Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
File:                     PiDHANmNdqnGQBc4ifk2faneiZc.mft (raw, json)
Hash identifier:          U8GLfYpkoUlZpm4SFjCuLUUw7ow6oDvfW7a5kd9X5w4=
Subject key identifier:   2A:ED:FA:DD:2A:61:6B:56:5D:C5:03:12:4A:C2:60:E0:7F:77:A3:BE
Authority key identifier: 3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97
Certificate issuer:       /CN=3e20c700d98d76a9c640173889f9367da9de8997
Certificate serial:       01A1DD5E5E374C6EF94F42AA0BCFE483C403
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
Manifest number:          1B01
Signing time:             Sun 15 Nov 2026 04:01:51 +0000
Manifest this update:     Sun 15 Nov 2026 04:01:51 +0000
Manifest next update:     Mon 16 Nov 2026 04:01:51 +0000
Files and hashes:         1: 3Y2bsvd6Ko2TakhACGAC13OxWgg.roa (hash: hop+YCd6wtmHiz87UpYcHYekpewszM4DMDY6Yajc55g=)
                          2: DEt4Y-_VZKpKHUQGndzBwGKa-hI.roa (hash: Pn+dJyctNTmeoTcdBPCYjrOipk+Ikj5vYjRfpzr/AfY=)
                          3: Fd0my4VD8yFhFNY23xVFQ5bNE7o.roa (hash: Xq0TLzzFqkURQ7QOU8lzKIy+PNOHeKXumeKowKwhe0E=)
                          4: PiDHANmNdqnGQBc4ifk2faneiZc.crl (hash: dc9trsratPlMnJd8+rMPapEsLLvbQ8iMYIvyiy21vVM=)
                          5: XfL7J3_lKAhMT6FV_AAy67CADLI.roa (hash: Cja0K8hb1CFlq8SDbTIyn6C1tgY/4LTLk6lQT4K0o4Q=)
                          6: uekau7rSPung7Kbe6f858ZuB0t8.roa (hash: M2Y/E4DYJ0oSGWPcmXmrI0IqZMHXZ+8X2D2MD5VVJU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 04:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:5e:5e:37:4c:6e:f9:4f:42:aa:0b:cf:e4:83:c4:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e20c700d98d76a9c640173889f9367da9de8997
        Validity
            Not Before: Nov 15 04:01:51 2026 GMT
            Not After : Nov 16 04:01:51 2026 GMT
        Subject: CN=2aedfadd2a616b565dc503124ac260e07f77a3be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:68:12:92:f1:11:18:e5:d7:42:55:3f:02:9a:
                    78:23:a7:32:7f:25:eb:d3:9f:99:c2:07:3d:8e:e8:
                    da:0e:d2:4b:ce:87:c1:fb:b4:94:05:77:a0:05:d4:
                    c6:f0:6f:ef:4c:10:b4:a8:07:ad:3b:83:0a:f9:04:
                    e3:4d:dd:cb:89:57:d5:50:f7:b2:08:b7:4b:b8:be:
                    07:db:8f:18:1e:b6:da:70:bc:68:8d:59:af:11:75:
                    fb:0a:7d:51:ef:12:ed:9a:6a:a4:09:63:10:f5:7a:
                    de:1f:18:11:3d:41:2c:56:47:93:3b:78:1b:04:23:
                    f8:b4:9b:25:51:8d:a5:19:1b:00:09:74:e8:47:8a:
                    f0:df:5e:5c:02:55:f1:09:79:58:36:0e:8d:32:6b:
                    8c:74:a3:63:9a:42:b1:62:dc:9d:44:7e:cb:f0:7f:
                    27:cf:b5:e6:75:42:cb:7e:01:84:9b:83:98:a0:ae:
                    06:ce:8b:5c:42:de:ad:56:2e:69:3a:bf:62:85:e2:
                    f3:79:a7:3b:83:2c:de:4e:f9:fd:95:3c:2f:af:7e:
                    dc:bd:8e:60:cf:ad:38:96:7b:d6:6b:c5:19:ce:63:
                    21:54:df:dc:2f:02:ab:71:b8:b0:a7:a8:c1:38:b6:
                    64:a1:08:ab:eb:fe:f2:4e:ef:e0:b2:e0:94:e9:b3:
                    52:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:ED:FA:DD:2A:61:6B:56:5D:C5:03:12:4A:C2:60:E0:7F:77:A3:BE
            X509v3 Authority Key Identifier:
                keyid:3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:a3:f5:38:5d:b6:c6:bb:0c:c2:0a:67:80:55:a3:c8:c7:f8:
         f8:f3:74:33:a5:0c:27:b7:ea:66:8e:fa:2e:81:88:67:e4:3e:
         cd:fa:c1:df:06:a4:d2:3c:76:8a:c9:8c:7b:73:59:32:75:4a:
         c3:3e:a3:3d:58:85:ec:95:c4:41:b5:f8:65:29:30:96:04:8d:
         dc:93:d8:74:54:0b:f3:9e:41:40:71:5a:bf:d7:a9:d3:d5:1e:
         45:46:d9:f1:36:e0:f7:ce:30:51:08:65:c4:72:58:61:f7:38:
         2d:9b:79:65:48:de:81:45:55:76:06:94:66:24:23:62:bd:5d:
         a3:7e:41:57:11:be:d0:21:8b:8a:d1:c4:35:58:d5:34:15:f1:
         fd:f7:b9:c8:3c:0a:c3:23:a3:2e:2a:ff:f3:80:b8:39:03:82:
         4a:22:88:91:9a:60:8f:15:60:13:fd:8c:50:42:9c:9c:ed:97:
         fa:d1:9e:0c:b5:d3:c2:7d:ed:ce:cf:f2:5c:11:d0:fe:04:79:
         48:4c:19:5c:93:b8:cd:6c:36:54:1e:65:e2:a9:0b:d9:2b:57:
         d5:4c:f7:dc:c8:f4:c0:a0:60:e3:48:c1:ca:14:c0:f1:07:fd:
         cc:72:17:84:d6:52:a7:14:31:77:dd:a8:05:5b:ac:f6:2a:f4:
         c5:dd:a8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:02:33 2026 by rpki-client