Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
File:                     i7AWzMBcV2V0az92QtBD6BEgNwU.mft (raw, json)
Hash identifier:          XtEg5lKZWayOwtUfdX3Dgtjyjxa+aIIJ3Pbbj2RQgkQ=
Subject key identifier:   A1:19:8D:35:C1:1C:66:28:B0:06:5A:80:C5:AE:C4:9A:1E:7A:AB:3F
Authority key identifier: 8B:B0:16:CC:C0:5C:57:65:74:6B:3F:76:42:D0:43:E8:11:20:37:05
Certificate issuer:       /CN=8bb016ccc05c5765746b3f7642d043e811203705
Certificate serial:       01A1DCF05E70CB7792FC62F9618B3B91E553
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i7AWzMBcV2V0az92QtBD6BEgNwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
Manifest number:          05E1
Signing time:             Sun 15 Nov 2026 02:01:42 +0000
Manifest this update:     Sun 15 Nov 2026 02:01:42 +0000
Manifest next update:     Mon 16 Nov 2026 02:01:42 +0000
Files and hashes:         1: Uo4wvgdXfyF3e2k0pZS0H1UzGLw.roa (hash: MZrsYUO7qgY/xpSvPUXy1NiJNVe3XMBHtcUlpHocjuI=)
                          2: i7AWzMBcV2V0az92QtBD6BEgNwU.crl (hash: QRKouzUCRGiV/XfxQtVnjM0OasLa0EIdgnccPjCJ3vA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i7AWzMBcV2V0az92QtBD6BEgNwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 02:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dc:f0:5e:70:cb:77:92:fc:62:f9:61:8b:3b:91:e5:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bb016ccc05c5765746b3f7642d043e811203705
        Validity
            Not Before: Nov 15 02:01:42 2026 GMT
            Not After : Nov 16 02:01:42 2026 GMT
        Subject: CN=a1198d35c11c6628b0065a80c5aec49a1e7aab3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:50:25:33:9b:68:71:c9:06:1c:e8:b2:9c:e2:
                    fe:7a:74:34:21:47:88:01:c1:86:0a:41:c3:ea:4c:
                    73:fc:f4:f3:c7:e3:03:06:3e:87:1e:9a:5f:1d:86:
                    60:04:19:4e:4d:72:55:d6:7e:5c:18:70:c5:a0:7a:
                    e8:47:e1:f5:8d:5e:64:4d:0b:e5:25:27:f8:90:5a:
                    f9:a1:59:39:b1:59:8f:54:45:7e:49:09:c2:dc:ad:
                    f2:83:e6:89:a0:88:d9:e5:16:8b:7d:8a:38:db:0c:
                    59:0f:a4:d2:f5:21:a3:62:84:70:ad:3c:00:bb:55:
                    93:c3:85:27:b0:f1:ab:49:c6:df:a8:05:df:fd:28:
                    f8:37:e0:9e:ec:b9:34:b7:c4:fb:eb:b9:1a:f2:e0:
                    54:20:75:8f:51:89:01:43:7e:e8:67:bc:e1:fb:d9:
                    da:d2:d5:ea:d3:88:0e:be:dc:5c:ca:20:0a:26:1a:
                    6b:f5:b2:d1:63:79:dc:b9:16:41:90:97:0a:00:db:
                    0e:7f:2c:4e:18:b1:f5:99:7a:51:15:77:e0:73:55:
                    5e:a2:63:e5:62:de:e1:d3:87:9a:d2:f7:4f:4f:a0:
                    b0:d2:38:2d:e6:2b:7e:31:77:c6:b0:67:6b:87:19:
                    be:22:6c:d4:09:cf:20:c1:71:5a:0b:9f:59:49:4c:
                    f1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:19:8D:35:C1:1C:66:28:B0:06:5A:80:C5:AE:C4:9A:1E:7A:AB:3F
            X509v3 Authority Key Identifier:
                keyid:8B:B0:16:CC:C0:5C:57:65:74:6B:3F:76:42:D0:43:E8:11:20:37:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7AWzMBcV2V0az92QtBD6BEgNwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:bf:ef:b3:91:6c:29:8b:9e:7d:a6:4a:e7:af:87:59:42:71:
         da:7c:12:07:87:29:9c:72:66:e8:33:3d:b4:c5:89:a6:73:cd:
         7f:5e:0f:0a:92:c2:7f:67:87:be:5c:a5:8f:ad:9b:77:ab:ca:
         0d:20:8e:a9:43:a1:32:fe:ec:e9:dd:65:50:9e:01:78:91:f1:
         d0:ef:7e:30:8b:ca:d0:fd:7d:30:59:9a:f7:c9:92:73:10:83:
         06:2f:cc:a9:11:b6:00:49:87:b5:fe:7e:7a:b6:c2:84:8b:e7:
         02:57:39:6a:bd:a2:7b:83:26:e0:2f:20:2e:54:a0:16:8f:81:
         a9:09:6d:0d:0d:4c:ca:95:7b:db:4d:3c:6e:e4:f9:65:bd:42:
         28:95:26:50:b7:96:42:e3:a1:92:87:ad:22:da:f1:54:bc:f1:
         29:ca:46:65:03:a8:59:f4:d4:fc:92:cb:dd:6d:9f:dd:d4:78:
         31:2c:af:17:f2:97:e1:f8:5c:e2:b8:24:cf:bf:41:74:c3:d5:
         7a:7a:ef:98:35:cb:7f:d0:4f:db:2e:64:e1:c0:f6:69:37:bb:
         46:60:6c:f4:7b:3f:04:ce:d0:81:76:9b:35:e1:ad:38:fe:b4:
         a0:ee:d7:53:fb:39:d6:cd:0b:2c:f8:48:42:90:14:c8:e0:52:
         e5:52:80:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:59:07 2026 by rpki-client