Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
File:                     M3L10Rir0Ska4kjmxp1kqZqa7wY.mft (raw, json)
Hash identifier:          v5OR2dCPNNKUPGTO8Cy1uLAv0EG1UnuE+GkUItyOXDw=
Subject key identifier:   E8:00:24:D2:E7:D1:52:2D:DE:FD:F7:1E:C5:15:39:53:AD:08:78:D2
Authority key identifier: 33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06
Certificate issuer:       /CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
Certificate serial:       01A1DD5DAA7083271A54226FF6C4BEA77812
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
Manifest number:          1126
Signing time:             Sun 15 Nov 2026 04:01:05 +0000
Manifest this update:     Sun 15 Nov 2026 04:01:05 +0000
Manifest next update:     Mon 16 Nov 2026 04:01:05 +0000
Files and hashes:         1: M3L10Rir0Ska4kjmxp1kqZqa7wY.crl (hash: cHKcnTPdQqhos0klfK58wnb1eMMcVpia+/2/ZrL37f8=)
                          2: x3j0YXNfrQ1uoL9p2fnHwDo4Voo.roa (hash: +HeOEQXq41iJ7S0nO2qqAI09YN5UE1e6xIQ3R8exCoQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 04:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:5d:aa:70:83:27:1a:54:22:6f:f6:c4:be:a7:78:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
        Validity
            Not Before: Nov 15 04:01:05 2026 GMT
            Not After : Nov 16 04:01:05 2026 GMT
        Subject: CN=e80024d2e7d1522ddefdf71ec5153953ad0878d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8c:ef:8b:7e:ce:c7:36:23:d8:58:98:56:e6:
                    38:d8:07:c7:bf:13:d7:fa:83:f8:a8:a5:d6:26:94:
                    14:32:55:bb:1d:ce:b1:7d:f5:66:36:02:7c:76:f3:
                    8c:e7:45:05:ed:88:6e:08:31:b5:b9:1e:00:da:7c:
                    40:d7:5e:91:0c:c0:e4:55:6f:1e:1b:97:14:f4:b6:
                    e1:59:84:04:cc:7d:b7:d9:0c:bf:60:e0:1b:cb:3b:
                    b4:ad:7b:a3:35:9b:72:16:a8:e7:73:c4:0a:90:1c:
                    a6:c7:64:2f:24:f6:6f:d2:d8:3e:87:37:34:a9:88:
                    2d:12:38:f9:bc:53:e2:8a:2c:b7:f3:9b:32:a4:5d:
                    10:bc:ce:cc:bb:0c:ee:b9:8b:80:f0:f4:88:dc:fb:
                    03:f3:91:c0:0f:3f:64:64:26:45:de:bd:30:19:26:
                    55:a1:40:52:5e:ff:6f:c2:6f:2c:43:41:99:19:7a:
                    c3:2e:36:7d:ac:6a:43:29:e8:33:16:5b:f4:61:d6:
                    ce:14:29:63:3a:0f:7a:ae:74:b5:1f:e5:05:a2:bf:
                    d0:fe:0d:0f:cb:e0:e0:d8:dd:a8:4b:72:b8:23:c0:
                    ec:e0:02:b0:55:4f:d2:e0:b3:d3:08:84:2f:c4:af:
                    68:cc:ee:bf:5b:ba:fa:19:a6:0b:3e:35:fd:98:a2:
                    fd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:00:24:D2:E7:D1:52:2D:DE:FD:F7:1E:C5:15:39:53:AD:08:78:D2
            X509v3 Authority Key Identifier:
                keyid:33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:81:2f:ca:39:d1:99:b7:ff:39:46:7d:8d:72:0c:0f:bd:0d:
         c9:81:9f:f2:0d:77:db:8f:3a:c8:0f:a4:06:1d:6b:31:e5:e3:
         d6:2c:74:f9:d1:04:c1:57:11:de:e6:b8:fa:b2:bf:ff:fe:e6:
         17:c2:37:dc:4c:53:48:a9:e1:0f:94:66:ab:12:7c:f0:0c:fc:
         67:ee:4f:8e:f1:91:5c:15:b1:e2:d5:6f:78:20:31:b0:be:f3:
         3f:e7:e6:bb:9c:8a:32:7d:2c:00:f1:f4:ba:3a:d1:2f:b4:e7:
         00:d1:4d:98:d3:bd:89:99:8a:b8:e3:27:c2:26:9c:1e:ca:ad:
         d9:63:cd:08:20:2e:82:c8:d4:93:66:8e:d8:ea:e0:df:d3:ea:
         29:98:c2:ac:08:6d:95:2d:c3:a9:13:ca:de:a3:22:3f:75:92:
         7d:08:ac:e1:d6:13:c3:90:0a:cd:77:22:4c:5e:11:96:67:33:
         a4:a7:da:ea:02:2b:b0:be:5b:f0:83:2e:6a:61:1a:87:5b:56:
         f3:d5:19:1a:a4:aa:e5:09:9e:1a:fa:f7:55:b3:df:60:bf:d8:
         c1:cd:47:2d:b2:52:a0:b2:e4:b1:30:5c:1c:60:bf:3a:bd:ff:
         dc:30:87:11:27:a9:ff:dd:c1:af:e8:29:38:f9:8a:81:8c:8e:
         6a:84:dc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:46:48 2026 by rpki-client