Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
File:                     pDJ8VulBFx6jvrom67niP031vPM.mft (raw, json)
Hash identifier:          U1KXEeJjZ6fq+Y+ael2iopVNvAkLd8ANvXUpRBCk78s=
Subject key identifier:   DB:D1:BA:91:3E:C4:FD:04:30:66:FA:D3:C5:6A:79:F2:B1:C6:0D:26
Authority key identifier: A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
Certificate issuer:       /CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Certificate serial:       01A1DFBA7A5BF98933D8EDC25F746692557E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
Manifest number:          0BBB
Signing time:             Sun 15 Nov 2026 15:01:42 +0000
Manifest this update:     Sun 15 Nov 2026 15:01:42 +0000
Manifest next update:     Mon 16 Nov 2026 15:01:42 +0000
Files and hashes:         1: 0lvXa172UplN6y7av1cXq_FBnIY.roa (hash: wYYltyOrSFKK2j0JVE4ExTzSFfm4Tu29VSNIrOnj0/w=)
                          2: J0u4PbYIevSkqXDSEnsyGZVMqtc.roa (hash: aBXYYl48jca9wveAZI/GuYbbGGyv9mDo91i3PZYst5k=)
                          3: W7a_s-Jl-VcdTVf7k5VBlu09lYo.roa (hash: NXJVtq1VsU3W1ziELfQ1JwgkYM4PzBdJsNwmTSOSzqs=)
                          4: oFb4jBbqBQ0GaSAPZ2CPzXwpuXU.roa (hash: ReFO9yx5996yanj90nD2kh+KTbHdkiMkBpj9BJ+Y/vs=)
                          5: pDJ8VulBFx6jvrom67niP031vPM.crl (hash: J7sj1njq7lUQd3VPTExsoqUmL3DGRu966iWfES22Q+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:ba:7a:5b:f9:89:33:d8:ed:c2:5f:74:66:92:55:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
        Validity
            Not Before: Nov 15 15:01:42 2026 GMT
            Not After : Nov 16 15:01:42 2026 GMT
        Subject: CN=dbd1ba913ec4fd043066fad3c56a79f2b1c60d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bb:8d:3a:f9:c3:08:d6:6f:12:92:47:1a:8a:
                    19:08:a5:3c:dc:06:13:af:b7:85:ba:d2:b4:11:da:
                    82:c1:63:6b:88:8f:c4:e1:24:a4:10:71:0f:6b:ec:
                    31:d3:dd:ef:98:3f:60:da:b7:34:69:06:25:a2:b7:
                    48:96:be:7f:88:9b:06:99:e6:a0:b6:aa:8c:30:09:
                    19:92:a2:29:c9:ee:a4:77:b9:54:d9:d6:c3:91:22:
                    4e:b5:bb:8c:69:fe:26:8b:a7:d9:65:88:44:fa:29:
                    eb:d5:67:0c:cf:5e:a3:2f:a7:97:29:a3:4a:62:0d:
                    f7:5d:96:9c:d3:22:b6:48:1e:c1:0f:83:7d:68:bc:
                    bb:1f:3a:71:62:b7:e5:98:c9:a3:20:90:e9:20:e6:
                    bb:28:25:1a:9c:13:9b:77:ac:1a:6a:c9:7c:74:13:
                    6a:3c:54:13:e0:99:f7:85:ff:f8:cc:78:d6:68:6b:
                    c3:05:85:96:9a:58:39:55:68:24:5e:25:04:77:87:
                    5d:a8:6c:7c:89:9e:70:0c:41:c1:70:89:13:65:f6:
                    67:95:a2:7d:43:b7:4c:43:92:ea:c8:50:1d:e4:df:
                    5c:e4:66:3b:8e:b2:e7:d5:1e:95:88:35:5c:9c:7f:
                    a7:37:92:2d:62:e0:97:9b:6b:e9:dc:62:45:8e:02:
                    c8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D1:BA:91:3E:C4:FD:04:30:66:FA:D3:C5:6A:79:F2:B1:C6:0D:26
            X509v3 Authority Key Identifier:
                keyid:A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:62:26:a7:77:34:5b:fa:58:16:50:d3:d7:dc:dd:3a:6b:5d:
         04:46:ef:62:6e:a4:2f:19:4b:40:76:20:2a:b7:f8:4a:ec:94:
         7e:fe:7b:13:3f:75:b6:00:ed:b1:39:49:41:56:cd:be:23:22:
         1e:3b:9c:ba:3b:ab:75:71:d8:96:64:4b:05:0f:4c:74:91:e8:
         7a:f4:06:52:50:7d:54:93:69:d2:33:e5:bb:17:a5:bd:0c:97:
         59:5c:e3:c8:7a:c9:fa:bc:b1:a9:af:6c:7c:dc:a6:13:17:61:
         b5:c8:db:50:e4:3c:63:eb:d0:63:21:1c:bf:6e:f8:83:d4:ff:
         19:b4:6c:31:95:0b:ad:e6:40:cd:ef:8e:4c:5f:95:ea:74:ac:
         22:bb:fa:2c:b5:23:5b:39:8e:c1:64:1d:76:58:b4:8b:59:eb:
         41:44:cd:f9:bd:b9:87:4f:99:95:14:9e:32:92:97:de:34:b7:
         52:b9:1f:c7:fa:14:2c:68:90:36:bd:9e:ab:00:68:a6:03:14:
         ca:d2:98:f0:db:7d:0a:34:b8:6e:db:25:6e:bb:e4:f8:8e:f6:
         9f:c2:c5:31:21:40:97:36:bd:b2:be:bd:27:33:3f:4b:4b:99:
         e6:d0:e5:05:a5:57:a2:ee:76:4a:10:d9:11:cf:28:b8:bd:40:
         9c:a4:c0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:48:50 2026 by rpki-client