Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.mft
File:                     7YAJUKMdzayqxWrbk2pCvrhF4ks.mft (raw, json)
Hash identifier:          IDEC/vx3U0jJkxQGX1Ywni7WvoHhJCh16KbrEJLCR3k=
Subject key identifier:   3A:FC:2E:C5:5A:FF:50:7C:C5:EF:80:CC:96:3A:0A:1A:31:D1:D0:30
Authority key identifier: ED:80:09:50:A3:1D:CD:AC:AA:C5:6A:DB:93:6A:42:BE:B8:45:E2:4B
Certificate issuer:       /CN=ed800950a31dcdacaac56adb936a42beb845e24b
Certificate serial:       01A1DD270B873BE781E2EDA50A0ADFABA586
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.mft
Manifest number:          1B04
Signing time:             Sun 15 Nov 2026 03:01:25 +0000
Manifest this update:     Sun 15 Nov 2026 03:01:25 +0000
Manifest next update:     Mon 16 Nov 2026 03:01:25 +0000
Files and hashes:         1: 7YAJUKMdzayqxWrbk2pCvrhF4ks.crl (hash: fflqnS79zUrspN1g39dsr+eagDNDfQoIZgTzFasLpqs=)
                          2: BTDHLjruqtTm4aghm8g-UDB01Aw.roa (hash: ceBHbTJinwpAXUvnIsoz/hJdrSrfcdyZBili8GpoK2k=)
                          3: OlAqCYtfml5aAcuef4iTuGA1Znw.roa (hash: oBZ2FSaLr94Fj3AQH5JkrQIol38G33NlXd4VSVbL2Ks=)
                          4: UaR_UHkFAgSDKg8qfJLdQhv2nP4.roa (hash: FM6iqS7zaO3jyi72jPcoOz+XPbW692I1Gmdi8KqQbdQ=)
                          5: XtKptUPAZtnkVLsMtR3H72MIqSI.roa (hash: rOe55oF6czj16PMq9GI8XZ68fesrdqAJ54sASqiUvuQ=)
                          6: tQNl5CjDO3ZARJTcVpIioYV-514.roa (hash: T4bTHyUb2JZxHiZAVND95b0PREmzMxQnsDgvl4ssm/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 03:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:27:0b:87:3b:e7:81:e2:ed:a5:0a:0a:df:ab:a5:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed800950a31dcdacaac56adb936a42beb845e24b
        Validity
            Not Before: Nov 15 03:01:25 2026 GMT
            Not After : Nov 16 03:01:25 2026 GMT
        Subject: CN=3afc2ec55aff507cc5ef80cc963a0a1a31d1d030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:82:eb:82:c5:4f:1d:3f:8c:f7:89:db:42:a6:
                    8f:05:2e:73:7c:cc:57:6d:66:f8:82:75:82:25:bf:
                    c3:2c:57:e5:5a:e6:a1:e4:f9:1e:ea:9e:ef:35:6f:
                    f1:b1:a2:b8:75:ae:9a:af:59:df:cd:83:10:1a:eb:
                    d3:26:cc:ad:87:d3:5b:de:7e:37:e0:4e:e1:68:0a:
                    1e:ea:21:d2:05:32:1d:08:15:44:d4:90:45:89:1e:
                    47:67:58:25:63:9d:3b:89:6d:73:5d:d8:72:d8:6d:
                    4a:87:98:35:17:0c:b8:07:74:26:ea:94:cb:e9:4e:
                    78:11:2e:bb:ca:8b:1c:fa:dc:04:6b:dd:d5:c0:ee:
                    a4:be:a8:1a:1c:bf:b3:4e:62:ea:92:20:f1:7f:a9:
                    ed:07:68:89:0e:60:84:9d:37:9b:81:4f:89:15:95:
                    a6:a2:d3:ad:2e:b8:a4:d6:68:5f:b0:8b:29:1d:85:
                    88:26:66:66:ba:8b:ce:ad:41:27:8f:2a:35:03:fb:
                    dc:6a:51:73:e7:40:ad:f8:d9:4d:dd:0b:e1:6f:4e:
                    88:b8:00:52:7d:9a:43:db:84:d1:87:53:e4:40:f4:
                    9d:85:33:7e:75:b5:9c:90:cd:5d:cb:73:0d:eb:fc:
                    42:37:b6:ee:b4:93:93:4b:4e:64:ed:da:6e:66:25:
                    1f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:FC:2E:C5:5A:FF:50:7C:C5:EF:80:CC:96:3A:0A:1A:31:D1:D0:30
            X509v3 Authority Key Identifier:
                keyid:ED:80:09:50:A3:1D:CD:AC:AA:C5:6A:DB:93:6A:42:BE:B8:45:E2:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:70:16:44:29:99:3c:9e:07:ef:dc:84:86:2c:f5:1a:f2:5a:
         6d:3f:22:5d:5f:23:ef:44:e2:d9:d1:a1:72:f8:d9:4a:dc:80:
         2f:6a:06:bf:5f:46:a7:5c:73:4c:69:b7:3b:40:8b:7d:a5:26:
         df:99:f9:7e:88:14:e9:68:ce:28:5f:7e:91:5b:ed:81:40:8e:
         a9:ca:55:a1:22:59:71:d3:6e:a3:c7:c4:8c:a8:ea:08:07:63:
         27:06:4d:57:5e:c7:3b:74:fd:71:01:65:0a:ba:bc:ae:ff:b8:
         37:43:4d:2f:f2:2e:26:cf:f7:69:d5:ce:c4:fe:9d:62:bc:d6:
         f2:2c:97:2d:23:bc:95:7d:e4:68:dd:31:0b:b0:01:db:1e:d1:
         91:09:12:3d:12:a1:87:2e:9b:81:50:ae:3c:7f:47:63:67:47:
         93:59:a0:d3:9d:97:68:f0:22:f4:2d:7f:a7:02:60:6a:68:76:
         c4:98:2c:5e:08:23:a3:02:ef:70:17:31:fa:09:37:d3:10:75:
         14:42:e1:71:6a:75:d3:f7:48:9f:39:52:39:a0:1d:8f:e6:8e:
         73:a5:36:9a:5c:bd:d8:40:21:66:d3:64:bc:7b:ad:2d:ef:cf:
         72:72:8e:4b:25:6a:cd:84:8e:ee:98:ef:79:8a:37:de:d8:19:
         bb:80:ed:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:44:49 2026 by rpki-client