Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
File:                     Q1QWsigrRTPDUJwY6VfODINryDc.mft (raw, json)
Hash identifier:          RtvzGESSt4Qr4EtxNbVmpRaSPKnURMEOHQfwSoexqR8=
Subject key identifier:   63:9E:5F:8D:A4:92:F6:20:AA:BF:1F:EB:38:AD:52:F0:10:F0:52:DD
Authority key identifier: 43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
Certificate issuer:       /CN=435416b2282b4533c3509c18e957ce0c836bc837
Certificate serial:       01A1DB3892C584C1A643984507FE71B21F6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
Manifest number:          12E5
Signing time:             Sat 14 Nov 2026 18:01:20 +0000
Manifest this update:     Sat 14 Nov 2026 18:01:20 +0000
Manifest next update:     Sun 15 Nov 2026 18:01:20 +0000
Files and hashes:         1: MnDYEmNyAQzBpzR98qjs2sOtO_c.roa (hash: 34lKjvmsvDbzxduruRJbqT8KL81GGIwldVfmoVn9Yyw=)
                          2: Q1QWsigrRTPDUJwY6VfODINryDc.crl (hash: r3wVJC8nKJBjby/KzkhUFRlKSTehIrqMhyUZzVNqFDs=)
                          3: UG9G_dnWRpZkM8dNOUmzQ9ddYpM.roa (hash: VJHtgY+XTe16MdK4R4BNwcTnWb1T/NjN98Z9wb0GkTk=)
                          4: vUHrTNIykiSnEmNGusQYaFxAqdw.roa (hash: 1iGnZuZAbpNIqbdvK2c36DPr9j4iU15E9+caM/CdPU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:38:92:c5:84:c1:a6:43:98:45:07:fe:71:b2:1f:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=435416b2282b4533c3509c18e957ce0c836bc837
        Validity
            Not Before: Nov 14 18:01:20 2026 GMT
            Not After : Nov 15 18:01:20 2026 GMT
        Subject: CN=639e5f8da492f620aabf1feb38ad52f010f052dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d1:5c:73:be:e2:77:6a:d5:3b:06:50:05:33:
                    a2:1a:c0:74:71:77:06:80:99:26:23:1c:64:3e:ac:
                    d9:0d:5b:17:ff:10:09:6a:5a:ac:44:da:6b:1b:2a:
                    24:d0:f5:e5:f7:dd:fc:f5:c1:2e:08:b1:8e:f0:87:
                    b3:a8:cd:4e:18:33:63:6a:16:f4:e6:4b:cc:bd:26:
                    91:6a:02:11:52:12:d8:bf:3e:8c:51:c1:98:1c:c4:
                    01:56:13:dd:53:b4:24:66:5f:9a:8c:c5:bc:0a:43:
                    0c:9b:b9:c5:cf:14:97:ad:c2:48:42:43:9f:bb:2c:
                    de:ff:6c:e3:d1:3a:22:9a:32:68:6e:5b:1c:32:2f:
                    e1:5e:4b:05:14:4d:95:3d:2b:18:31:c2:1d:f9:05:
                    98:ae:d5:24:08:a1:ea:e5:c7:c8:f7:4f:38:86:61:
                    b6:5c:6b:a2:87:e0:30:77:f8:12:92:bc:a7:11:04:
                    10:3e:59:49:20:0f:46:6c:32:bf:62:70:c5:de:9a:
                    e6:b7:6f:df:f2:08:7a:f7:1e:ec:97:95:f2:35:ef:
                    71:0b:60:cd:28:15:bd:e1:8e:f7:13:95:7d:aa:31:
                    ab:53:aa:d4:9c:20:18:e4:43:8a:ba:d7:f8:c9:29:
                    43:80:fa:9a:36:96:87:33:0e:dc:46:c6:fa:0e:88:
                    eb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:9E:5F:8D:A4:92:F6:20:AA:BF:1F:EB:38:AD:52:F0:10:F0:52:DD
            X509v3 Authority Key Identifier:
                keyid:43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:0a:45:06:0a:ac:13:05:d3:ab:16:6a:b3:44:d5:5a:27:15:
         8a:0b:8d:10:6b:2f:b1:aa:48:88:bb:a3:49:31:f7:a9:8c:cf:
         5f:aa:30:91:82:f3:c4:bd:4a:3d:89:72:28:5c:11:49:84:cf:
         32:a9:80:d3:1f:54:57:a4:6f:e4:a7:7f:3b:4e:02:da:62:85:
         72:b9:92:19:3d:31:df:45:2a:ce:35:6a:a8:c0:8a:7d:41:fd:
         2b:0f:92:a6:dd:46:bc:1c:ff:72:45:ea:00:f5:6c:85:25:bc:
         70:9a:b5:d6:cd:b2:22:6f:84:f1:6f:75:7e:9d:51:44:70:b2:
         9c:4a:64:fd:05:70:e9:3c:ba:b5:ac:a2:71:26:23:98:c8:e4:
         6d:53:1a:af:a2:9c:48:0d:9f:a6:3c:ef:3b:6b:5f:0d:de:a7:
         13:94:bb:6c:e6:cf:f7:02:3a:c0:3f:6c:1b:10:22:a2:49:c1:
         67:4b:24:d1:f7:52:70:c5:68:d8:c5:74:66:c2:ae:ff:b8:5e:
         cc:44:13:4d:de:ca:6b:12:72:26:b7:3e:36:9d:3d:ea:8e:d6:
         09:38:72:dc:b6:25:b1:bc:25:eb:05:64:61:7a:e4:27:31:d7:
         52:ff:9d:c3:46:e8:39:f8:65:52:cf:a0:96:58:e5:05:cb:73:
         81:cb:5a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:34:23 2026 by rpki-client