Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
File:                     ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft (raw, json)
Hash identifier:          j8UXy6cLSCRVLewW/RovBJ0KVTWqJZnw1bAs1PhrkNA=
Subject key identifier:   AA:6A:6D:A4:A6:F9:D4:5B:3F:09:BE:E3:80:8A:53:07:E5:CC:32:01
Authority key identifier: 00:32:53:4E:8D:56:0D:73:55:3C:63:2B:BA:10:34:4A:7C:81:66:14
Certificate issuer:       /CN=0032534e8d560d73553c632bba10344a7c816614
Certificate serial:       01A1DFBA2D957D04C5F144367C493FA0C540
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
Manifest number:          18F0
Signing time:             Sun 15 Nov 2026 15:01:22 +0000
Manifest this update:     Sun 15 Nov 2026 15:01:22 +0000
Manifest next update:     Mon 16 Nov 2026 15:01:22 +0000
Files and hashes:         1: 8gDgcDeShfBdliF1DBTffvxw12U.roa (hash: Fz6nbI88uHxwSxo85BK5DCibUg4PuN/OzYci0coXooc=)
                          2: ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl (hash: IQUmdkmBNHTfrlAenGK8XC8o1xGr0C7wi7WN9jVZC2M=)
                          3: jCaGFWRG0k_cfmlAxYZcjUIw_Yo.roa (hash: qpdto+41ybuG4juygcEcToReJEmG6ghtzKbjR0IgkSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:ba:2d:95:7d:04:c5:f1:44:36:7c:49:3f:a0:c5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0032534e8d560d73553c632bba10344a7c816614
        Validity
            Not Before: Nov 15 15:01:22 2026 GMT
            Not After : Nov 16 15:01:22 2026 GMT
        Subject: CN=aa6a6da4a6f9d45b3f09bee3808a5307e5cc3201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:46:ee:dc:bb:3a:e7:ce:6a:d1:79:40:89:b0:
                    bd:a9:8d:66:c1:00:ce:53:a2:bf:20:ea:2f:ab:31:
                    51:6a:80:91:6c:81:4a:5e:7f:8e:8f:c0:33:60:1e:
                    96:a7:7e:f4:9f:34:ce:b5:c6:67:b0:b4:2f:89:40:
                    01:8d:77:8c:3e:de:ee:14:35:67:8d:f9:0e:27:67:
                    73:81:e6:78:7d:7d:17:35:61:59:80:57:b9:e4:70:
                    45:71:2f:b6:8a:96:a0:33:97:05:69:51:8e:07:f0:
                    09:49:6f:09:fc:24:e6:97:cd:4d:79:3f:a3:f2:15:
                    8c:b2:63:3e:1b:14:58:9f:02:7f:d1:0f:be:51:49:
                    0b:25:34:8e:8d:82:c0:75:dc:83:e4:3c:ad:47:c7:
                    75:b2:e6:f3:37:bc:c5:4e:fc:fb:95:4c:d8:11:04:
                    fb:bd:fb:ca:e4:0a:61:37:32:67:ef:8e:95:d1:d0:
                    af:22:41:50:c3:98:99:81:1e:60:f0:d5:94:99:2d:
                    e7:e8:6c:43:fb:d0:24:60:14:06:8b:36:13:2f:c1:
                    c5:82:69:e0:7f:3a:5a:7b:65:f8:a1:60:b1:8f:ce:
                    23:3a:98:f4:ca:fd:16:9e:3d:85:bd:89:5d:e2:57:
                    ef:75:bb:fa:a6:13:16:f4:52:09:fb:e4:8c:83:e8:
                    50:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6A:6D:A4:A6:F9:D4:5B:3F:09:BE:E3:80:8A:53:07:E5:CC:32:01
            X509v3 Authority Key Identifier:
                keyid:00:32:53:4E:8D:56:0D:73:55:3C:63:2B:BA:10:34:4A:7C:81:66:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:45:56:92:2e:30:b8:55:a8:62:71:44:72:5b:f1:7e:c1:8e:
         d3:8e:e0:60:34:19:c6:f3:e5:7e:87:e6:ce:83:62:82:c0:29:
         61:f0:af:43:9f:70:16:fc:cb:fb:80:96:77:71:06:82:b0:0b:
         07:52:41:f7:0b:2e:33:b4:70:fd:6c:31:a9:b3:f8:b6:40:25:
         d1:68:e6:8f:3e:be:c5:34:b6:3f:75:e9:cf:56:f3:f7:44:2c:
         d5:28:b5:29:8f:b9:c3:8d:48:63:1a:35:1a:bf:a5:57:07:cc:
         42:94:d4:f2:1a:10:65:96:41:f0:85:0f:20:96:e2:2a:ef:7c:
         5a:b7:90:ab:71:e1:2a:50:40:1c:54:e4:2a:f3:17:1a:d0:d7:
         12:18:eb:59:29:ae:88:51:20:0c:07:c4:70:3b:db:17:b4:5f:
         e5:66:3d:a8:0c:8b:0b:e9:01:f4:67:3d:94:ba:09:2b:70:99:
         5d:d3:9e:6c:c5:fb:13:53:8c:c5:af:b4:70:36:19:75:60:1f:
         19:93:d6:84:ca:82:dc:d1:ae:2e:7e:d2:26:43:f8:e3:db:34:
         31:69:b7:f6:2f:c4:36:2c:f6:46:7b:61:c3:70:28:ef:36:64:
         6d:85:e5:4d:c8:97:09:6a:1d:c3:26:11:4c:ab:63:77:0a:0c:
         f0:9e:02:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:47:32 2026 by rpki-client