Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/e78f10-6daf-4e6c-a27b-c3e692a314a6/1/ffYkUcKc2enXmd2DCdTqc3HOM7U.mft
File:                     ffYkUcKc2enXmd2DCdTqc3HOM7U.mft (raw, json)
Hash identifier:          o5CCMIqidl8uBj1otoOJfzO1+KWn/9VydQqFa31p4HE=
Subject key identifier:   34:6B:54:C3:CD:34:D6:32:5D:34:95:1B:1F:14:41:8A:3F:BC:91:C5
Authority key identifier: 7D:F6:24:51:C2:9C:D9:E9:D7:99:DD:83:09:D4:EA:73:71:CE:33:B5
Certificate issuer:       /CN=7df62451c29cd9e9d799dd8309d4ea7371ce33b5
Certificate serial:       01A1DB6F60BB435D72485D7E7FD97C65DC6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ffYkUcKc2enXmd2DCdTqc3HOM7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/e78f10-6daf-4e6c-a27b-c3e692a314a6/1/ffYkUcKc2enXmd2DCdTqc3HOM7U.mft
Manifest number:          6D
Signing time:             Sat 14 Nov 2026 19:01:11 +0000
Manifest this update:     Sat 14 Nov 2026 19:01:11 +0000
Manifest next update:     Sun 15 Nov 2026 19:01:11 +0000
Files and hashes:         1: NM7IEAzC6HHNuhcHK3LiNCC--Wk.asa (hash: +9n6CBslRbG8gClPBDRzFwtzqWBq0YKVtS1j7+cEie4=)
                          2: ffYkUcKc2enXmd2DCdTqc3HOM7U.crl (hash: exeKu+4Yej26vOc0RLQgiOzfy5m7eEE+4ERolQD/QMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/e78f10-6daf-4e6c-a27b-c3e692a314a6/1/ffYkUcKc2enXmd2DCdTqc3HOM7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/e78f10-6daf-4e6c-a27b-c3e692a314a6/1/ffYkUcKc2enXmd2DCdTqc3HOM7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ffYkUcKc2enXmd2DCdTqc3HOM7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:6f:60:bb:43:5d:72:48:5d:7e:7f:d9:7c:65:dc:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df62451c29cd9e9d799dd8309d4ea7371ce33b5
        Validity
            Not Before: Nov 14 19:01:11 2026 GMT
            Not After : Nov 15 19:01:11 2026 GMT
        Subject: CN=346b54c3cd34d6325d34951b1f14418a3fbc91c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:75:a4:91:bd:a5:5f:55:93:01:e3:70:86:ac:
                    f9:a9:f1:0c:15:57:df:93:8b:b0:4d:b1:22:c2:99:
                    e6:d2:f2:0f:df:31:41:d6:e7:a4:ea:fe:fe:50:ad:
                    41:71:60:c3:b6:07:e1:e6:d9:67:35:01:c3:21:e4:
                    d6:a4:6b:09:44:34:e6:9f:bb:05:5c:f7:0a:7c:ab:
                    e9:6d:6b:c7:b5:b3:9b:32:d1:ac:56:33:2a:97:29:
                    f1:8b:f9:30:a4:b9:ab:1c:00:bc:24:93:1e:13:bb:
                    00:8e:c3:2f:4a:70:a3:90:79:fd:a2:a1:20:07:b5:
                    0b:9d:75:97:c0:7c:dd:6d:a7:f7:26:0f:3e:c9:8c:
                    e9:0a:c2:12:52:11:44:9e:aa:e0:af:2e:27:5b:81:
                    bf:cf:f4:f9:de:c0:c7:b5:c7:2a:c9:72:80:00:89:
                    2c:b4:20:8d:12:ee:a7:a5:18:b2:0b:4c:42:0e:c5:
                    d3:6a:67:3b:1a:73:6a:86:8c:89:6f:82:af:2f:35:
                    91:70:60:13:08:80:5f:d6:16:94:b8:4f:71:61:91:
                    8a:ed:50:8e:4b:b9:cd:7e:f8:7d:33:6c:de:af:13:
                    f3:fa:d0:f9:c2:d6:ac:f0:ca:77:59:93:fd:4c:41:
                    21:f6:c3:1b:71:80:45:c9:c9:bc:7f:7d:cd:54:b0:
                    9b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6B:54:C3:CD:34:D6:32:5D:34:95:1B:1F:14:41:8A:3F:BC:91:C5
            X509v3 Authority Key Identifier:
                keyid:7D:F6:24:51:C2:9C:D9:E9:D7:99:DD:83:09:D4:EA:73:71:CE:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffYkUcKc2enXmd2DCdTqc3HOM7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e78f10-6daf-4e6c-a27b-c3e692a314a6/1/ffYkUcKc2enXmd2DCdTqc3HOM7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e78f10-6daf-4e6c-a27b-c3e692a314a6/1/ffYkUcKc2enXmd2DCdTqc3HOM7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:f5:a5:5f:0b:c3:0a:1a:a7:19:98:af:7f:4d:b1:1a:61:3e:
         85:c6:ef:4e:00:ac:da:88:98:fd:bb:8c:e3:8d:f9:4e:16:a9:
         71:54:02:b4:2d:55:1f:69:cd:ea:fb:42:be:3f:a6:5a:aa:3c:
         ca:5c:29:56:fb:15:89:41:ae:66:0b:b8:6b:c2:9f:f5:0b:55:
         7e:42:e4:59:ae:3b:06:de:91:c3:6f:33:24:77:55:5b:08:c2:
         be:20:41:81:62:be:a7:87:f6:78:07:27:27:e8:3b:e5:04:d8:
         af:15:16:25:88:94:18:db:77:1f:51:7b:c7:53:c8:4e:ce:f5:
         f2:79:a9:e2:70:24:61:99:f6:7a:82:18:d4:16:6e:1a:68:85:
         f5:d8:a2:2b:8d:a5:32:55:7c:b3:c9:4b:c6:ff:b5:4e:13:9b:
         b9:3c:8e:d6:19:2a:a4:03:a2:14:96:29:5c:b5:19:c5:cc:de:
         01:7a:94:94:bf:0c:2a:21:f2:4f:a6:3a:29:2f:b0:82:50:14:
         69:72:a9:45:c4:12:8d:6f:ba:b8:a1:50:6d:79:97:49:ad:18:
         d4:73:04:e6:e5:62:02:38:dc:2f:1a:16:ac:b8:f5:a2:33:d0:
         1a:fd:80:76:d7:5c:21:bd:61:c8:63:9d:f4:98:ca:c3:8d:e4:
         15:5e:9a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:30:44 2026 by rpki-client