Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
File:                     MLepUygLb5mPwRxHy-kbgmM2TrA.mft (raw, json)
Hash identifier:          n6IscR3ibmJk63iBNcJcqQpi6hPxECtIJgzwRjpAU10=
Subject key identifier:   6E:92:3C:59:35:29:1B:9A:C3:2B:A9:A8:48:10:FA:D7:BD:75:FB:7B
Authority key identifier: 30:B7:A9:53:28:0B:6F:99:8F:C1:1C:47:CB:E9:1B:82:63:36:4E:B0
Certificate issuer:       /CN=30b7a953280b6f998fc11c47cbe91b8263364eb0
Certificate serial:       01A1DD26A352066A95DFECAEB98E975E2658
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
Manifest number:          09D4
Signing time:             Sun 15 Nov 2026 03:00:59 +0000
Manifest this update:     Sun 15 Nov 2026 03:00:59 +0000
Manifest next update:     Mon 16 Nov 2026 03:00:59 +0000
Files and hashes:         1: MLepUygLb5mPwRxHy-kbgmM2TrA.crl (hash: d0LrlEFFE6EPfgTpgz8YbUrwFlYcydTCUVtKlc8gx3c=)
                          2: VX50YHQNMqydPFFv_i2q16OC83o.asa (hash: qVGUxWoUNrKAJvK00yw9OUzR8/bN4gQHLCHE7l23LyY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 03:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:26:a3:52:06:6a:95:df:ec:ae:b9:8e:97:5e:26:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30b7a953280b6f998fc11c47cbe91b8263364eb0
        Validity
            Not Before: Nov 15 03:00:59 2026 GMT
            Not After : Nov 16 03:00:59 2026 GMT
        Subject: CN=6e923c5935291b9ac32ba9a84810fad7bd75fb7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:42:18:20:2c:88:ab:3f:88:46:cd:e6:48:17:
                    0d:a0:3e:6a:3f:f9:db:16:60:be:47:41:f8:a1:4f:
                    29:20:87:ef:64:e8:9c:3c:d7:86:dc:b5:8b:42:b8:
                    ac:94:4c:66:16:5a:b9:2a:98:0a:81:c0:30:3f:f3:
                    0d:9e:e8:ee:36:8d:36:68:c1:b9:7c:d8:bf:64:bc:
                    f9:0b:9a:87:e9:11:a2:2c:e3:7f:e6:d7:00:5c:ed:
                    ca:f2:dd:95:d4:7d:b4:cf:3c:36:fb:4c:34:7b:ed:
                    bc:b2:0e:ae:24:ff:b3:f7:eb:31:c6:50:9d:1c:cf:
                    a3:82:c4:11:ea:b7:fb:5b:14:c6:6a:55:66:14:84:
                    84:11:cd:2b:bd:7d:7e:a0:b6:d4:24:be:1a:e7:ed:
                    c4:65:7e:8b:bf:da:44:9b:53:f6:d4:11:5c:ba:75:
                    fe:88:d5:24:9d:61:ab:bc:aa:ab:78:80:12:7a:68:
                    e9:d9:16:0a:81:a9:af:b0:ff:5e:eb:6a:d3:b4:e5:
                    cb:a0:99:70:21:c9:af:ea:c4:ec:c0:5d:f1:c7:a7:
                    8a:e9:8d:ad:51:22:9c:c9:11:5d:9c:15:57:8e:92:
                    7b:47:97:06:01:52:79:69:de:60:8c:bb:7d:2c:33:
                    3a:7c:9b:f8:a7:7b:5d:5d:d1:18:fb:06:e1:7f:4b:
                    b3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:92:3C:59:35:29:1B:9A:C3:2B:A9:A8:48:10:FA:D7:BD:75:FB:7B
            X509v3 Authority Key Identifier:
                keyid:30:B7:A9:53:28:0B:6F:99:8F:C1:1C:47:CB:E9:1B:82:63:36:4E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:a0:bd:e5:a4:62:34:dc:1e:d1:57:52:c2:0c:6f:a0:30:83:
         43:99:6f:b2:76:9d:75:76:6f:d4:16:c4:c7:a6:bf:39:63:c3:
         69:52:e1:4e:50:be:74:af:b5:cd:f6:46:1e:8d:6c:33:24:35:
         41:70:0b:c2:92:42:8e:01:75:92:7e:a8:b1:41:da:83:d3:09:
         5f:6d:b4:fd:94:df:34:e4:74:a3:db:97:5f:82:33:d4:73:e5:
         53:dc:ae:9d:af:9e:f7:57:ef:f9:b0:19:ab:86:84:31:9b:21:
         c1:fd:04:28:6e:15:b2:67:73:38:65:6e:08:06:56:25:c2:c4:
         bb:98:0c:16:a3:53:e2:91:a0:df:bf:12:28:21:75:8d:d1:16:
         3f:84:22:40:f2:4f:58:3b:53:07:13:03:4e:dd:50:bc:75:05:
         29:f0:36:c4:2d:b0:f1:bb:66:e3:fb:b9:00:80:2d:c1:75:4a:
         8c:9e:86:ff:54:62:60:b2:68:29:86:73:45:09:e8:c5:9f:c3:
         26:1e:13:4a:28:d9:ca:d5:a3:e9:26:0c:eb:4d:23:c7:32:d0:
         ed:6c:a1:a3:d4:c6:15:fb:9e:6a:16:33:0c:44:2d:3e:27:ac:
         f9:6d:b5:66:9e:49:da:6b:77:5d:8c:5e:b6:90:08:0e:c3:e7:
         44:d6:86:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:32:17 2026 by rpki-client