Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.mft
File:                     JgG7aRi9zJGkFCiQHrmM7ZcPPu4.mft (raw, json)
Hash identifier:          zAV50YfCYR+5Xai5+uaGP4dwszIiNbGoxqR/9irf2tg=
Subject key identifier:   66:A8:FE:02:19:28:E3:36:5B:D4:4A:B3:7F:87:67:C3:60:5D:46:6D
Authority key identifier: 26:01:BB:69:18:BD:CC:91:A4:14:28:90:1E:B9:8C:ED:97:0F:3E:EE
Certificate issuer:       /CN=2601bb6918bdcc91a41428901eb98ced970f3eee
Certificate serial:       01A1DE396D3CBC2D0FE8B6BE3B7537E38870
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.mft
Manifest number:          02FD
Signing time:             Sun 15 Nov 2026 08:01:07 +0000
Manifest this update:     Sun 15 Nov 2026 08:01:07 +0000
Manifest next update:     Mon 16 Nov 2026 08:01:07 +0000
Files and hashes:         1: JgG7aRi9zJGkFCiQHrmM7ZcPPu4.crl (hash: sFwGp3I3tlP67HzZa/OF34RTe0FyOMBJp81ED2yZUfg=)
                          2: xI2T6u-ogHCh_qmF9fvjI4t2phU.roa (hash: 8tqJsupYoAdrcHq1+XtacOJOwfLsGLJVAq+lOhZtBiQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 08:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:39:6d:3c:bc:2d:0f:e8:b6:be:3b:75:37:e3:88:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2601bb6918bdcc91a41428901eb98ced970f3eee
        Validity
            Not Before: Nov 15 08:01:07 2026 GMT
            Not After : Nov 16 08:01:07 2026 GMT
        Subject: CN=66a8fe021928e3365bd44ab37f8767c3605d466d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:06:e4:db:88:3a:46:33:8a:b5:cd:39:ca:f4:
                    45:32:0f:bb:99:37:a2:c4:ac:e0:76:c0:4c:12:67:
                    80:39:50:41:46:78:06:81:a9:21:3e:e8:79:ad:f7:
                    55:20:d9:bc:71:5c:77:8c:b2:32:5e:33:8f:ca:e7:
                    a2:a0:27:16:3a:14:c0:74:b7:b8:eb:7f:6d:78:ae:
                    b5:8e:cf:de:ec:22:67:82:57:14:c4:9c:f4:ab:67:
                    05:5f:15:22:24:0c:b3:59:22:cb:19:6b:1b:ff:16:
                    29:be:8c:11:09:36:39:20:e3:de:02:34:59:14:79:
                    e9:d4:d2:47:d1:76:ca:87:c8:88:33:c6:c7:64:b8:
                    14:25:d8:40:58:bf:f6:9d:f0:ab:8f:44:96:b8:b9:
                    20:50:ed:16:a2:92:d2:a8:a5:b3:ac:49:c6:91:98:
                    b9:59:4f:e7:94:83:68:3f:2d:e1:51:7a:85:a4:ec:
                    51:3d:a8:10:10:d6:d6:0d:1b:39:9a:a2:70:87:18:
                    d2:33:ce:8c:d0:ad:c1:15:16:16:4b:e9:62:5a:c0:
                    b3:3a:f4:bb:e3:13:fc:9e:68:e9:9c:84:d9:95:60:
                    6e:d6:8d:9c:9a:fb:fc:55:5f:d4:66:4e:4c:3b:cf:
                    86:7a:24:0a:f2:94:f4:05:06:14:b6:e0:ab:a1:45:
                    65:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A8:FE:02:19:28:E3:36:5B:D4:4A:B3:7F:87:67:C3:60:5D:46:6D
            X509v3 Authority Key Identifier:
                keyid:26:01:BB:69:18:BD:CC:91:A4:14:28:90:1E:B9:8C:ED:97:0F:3E:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:ea:47:4b:58:f0:42:1c:25:03:9c:90:da:05:f6:94:ea:3d:
         59:51:7e:34:6b:ad:df:fd:fb:d1:c7:91:37:b2:0d:3f:1f:d7:
         34:a7:f9:f3:87:22:15:2b:8a:57:04:32:e8:bf:9f:63:09:1b:
         f6:16:29:2d:1a:db:32:32:5c:25:2d:1b:bc:c3:b6:77:77:80:
         ab:da:82:3a:cd:2c:19:c5:38:bf:ac:e1:3d:4c:73:d8:91:ae:
         26:4f:58:8e:3e:05:d0:fe:0a:6a:26:08:2d:32:91:f0:8a:b1:
         1c:4a:8b:e4:6d:73:f3:15:82:5e:41:7a:2f:eb:3f:18:fb:7c:
         05:2a:52:be:16:26:15:80:dd:c3:c6:97:73:33:d8:37:0a:ac:
         45:92:9c:b1:d9:56:ed:08:9d:16:78:2d:b1:b1:29:e8:63:c8:
         b5:46:ee:cb:49:39:d5:ca:eb:3a:f7:4b:c3:06:68:09:51:c1:
         8c:22:66:c5:ef:29:b0:03:29:dd:d9:d1:cd:f1:45:01:07:59:
         08:3d:eb:5e:13:3a:6e:97:14:e7:bd:8c:7f:0b:7c:81:bb:1b:
         01:d1:16:8a:de:96:e6:ed:b8:28:3c:3a:a0:0c:d5:b6:bb:e4:
         8a:ba:8b:71:a4:46:12:23:9f:18:35:33:49:8b:30:03:1f:ee:
         50:99:76:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:11:53 2026 by rpki-client