Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
File:                     DsodW91QNE_174hKZg6C66g7wNs.mft (raw, json)
Hash identifier:          MA5eTFjXZzAaRfTERDXS/j6OmxsuuZuW9WU/iSma5U8=
Subject key identifier:   60:6D:BD:00:65:55:95:35:EF:D3:70:2D:FE:9C:46:87:02:E5:24:14
Authority key identifier: 0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB
Certificate issuer:       /CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db
Certificate serial:       01A1DC4B54F1BBC04FCD7519369A5AF23545
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
Manifest number:          1B05
Signing time:             Sat 14 Nov 2026 23:01:26 +0000
Manifest this update:     Sat 14 Nov 2026 23:01:26 +0000
Manifest next update:     Sun 15 Nov 2026 23:01:26 +0000
Files and hashes:         1: 8uJCBle1RKglYo7Vf5SU8h3gjCQ.roa (hash: CF7kzsiD0kB3UltpYKPxVQqRtJ8dCPMNmAuDmAiZHv4=)
                          2: DsodW91QNE_174hKZg6C66g7wNs.crl (hash: 8zu4RQDJofAB7KvXQeqOwQDaqyz7pXTgJc+/j+dvZ2E=)
                          3: UfUS4AgweibzcI9ivSjuopIuKmo.roa (hash: wv3d+e5BddXcUFyrDf2j3FXenz2r8zUlWN+AJi8VvhU=)
                          4: dPPVwBsKIhOkpp4TukHNHQ9Z15Y.roa (hash: gJhcO57CQOvrPaaNyDWjaH1LsCPlc/3O6kJgDXqRAaA=)
                          5: hjCgYma6rzLrBWjWnXsG_EEnTzQ.asa (hash: 5t0KlDhiEX03cwxjAF2yuFELlNkyoz5s/m+rSUMMRJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 21:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dc:4b:54:f1:bb:c0:4f:cd:75:19:36:9a:5a:f2:35:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db
        Validity
            Not Before: Nov 14 23:01:26 2026 GMT
            Not After : Nov 15 23:01:26 2026 GMT
        Subject: CN=606dbd0065559535efd3702dfe9c468702e52414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:18:39:d8:e8:1e:14:92:2e:a1:57:fd:23:27:
                    6e:66:5a:9d:10:30:05:65:0d:1d:73:a2:64:80:c5:
                    97:5d:54:43:01:89:e0:89:03:12:11:99:99:c7:f8:
                    4a:19:23:b3:9c:6d:a3:b2:1a:45:2d:60:c2:cd:34:
                    e7:57:ba:92:42:6f:3e:a0:ab:4b:2d:a2:2f:f2:55:
                    68:72:eb:8a:f9:2d:1e:82:98:32:4f:ea:c0:ee:55:
                    5c:a2:61:0e:35:dd:78:ab:5c:23:c3:48:ae:e4:4f:
                    f7:9d:7f:19:41:f2:bb:d9:f6:f5:b8:1a:9f:d0:9b:
                    14:2b:4c:10:00:07:5a:74:c1:06:bf:91:6b:e1:a6:
                    c8:01:db:d1:2d:67:1d:b9:c4:99:39:ba:b8:f7:8d:
                    f9:a3:f0:4a:89:f6:05:62:1e:9b:ff:1f:44:3e:f6:
                    37:92:c5:be:65:1d:ae:e8:22:f4:c4:ee:6e:f8:4b:
                    b6:7f:b3:5c:d9:3e:91:86:70:c1:8f:36:8b:e1:e9:
                    80:56:d8:a2:7b:ed:1a:36:03:8c:df:b9:53:06:50:
                    d9:52:cc:9e:16:9d:72:d2:7a:d8:d2:76:d3:38:a8:
                    68:19:d4:f2:5e:13:15:a3:fc:f2:cb:29:7e:2e:f4:
                    4c:9f:55:9d:66:cf:05:0d:f8:97:55:7b:84:d0:07:
                    2a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:6D:BD:00:65:55:95:35:EF:D3:70:2D:FE:9C:46:87:02:E5:24:14
            X509v3 Authority Key Identifier:
                keyid:0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:20:4f:71:ea:25:d7:af:1b:e1:fc:6e:4c:7d:99:4e:6f:45:
         f8:ce:50:ea:12:52:af:4a:78:e8:41:3c:d7:5f:4e:10:52:d2:
         ee:04:0d:bc:49:79:4f:00:30:7f:67:f7:b4:7a:e5:65:a7:2a:
         46:53:94:72:d7:63:6a:bd:37:1b:aa:70:2b:7e:9f:9a:92:ab:
         cc:a6:a2:1b:16:c1:13:50:da:f2:9e:1f:44:6d:2b:53:88:f2:
         12:23:99:b1:69:1f:bd:b3:f6:77:a3:8b:10:8d:ab:26:cb:8a:
         e0:f3:b0:29:19:36:63:b1:98:47:f6:a6:0c:24:59:9c:56:50:
         bf:17:c3:2f:6e:fc:99:8a:91:ef:b0:e8:17:e4:9d:fe:fa:82:
         8d:dd:83:3b:94:2b:e9:97:1a:8e:c8:2e:1d:43:49:b8:7d:5f:
         a7:de:d8:a7:91:ec:3a:01:88:6c:59:34:28:bb:3d:ca:91:c1:
         0e:24:ec:2e:73:d5:a1:d2:65:15:95:e9:22:8e:fa:c4:3b:e4:
         f6:e3:36:c6:3b:37:60:79:06:cf:1b:f8:4e:da:57:5b:bb:b5:
         c8:0f:73:4b:f9:08:89:a4:25:c5:47:d4:86:fb:2a:87:1a:42:
         53:ad:97:fe:e1:5d:6e:8d:20:72:de:be:fc:91:17:35:ce:bb:
         04:2b:1b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:36:35 2026 by rpki-client