Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/ffdc37-1a44-47cf-adaf-99933eec5c6b/1/7V_L2XIhSr5_fQFu0bwTOtBh6u0.mft
File:                     7V_L2XIhSr5_fQFu0bwTOtBh6u0.mft (raw, json)
Hash identifier:          Y5kCsAgW3tLCTZ6WEoxVVFZtgzgE61zlL7mFSsMQg/E=
Subject key identifier:   4E:3F:6F:7A:D3:50:6D:98:63:BC:C2:4F:B1:5C:EA:56:93:AF:22:4F
Authority key identifier: ED:5F:CB:D9:72:21:4A:BE:7F:7D:01:6E:D1:BC:13:3A:D0:61:EA:ED
Certificate issuer:       /CN=ed5fcbd972214abe7f7d016ed1bc133ad061eaed
Certificate serial:       01A1DB7016B98A5380C5D6B2681DA2DF933F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7V_L2XIhSr5_fQFu0bwTOtBh6u0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/ffdc37-1a44-47cf-adaf-99933eec5c6b/1/7V_L2XIhSr5_fQFu0bwTOtBh6u0.mft
Manifest number:          0103
Signing time:             Sat 14 Nov 2026 19:01:58 +0000
Manifest this update:     Sat 14 Nov 2026 19:01:58 +0000
Manifest next update:     Sun 15 Nov 2026 19:01:58 +0000
Files and hashes:         1: 1mu-oF5lEGtu3bKBru8G-eAjPDI.roa (hash: HG5xIfF52f1qSIktwkhA6u4wMdnhONyi0mxZYpcPZgY=)
                          2: 7V_L2XIhSr5_fQFu0bwTOtBh6u0.crl (hash: tsW0kKaeFisK55pHowjrmzkIhOTElT9MXMM/d/FHmtU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/ffdc37-1a44-47cf-adaf-99933eec5c6b/1/7V_L2XIhSr5_fQFu0bwTOtBh6u0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/ffdc37-1a44-47cf-adaf-99933eec5c6b/1/7V_L2XIhSr5_fQFu0bwTOtBh6u0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7V_L2XIhSr5_fQFu0bwTOtBh6u0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 19:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:70:16:b9:8a:53:80:c5:d6:b2:68:1d:a2:df:93:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed5fcbd972214abe7f7d016ed1bc133ad061eaed
        Validity
            Not Before: Nov 14 19:01:58 2026 GMT
            Not After : Nov 15 19:01:58 2026 GMT
        Subject: CN=4e3f6f7ad3506d9863bcc24fb15cea5693af224f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:44:d3:2f:55:bb:54:e5:27:b1:97:5f:57:a3:
                    44:8f:fe:f5:38:90:be:2f:78:c1:75:d8:5f:a7:65:
                    0b:59:30:0d:51:b5:80:44:92:25:ef:96:9e:f3:33:
                    3f:ec:4e:cd:a6:6d:12:30:80:76:78:35:62:6e:6a:
                    2e:62:ff:d4:bb:3d:14:1a:8e:45:9d:ad:c9:31:4d:
                    1d:7a:86:dc:5d:6c:5f:0f:61:e4:fe:66:45:fd:2e:
                    e3:49:b5:d0:7d:ba:85:fa:b5:f0:43:32:f1:a4:f6:
                    80:72:93:4a:55:73:b0:4d:9a:ec:5b:a7:d0:b7:b1:
                    47:83:92:03:cc:d2:05:c5:ef:ef:09:7e:1e:c0:58:
                    10:23:a0:46:29:72:a1:1d:e1:71:3f:fb:42:60:84:
                    ec:da:be:df:26:2c:4c:df:bc:62:bc:98:5b:72:bf:
                    45:50:d8:37:7b:4f:d4:0a:0a:76:58:7f:8f:8f:cf:
                    ac:60:c6:f5:d5:5d:75:49:78:b5:5f:a8:5a:ba:fc:
                    2e:08:1b:09:85:05:aa:b6:b2:70:96:e9:bb:09:d9:
                    ef:2d:94:80:2f:cc:5e:4a:da:18:8d:8f:31:4b:a5:
                    57:6a:0d:d9:0d:65:8c:d8:5e:9b:69:9d:ae:48:77:
                    8c:bf:29:65:8a:92:80:10:8b:5a:81:18:a3:62:c9:
                    67:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:3F:6F:7A:D3:50:6D:98:63:BC:C2:4F:B1:5C:EA:56:93:AF:22:4F
            X509v3 Authority Key Identifier:
                keyid:ED:5F:CB:D9:72:21:4A:BE:7F:7D:01:6E:D1:BC:13:3A:D0:61:EA:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7V_L2XIhSr5_fQFu0bwTOtBh6u0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ffdc37-1a44-47cf-adaf-99933eec5c6b/1/7V_L2XIhSr5_fQFu0bwTOtBh6u0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ffdc37-1a44-47cf-adaf-99933eec5c6b/1/7V_L2XIhSr5_fQFu0bwTOtBh6u0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:18:21:bc:52:50:91:3d:2a:15:e8:3a:1e:23:16:24:bc:2f:
         80:69:2e:e1:86:32:28:84:63:ce:aa:f9:5f:c1:fb:2d:cb:bc:
         2f:5c:a3:3f:d2:17:7a:a7:5c:5b:f7:16:15:fc:00:20:a6:59:
         bf:7d:cd:0d:65:f2:7d:d1:d9:54:e0:bf:39:ce:1f:c0:92:dd:
         9f:7e:73:c6:2a:e9:54:59:64:e5:72:f1:3f:56:a6:f0:4d:86:
         21:d8:c3:f8:6d:11:ac:59:7e:35:85:e6:c3:cd:e0:80:c8:55:
         79:35:71:37:ae:f6:ad:f8:29:29:fc:a1:8d:bc:b9:ac:d3:e8:
         8c:5a:24:b2:c2:ba:a2:2a:34:2f:1f:fb:58:83:b3:76:9f:7f:
         fd:3c:dc:26:c3:d3:d2:54:a6:ad:a8:a7:8c:e8:d9:26:ac:28:
         c3:42:73:58:07:64:a9:af:0f:42:93:b0:61:b0:6e:2c:51:0c:
         ca:92:0f:2e:0f:ce:2c:18:16:0f:b0:3f:c2:45:86:2d:2d:4e:
         d7:9a:2b:73:04:de:eb:d1:c4:f7:91:e2:c3:09:47:c6:a9:f2:
         b3:81:35:67:d9:88:96:2f:c2:d0:fb:d0:0e:97:1d:0b:bf:e0:
         a3:b9:28:c7:15:ce:98:7d:23:59:7b:7b:67:26:51:85:8b:6b:
         ee:13:18:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:21:40 2026 by rpki-client