Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
File:                     5jGwgNTqb9Bham5wHHyBXW_4fAA.mft (raw, json)
Hash identifier:          xwk6NS16ERKVbgSTgG8BE+DOcoU5hc83HEN3g2+FL/I=
Subject key identifier:   FB:06:05:D9:1F:C0:30:94:BB:8F:3B:28:4C:73:B5:D3:93:75:53:C7
Authority key identifier: E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00
Certificate issuer:       /CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
Certificate serial:       01A1DF4C716018B8C62456B43949A59BC280
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
Manifest number:          0CC7
Signing time:             Sun 15 Nov 2026 13:01:30 +0000
Manifest this update:     Sun 15 Nov 2026 13:01:30 +0000
Manifest next update:     Mon 16 Nov 2026 13:01:30 +0000
Files and hashes:         1: 3Uu6-Km0t7pl2GLMEbSI9_TLxag.roa (hash: hXLyK65nAY5+Ut+o0gb/BjxofeYx4PkadbFG04BKn8s=)
                          2: 4RhMZahyPAwo146TEpPKu9ePT2I.roa (hash: tBGvizwGCjR2IcH4F8OLjMl+yMIqhcGRdbR2C5pIbnk=)
                          3: 5jGwgNTqb9Bham5wHHyBXW_4fAA.crl (hash: SuVw5Fku8jiwHTeP+g0oYLXTijxtkBoDxnsDYMdq5Z4=)
                          4: GwvSuBhe9j3SRlsBolDRf2N0AMA.roa (hash: 9ZEJo3RSRRuK8gs7leiXlQt1JyVPC9+1EuL+tyIfk/I=)
                          5: H4QLFR4-VWtTH3wvuaow12NPB4c.roa (hash: bdQlsc3BPSHO6Zn9QaadsNsV4OnEPV5+i5GaKzval08=)
                          6: p3_p0oefeCWIGWl--B6scwMOl68.roa (hash: TzUMNS4PCBQmbQd3CE8J49kK3X/KRKK4UzkYkcKRrPc=)
                          7: x1IDat6YDBdzEhpue2RnoEodHRk.roa (hash: GNbqBnSl6BYmQm/dEuII/J8pPs8l3TWXFnBRJpdqWP0=)
                          8: zPofNoaI2RS9IpHftjHCFMeYgVg.roa (hash: GrlWnZ81qO00EP6m7P5v1VXEnw8zBrYaQ+SSPFWD5L0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:4c:71:60:18:b8:c6:24:56:b4:39:49:a5:9b:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
        Validity
            Not Before: Nov 15 13:01:30 2026 GMT
            Not After : Nov 16 13:01:30 2026 GMT
        Subject: CN=fb0605d91fc03094bb8f3b284c73b5d3937553c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:03:a0:33:22:45:5c:12:88:22:fb:e8:16:3c:
                    2b:63:b9:61:c2:e7:9f:3c:b2:76:ca:63:e9:ac:1d:
                    24:ae:5a:59:ee:08:54:88:b7:0b:70:14:22:96:f9:
                    94:64:0e:f0:43:e9:62:4c:b7:54:87:f9:83:b1:04:
                    a9:eb:c7:e9:45:2f:e0:9d:57:de:e3:61:c0:95:d0:
                    c8:4b:fc:f3:f2:f1:95:88:28:a3:2b:79:85:fe:36:
                    5a:11:02:b8:51:e7:29:a6:98:08:48:28:2f:46:37:
                    8c:ef:5f:dc:16:43:1e:2c:83:2b:93:db:27:8b:83:
                    c2:e6:80:7b:fe:ce:f3:9b:e7:fc:70:f7:b6:74:e3:
                    f5:a1:71:53:bb:a2:cd:6e:ed:95:1a:d8:7b:2b:de:
                    de:18:de:b5:88:d7:d9:8f:2c:27:3e:17:71:c8:b0:
                    b9:25:13:63:e3:45:17:9e:0e:f7:02:80:2d:13:34:
                    bf:2d:36:ba:d6:aa:ab:2c:15:7c:ee:10:77:10:85:
                    78:cc:64:71:2b:4f:48:3a:c6:79:56:fc:70:7a:2a:
                    e1:90:ce:c2:24:f3:30:17:05:56:ce:08:de:9e:f1:
                    56:90:a9:39:8a:ed:f5:37:4f:ae:a2:96:3e:67:4c:
                    26:0c:60:a9:25:42:cb:26:c7:55:89:ed:13:e8:86:
                    20:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:06:05:D9:1F:C0:30:94:BB:8F:3B:28:4C:73:B5:D3:93:75:53:C7
            X509v3 Authority Key Identifier:
                keyid:E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:64:38:a1:a9:7c:e6:74:96:1b:88:12:47:74:71:03:9e:bd:
         01:b6:cd:19:4d:d3:c3:4a:31:4b:cd:b8:6f:3d:72:5f:24:40:
         84:a5:f3:94:b8:ce:48:16:7d:87:d0:9b:5f:de:42:70:1a:02:
         b7:f4:2a:84:83:e7:b7:f1:44:fe:10:d6:03:57:db:51:ff:18:
         5b:f2:5b:37:3c:b2:5f:9c:78:5e:6a:ea:94:77:98:1b:d9:85:
         fd:7d:b7:81:3a:a3:59:8a:b9:e8:23:54:f9:53:92:ae:44:61:
         65:c8:4d:46:e7:10:25:98:5b:1f:21:08:ff:ab:ec:36:c1:c8:
         6a:53:0d:a6:2f:59:68:1e:90:a4:9e:e8:0c:99:08:31:84:70:
         db:c4:5e:69:9d:99:a5:83:03:68:17:57:5c:9c:dc:e5:2f:a0:
         13:f7:38:1e:63:1f:2c:f1:86:9a:07:7c:88:f7:b6:39:87:71:
         2f:c4:25:07:b8:f1:3f:23:a0:0c:3d:d1:1f:cb:49:c3:8d:ab:
         9f:c4:f4:6e:f4:cf:f1:e0:d1:04:72:93:42:39:ef:77:cc:4d:
         58:2f:86:07:2d:92:6b:f3:b6:91:47:2c:a8:27:db:d9:62:c2:
         00:9b:98:c2:14:b7:b9:8b:94:a4:e8:4d:0a:7a:3e:bc:b6:3b:
         ac:57:ff:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:36:18 2026 by rpki-client