Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
File:                     AsNyEO2KVs4O3UV0v3NrYyReWCM.mft (raw, json)
Hash identifier:          DGE4q68u4QQHLaaszBVeTP+wlRffxZ3RFuqkjfZi88E=
Subject key identifier:   76:E3:E3:BD:C2:82:F5:FE:DE:E0:8F:B1:56:E4:44:99:EA:74:7B:15
Authority key identifier: 02:C3:72:10:ED:8A:56:CE:0E:DD:45:74:BF:73:6B:63:24:5E:58:23
Certificate issuer:       /CN=02c37210ed8a56ce0edd4574bf736b63245e5823
Certificate serial:       01A1DF82F2FE1F8A65D7EABBB1B57D087994
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
Manifest number:          1A87
Signing time:             Sun 15 Nov 2026 14:01:03 +0000
Manifest this update:     Sun 15 Nov 2026 14:01:03 +0000
Manifest next update:     Mon 16 Nov 2026 14:01:03 +0000
Files and hashes:         1: AsNyEO2KVs4O3UV0v3NrYyReWCM.crl (hash: fCtvHjH0Mf0Okbzg2Yxg3zioNrH1XRzEhnD2YkAIIck=)
                          2: dVy69fLGMOo8FwSSN3UwAlS882A.roa (hash: NDJLf7dSrw0PZVg4660IJDVpEuw7OX76mS1bdnbf9Eg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:82:f2:fe:1f:8a:65:d7:ea:bb:b1:b5:7d:08:79:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02c37210ed8a56ce0edd4574bf736b63245e5823
        Validity
            Not Before: Nov 15 14:01:03 2026 GMT
            Not After : Nov 16 14:01:03 2026 GMT
        Subject: CN=76e3e3bdc282f5fedee08fb156e44499ea747b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0e:06:bd:a4:3b:7d:76:f9:dc:0e:d2:89:45:
                    63:c6:5a:18:09:71:fc:c3:9a:91:87:bb:99:44:6e:
                    74:69:9c:58:91:8c:09:00:e6:fd:da:c9:9c:96:96:
                    3c:04:cc:65:b4:6e:5f:62:f5:d2:77:9b:52:2a:97:
                    25:05:8c:65:0c:df:91:c9:cd:2b:ef:7f:8c:04:90:
                    8a:87:17:54:59:67:37:6f:97:f9:16:8d:0e:89:43:
                    2a:30:d1:d2:8d:d4:78:8c:37:56:d3:28:21:f3:de:
                    0d:7f:84:16:7f:e6:1a:e6:cf:3b:e2:8f:f4:8d:2f:
                    e8:5f:77:20:43:88:eb:d0:f4:2e:75:5d:65:a3:0b:
                    17:b5:4a:25:88:4b:79:b8:be:14:6d:3d:97:c3:bb:
                    95:bd:bc:da:cd:7b:78:dd:cb:ef:b4:96:b6:b0:64:
                    61:1e:03:16:33:67:3f:8a:3d:c5:22:86:2d:e9:99:
                    2b:6a:97:e0:61:1d:3d:f6:a3:95:87:5b:00:97:42:
                    3f:78:59:a6:a9:65:65:9f:fa:24:a7:a3:23:67:dc:
                    80:84:2b:10:09:9d:11:f1:c3:e8:ef:08:a2:63:c8:
                    f4:38:be:75:68:ae:69:15:f0:d8:03:06:ac:bf:ff:
                    7a:f3:dc:3e:f5:52:9f:36:27:45:f1:fc:23:53:12:
                    5c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E3:E3:BD:C2:82:F5:FE:DE:E0:8F:B1:56:E4:44:99:EA:74:7B:15
            X509v3 Authority Key Identifier:
                keyid:02:C3:72:10:ED:8A:56:CE:0E:DD:45:74:BF:73:6B:63:24:5E:58:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:20:13:98:69:45:e6:06:32:a7:2a:ae:c0:56:3d:ce:e4:6b:
         d6:2e:1d:90:d2:aa:80:b0:06:40:3a:a8:69:63:71:0d:b7:db:
         4a:13:48:c0:1d:56:66:d0:19:f5:5b:40:69:c7:9e:11:d5:3f:
         85:5d:f5:46:71:7e:c6:0c:96:b3:67:22:f6:0e:41:b4:d0:4f:
         24:45:eb:bb:41:cc:4b:75:c1:71:39:c0:94:94:7e:fe:ee:71:
         c9:3d:4c:f0:78:72:8a:ec:41:16:58:9c:68:80:65:45:a9:ba:
         dd:a3:2d:91:e0:7e:da:19:b3:6c:96:61:bb:49:49:31:d0:cf:
         5b:1a:ef:dd:9b:7f:e7:07:0b:9f:d1:ee:ff:da:cc:de:a4:49:
         2d:1e:98:7f:0c:5b:5e:0b:66:74:f5:4b:7f:21:8b:11:5a:1e:
         7c:86:ae:08:c5:ac:6e:7c:25:1d:59:27:11:a7:b4:67:a5:2f:
         e5:7b:0c:f9:06:b0:66:c6:3b:af:d4:65:23:5c:12:6f:d0:61:
         1f:ae:0f:3a:23:57:6a:94:24:65:9a:64:27:9f:7d:89:bc:2e:
         f7:0e:59:22:7b:26:24:ae:55:53:4d:88:aa:11:9a:68:09:f5:
         cc:d6:c7:74:6a:32:16:1a:a2:fc:b5:c1:3f:bf:05:d3:25:26:
         5a:80:ca:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:06:48 2026 by rpki-client