:a8:93:c0:f6:e1:ac:e6:c7:71:29:e4:c5:a2:0e:1d:29:
         af:77:ab:a8:5b:c5:94:d3:50:0e:d7:16:09:a6:9c:ee:06:86:
         2f:52:a4:bc:44:8e:f9:e7:a7:e2:69:27:24:db:a9:ef:df:01:
         ad:df:7e:4f:26:76:04:da:d8:a3:3d:07:95:4b:12:24:45:c1:
         50:52:c1:ce:08:85:03:13:ba:7a:f9:75:11:75:9b:a0:04:34:
         6b:67:ee:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:38:42 2026 by rpki-client