Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.mft
File:                     cwLNwp_coJ6aDz99IRPahafh1lQ.mft (raw, json)
Hash identifier:          EDc1lfLddLpxZ6jdXf5frgDCgTy3qRC7KftXq5oUvWQ=
Subject key identifier:   7F:28:0D:02:9C:26:5A:40:8A:79:30:45:63:D1:60:AC:52:23:09:2F
Authority key identifier: 73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
Certificate issuer:       /CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Certificate serial:       01A1DE3989E16E63EFDE4B704BDD10686AB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.mft
Manifest number:          1B0F
Signing time:             Sun 15 Nov 2026 08:01:14 +0000
Manifest this update:     Sun 15 Nov 2026 08:01:14 +0000
Manifest next update:     Mon 16 Nov 2026 08:01:14 +0000
Files and hashes:         1: 1-LAMY_lOImjoN-AfYbenj-7e2H0.roa (hash: WA9VbhOLsnkhr99t+GxEakx8Qb9Vd9GgWAXUqScjES4=)
                          2: BoG23-hU6aLnORa5fAFyExELy2Q.roa (hash: 7PLhZA2QvLLlRihbluQxWHzQ8l7aMC7leTU8/xYnBAM=)
                          3: C0r-cY3PZ8w2ErqDHFMpZmmxO9Q.roa (hash: 0fzepPCr8VSYTdzkU0rJBG/IAaYZvMnWILQEBrYBeOs=)
                          4: LSmvCR26_7rk_JHaYJHekDtYFxc.roa (hash: 12F/wjEcpWC5kZ9FkSDJy6CvEcFDJ7gOQhKdgmv89cQ=)
                          5: cwLNwp_coJ6aDz99IRPahafh1lQ.crl (hash: rTcIhkxi3RAE0O7V8VEaNc/OuT7ZdpMJdX+pEOFg0x0=)
                          6: hai4X4w5Xpn45AhheGUf7veANBY.roa (hash: DLehSvGujokpN0oWhsjrBVnYPRYUWJQUJXLEVCY7+1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 08:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:39:89:e1:6e:63:ef:de:4b:70:4b:dd:10:68:6a:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
        Validity
            Not Before: Nov 15 08:01:14 2026 GMT
            Not After : Nov 16 08:01:14 2026 GMT
        Subject: CN=7f280d029c265a408a79304563d160ac5223092f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6b:34:b0:dd:d3:18:e4:7e:02:3d:26:d8:7c:
                    d8:d3:ed:04:40:86:94:19:9e:34:6c:2a:26:75:a6:
                    c1:f6:b9:e1:83:b5:06:d6:41:33:50:80:a3:88:3a:
                    7d:5c:f1:f5:47:55:d0:10:b0:4e:39:d6:d1:d6:e1:
                    29:5a:72:6e:24:18:cc:96:c5:8b:e6:c2:5c:0d:2c:
                    75:4f:46:7e:35:87:86:58:3f:d3:db:69:e2:57:fb:
                    c0:71:2f:61:02:10:f0:d4:20:57:e3:ed:20:ae:d1:
                    d1:a5:81:97:48:aa:fb:a7:db:0c:38:a8:f8:52:a4:
                    e0:7b:6d:d9:f8:f4:06:ce:64:d4:6a:11:b3:a6:17:
                    35:94:4a:09:4a:37:c2:65:a2:30:fe:69:cb:f8:d0:
                    df:da:ed:3b:1b:6b:07:af:73:37:2b:8a:7c:c3:16:
                    3f:41:35:5d:6b:7c:14:37:66:2e:f8:17:9b:b5:aa:
                    17:68:eb:c4:9b:61:54:46:1e:02:1f:a0:1e:1c:37:
                    74:ed:24:4b:4f:7d:b4:5e:fe:64:23:73:b2:49:d8:
                    53:27:da:59:ed:6e:de:56:e6:61:04:f8:9e:59:a9:
                    ba:b6:de:95:c1:fe:0a:5f:41:2a:6e:f3:3b:77:d0:
                    ff:1c:c8:d7:94:b1:3e:91:ef:fb:20:f2:a5:d0:d1:
                    b8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:28:0D:02:9C:26:5A:40:8A:79:30:45:63:D1:60:AC:52:23:09:2F
            X509v3 Authority Key Identifier:
                keyid:73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:23:d7:1b:05:52:e7:80:63:20:56:14:30:38:09:e4:f2:d0:
         f5:d4:81:03:a4:5e:e7:fa:05:58:b5:a8:e6:7b:29:e9:5a:b9:
         f0:83:6e:6c:b8:87:80:42:49:e0:b4:ce:54:c0:7f:50:47:90:
         a9:28:53:e9:8f:98:e8:8f:0b:74:f2:aa:2f:f4:ad:d0:3a:0c:
         85:c9:57:48:82:a7:55:de:da:cd:3a:f0:6f:35:c2:60:f6:ed:
         9d:01:33:77:58:db:bb:4d:29:da:8c:f9:41:35:07:b4:81:7e:
         f6:d6:1c:45:a0:98:28:c8:fd:fb:2c:b8:54:2b:8d:f8:ad:15:
         1b:ee:88:1e:d4:c0:d4:ba:c5:7a:a0:07:1e:4d:a9:f6:c1:a0:
         f6:d7:12:62:2e:5a:81:06:09:6a:94:05:02:4b:8f:68:54:1c:
         4c:78:b1:df:29:fc:1d:fa:d9:79:b9:08:79:80:f2:4a:2f:05:
         6b:21:4e:5c:90:d0:a0:48:12:06:bb:93:c4:86:4c:f3:78:f8:
         4b:c8:24:8b:08:67:d2:4d:1f:63:06:81:38:75:3e:81:55:fe:
         95:f4:50:61:ab:7c:59:db:58:09:84:51:ce:56:1d:2f:e0:3c:
         59:e4:15:20:18:42:19:e7:88:f2:50:e8:62:59:4d:e3:01:26:
         dc:d4:e8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:35:15 2026 by rpki-client