Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft
File:                     w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft (raw, json)
Hash identifier:          7Imf0BInJpOzEmV7KtyppTpjxykASQzQGBZ0GnBnKh0=
Subject key identifier:   4E:68:91:D9:2E:5D:65:9F:87:19:90:A3:D0:E3:D3:3A:70:8B:8E:DF
Authority key identifier: C3:A8:E8:64:8E:0B:A3:6A:32:3A:B9:DF:63:41:D6:68:BD:A6:B4:D2
Certificate issuer:       /CN=c3a8e8648e0ba36a323ab9df6341d668bda6b4d2
Certificate serial:       01A1D9B82C22184791BC9C87727FCB34C07E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft
Manifest number:          1445
Signing time:             Sat 14 Nov 2026 11:01:28 +0000
Manifest this update:     Sat 14 Nov 2026 11:01:28 +0000
Manifest next update:     Sun 15 Nov 2026 11:01:28 +0000
Files and hashes:         1: CaF9jDRtHy3skgKS7QCnXm4PI7A.roa (hash: V9ZLClAO25ZfSnTZeTYg00I4twtSynvhNaSIPSAPlv0=)
                          2: bSfoqAesrmojtDNBxt2VZHxOHqI.roa (hash: Z7b9r8p1AdR9DmR8LmSnmnhIJm2T4hKdRLt3c111qtg=)
                          3: puvvxkuyGGm9hRKcVBF60FM3T20.roa (hash: 859vc/MnpuH2XD8iZDZO4+LCLxVjdb1X9+4Sxo2qG9k=)
                          4: w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl (hash: P357JMfbKkgG53o27tyfXzTOji4Ugh1qz3dxXAG1FD4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 11:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:d9:b8:2c:22:18:47:91:bc:9c:87:72:7f:cb:34:c0:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a8e8648e0ba36a323ab9df6341d668bda6b4d2
        Validity
            Not Before: Nov 14 11:01:28 2026 GMT
            Not After : Nov 15 11:01:28 2026 GMT
        Subject: CN=4e6891d92e5d659f871990a3d0e3d33a708b8edf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ff:04:24:9e:40:b3:b1:7d:53:96:ef:cd:0b:
                    59:3f:fd:43:85:56:c7:36:eb:31:7a:86:ea:71:5e:
                    1f:46:b3:43:23:cc:9d:f8:10:81:9b:64:aa:a3:9b:
                    e8:2b:f2:a5:6f:af:ab:c2:b5:29:0f:9e:2f:f8:13:
                    df:42:df:8a:68:50:3a:bd:81:f6:a9:d2:3e:7c:f7:
                    57:27:f2:43:a8:60:e1:53:5d:b9:db:c0:5c:c1:c6:
                    81:2b:81:92:6d:57:7e:0b:75:b2:84:9e:85:4e:ba:
                    7b:17:c1:dc:1d:ab:74:e7:16:ca:58:26:3c:c1:d2:
                    b5:f3:bd:13:ca:a2:dd:82:9c:c7:04:c3:fb:0f:e1:
                    29:31:36:bd:4e:6a:50:7a:25:e9:fe:8a:8d:67:90:
                    51:0d:65:3e:4f:1d:4f:6a:54:84:6c:31:96:7c:e0:
                    ea:5c:0e:29:2b:32:2a:c5:c5:fa:ad:3b:8c:aa:74:
                    78:b6:40:29:2e:05:78:11:68:ca:23:0e:20:fb:d1:
                    ce:9f:e3:1c:bb:57:cf:ec:aa:c5:50:c3:bf:70:87:
                    a5:8b:ed:6b:1f:88:92:5c:db:cc:2f:0c:63:b1:66:
                    dd:33:f8:69:92:a9:2f:e8:a5:9d:40:50:e6:0b:3c:
                    87:f9:f0:f1:11:b0:00:23:ea:dc:b9:a6:43:24:e9:
                    46:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:68:91:D9:2E:5D:65:9F:87:19:90:A3:D0:E3:D3:3A:70:8B:8E:DF
            X509v3 Authority Key Identifier:
                keyid:C3:A8:E8:64:8E:0B:A3:6A:32:3A:B9:DF:63:41:D6:68:BD:A6:B4:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:3e:01:0e:dc:36:d8:f3:f3:bc:3f:75:a2:43:bf:bb:48:22:
         56:39:59:e1:17:bc:27:9f:19:ff:95:29:2d:d7:94:1a:32:6f:
         ec:61:48:7e:07:49:83:9d:56:88:09:30:6e:1b:9f:72:f5:63:
         37:b4:fe:13:cd:b6:c0:e4:3a:1d:07:59:a2:5e:8b:67:76:30:
         1f:53:98:38:07:85:e5:40:49:0e:eb:4c:f2:03:a8:fe:db:43:
         5e:36:10:10:92:a8:0f:04:f1:44:ff:d9:d9:84:78:fd:1b:9f:
         96:8f:49:53:e9:fb:0d:53:51:49:9e:59:6f:7a:1b:02:1d:b4:
         0e:1e:69:12:61:ef:e1:a8:42:f1:3e:b8:56:77:42:d9:65:18:
         bb:67:6a:67:4a:98:43:5a:fc:7d:11:0d:a3:df:57:4a:0f:98:
         16:d4:c6:00:29:65:90:d1:8e:f5:12:14:47:64:70:93:fe:50:
         d8:bf:00:f8:70:f7:cc:1f:37:d2:f4:83:99:0e:be:1b:60:3d:
         10:58:f4:b5:74:db:98:a6:ca:9b:f0:04:e6:bd:f7:3c:fb:5b:
         e2:3a:90:ee:15:6b:62:62:d1:d0:51:00:b3:a4:7d:d5:47:8b:
         bc:65:8a:48:14:4a:4a:3f:64:76:18:ca:70:b2:5b:4e:0c:8f:
         29:e8:e8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:37:20 2026 by rpki-client