Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
File:                     f_F65Ue58mQeYFd_5VPdtvdJoIc.mft (raw, json)
Hash identifier:          igbQDeOK4KlMc6D0wO3te5eE1CeQBZMA11gwdVrvVkA=
Subject key identifier:   D0:0A:F6:EE:EE:5F:DB:7E:71:D2:B5:C8:C7:19:21:07:F9:6F:B9:5B
Authority key identifier: 7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87
Certificate issuer:       /CN=7ff17ae547b9f2641e60577fe553ddb6f749a087
Certificate serial:       01A1DE70764CC48443424277073FDC6237BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
Manifest number:          0842
Signing time:             Sun 15 Nov 2026 09:01:14 +0000
Manifest this update:     Sun 15 Nov 2026 09:01:14 +0000
Manifest next update:     Mon 16 Nov 2026 09:01:14 +0000
Files and hashes:         1: fBtCXHN9XY90heH_7gUYjpIVJLg.asa (hash: 9PP5Oi9Up0MyYYLD0HvJIwTKqzpch2Rp1VmxN16nEG0=)
                          2: f_F65Ue58mQeYFd_5VPdtvdJoIc.crl (hash: qkGYg+mWWQZt0BpDhV0Ezijkn9JVS8LAWyG0FuI2g/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 09:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:70:76:4c:c4:84:43:42:42:77:07:3f:dc:62:37:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ff17ae547b9f2641e60577fe553ddb6f749a087
        Validity
            Not Before: Nov 15 09:01:14 2026 GMT
            Not After : Nov 16 09:01:14 2026 GMT
        Subject: CN=d00af6eeee5fdb7e71d2b5c8c7192107f96fb95b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:9e:0e:7f:d8:75:50:d2:54:20:dd:b2:81:67:
                    79:6b:ce:d4:ca:2c:3e:83:e6:4a:26:97:a3:cc:49:
                    2c:55:a9:75:b5:6b:a7:8a:51:8e:e7:76:ec:f0:a5:
                    25:5d:98:fc:31:50:9e:f7:91:87:68:0f:69:8a:13:
                    47:a5:f2:d0:89:74:7b:dd:ad:85:ca:ae:cd:a4:7d:
                    0d:41:2f:42:86:6c:78:c5:a1:ba:a6:c8:70:b7:65:
                    d2:d6:e6:65:4f:86:8b:83:6a:08:e0:76:83:3d:a1:
                    0b:7e:1f:30:55:ff:9a:2d:68:bf:7e:a5:4c:89:93:
                    cf:d4:82:bc:d7:8d:8d:c8:58:ba:d3:67:3e:88:6a:
                    12:87:27:f5:89:3e:19:23:7c:9a:bb:ea:1f:e7:a1:
                    88:ee:1e:ee:78:0f:5d:5d:c1:95:a6:67:78:c1:a0:
                    4b:2f:3f:8b:10:ea:bf:d9:cd:c5:10:bb:f7:5a:a9:
                    ec:d8:93:ea:9c:b3:80:1c:57:f3:12:64:74:a5:a4:
                    d1:bb:47:94:b6:0d:16:42:fb:ad:ff:62:65:41:24:
                    89:d9:c7:d2:de:f6:5c:b4:c3:0b:7b:c5:6f:26:c8:
                    49:41:1e:a0:b6:9f:a3:5f:bd:e1:f2:35:fe:54:0d:
                    d4:49:04:a4:1a:5e:6f:2f:d8:9d:51:ce:e5:2f:23:
                    2f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:0A:F6:EE:EE:5F:DB:7E:71:D2:B5:C8:C7:19:21:07:F9:6F:B9:5B
            X509v3 Authority Key Identifier:
                keyid:7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:06:9e:e9:9a:a0:fe:80:d5:8e:32:63:40:a9:9d:a6:ac:d9:
         aa:be:d4:c4:e1:18:f6:1e:06:d1:3f:07:d4:fc:4e:dc:bd:fa:
         87:b8:7e:8f:7b:77:dd:e8:34:6b:39:96:f9:08:d8:39:35:c4:
         8a:56:45:24:e2:2d:d3:47:9c:24:d9:ee:54:b6:1c:89:4a:de:
         1a:fb:02:72:5a:52:8a:dd:ec:01:af:6a:88:f5:ae:16:d4:16:
         85:02:34:c3:a6:5b:b5:c7:e7:e9:dd:22:7b:fa:8d:69:b1:70:
         e7:00:36:a1:8b:b0:be:88:8f:a3:0d:42:43:72:2d:37:cf:44:
         93:d1:5e:00:d8:0a:cd:3f:7f:e5:ea:09:bd:14:8f:d2:09:02:
         75:f0:9b:fd:11:d2:1a:39:85:d5:1e:21:f0:78:96:fd:63:20:
         77:04:96:fe:46:05:14:0d:a4:ff:20:2a:3d:24:7a:c0:4e:b8:
         af:64:5a:95:ea:9b:a0:7a:72:56:7c:ed:51:e0:8b:f4:46:a9:
         5c:ba:a9:7c:e2:73:f7:01:7a:70:72:8e:ae:98:43:d4:8c:65:
         c4:bc:a5:39:92:13:ac:e7:a7:67:bf:e6:f4:8a:a2:d5:80:cc:
         00:9b:af:53:f6:c7:4d:c5:96:00:bc:93:13:2f:26:4f:24:c5:
         93:ae:2a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:56:02 2026 by rpki-client