Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.mft
File:                     Sq5Con57wsw1B--n48vCnTLuoTM.mft (raw, json)
Hash identifier:          gJovrwOz2nXf4Lu9IOrUuEVSjIczoq4+VU72/31bZSk=
Subject key identifier:   EE:CA:26:70:AC:29:D4:ED:F7:83:B0:A8:75:DF:EC:14:A8:78:19:9E
Authority key identifier: 4A:AE:42:A2:7E:7B:C2:CC:35:07:EF:A7:E3:CB:C2:9D:32:EE:A1:33
Certificate issuer:       /CN=4aae42a27e7bc2cc3507efa7e3cbc29d32eea133
Certificate serial:       01A1DB6FC541138A26C1DF13B792FDA7F0C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.mft
Manifest number:          184D
Signing time:             Sat 14 Nov 2026 19:01:37 +0000
Manifest this update:     Sat 14 Nov 2026 19:01:37 +0000
Manifest next update:     Sun 15 Nov 2026 19:01:37 +0000
Files and hashes:         1: B6NOQ5L6_SMBWsHOp2sNGO8QpMw.roa (hash: BKcVGIsYMVRjDSrmZwIXj+CvyyBzPVUKfR8gvSCiafc=)
                          2: P5V8zRMhjxtwjJTTASMRkvjriAI.roa (hash: cZKIfpLpDtSikSqUawRk4D7lUQdNwOHcWKhwSq/btQY=)
                          3: Sq5Con57wsw1B--n48vCnTLuoTM.crl (hash: egTqbYqDks6cA2j9Kh5+GVaZBZo9pHxVAfuZy8xSOqk=)
                          4: ex6tJ_sI3NgHQ-pYmZS9gQBGxXs.roa (hash: y94smcNeac7NKCseyzQWs2hBaRavqj38pqssOx+l3ZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 19:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:6f:c5:41:13:8a:26:c1:df:13:b7:92:fd:a7:f0:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aae42a27e7bc2cc3507efa7e3cbc29d32eea133
        Validity
            Not Before: Nov 14 19:01:37 2026 GMT
            Not After : Nov 15 19:01:37 2026 GMT
        Subject: CN=eeca2670ac29d4edf783b0a875dfec14a878199e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:28:ad:87:36:74:cd:93:e1:9e:dd:73:88:7f:
                    13:89:2a:d8:6f:34:fb:63:53:81:a6:b4:f9:d2:91:
                    4c:5a:76:1b:a9:37:82:71:af:e6:c0:92:3d:2d:62:
                    b0:ca:5a:76:c1:57:3a:f8:47:17:9d:29:7d:62:4b:
                    7d:26:d2:de:31:6e:d8:21:1d:3a:67:91:a1:71:d0:
                    9f:07:5c:47:16:9b:a9:16:aa:a5:6f:f6:4d:05:9f:
                    20:69:97:e5:87:e1:6b:3f:c6:0b:6e:fd:c4:2d:5a:
                    8a:f9:4b:eb:e3:6a:ed:8a:08:10:b8:d2:d8:dc:b4:
                    09:06:5d:cc:95:30:82:7b:16:65:a7:58:29:80:70:
                    36:12:31:5f:76:5b:4b:54:2e:62:2e:ee:97:3b:d8:
                    aa:5d:81:b5:c8:e0:73:0d:92:b6:d9:12:b6:5b:f5:
                    e9:76:d0:61:76:a5:72:e4:1e:b8:7f:c7:e8:f2:5a:
                    95:2b:e2:0a:c2:be:8f:1d:ed:ae:a0:7e:69:f7:69:
                    1b:78:90:a6:96:6d:0f:32:c0:3c:c1:48:5f:78:e9:
                    23:76:a5:ab:6a:23:a0:14:81:51:46:d1:ec:d4:f0:
                    e2:ce:c3:22:e4:48:c8:c2:e5:c3:66:ff:b9:fe:3d:
                    a2:68:d7:47:13:4e:2f:6d:f1:70:4a:3d:e2:e0:d0:
                    54:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:CA:26:70:AC:29:D4:ED:F7:83:B0:A8:75:DF:EC:14:A8:78:19:9E
            X509v3 Authority Key Identifier:
                keyid:4A:AE:42:A2:7E:7B:C2:CC:35:07:EF:A7:E3:CB:C2:9D:32:EE:A1:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:6e:eb:4d:9b:ee:e5:1a:99:83:da:b1:fc:fe:8a:44:4e:6a:
         e8:d6:e6:b9:95:54:4f:04:59:95:2c:6a:42:47:ae:1a:41:7a:
         5d:7d:55:4a:23:99:ec:88:fc:c1:c5:20:7f:b5:c5:3a:f0:e2:
         b7:67:e9:b1:08:8d:0f:db:73:27:61:72:0a:00:b7:98:97:f6:
         8c:68:a9:41:07:f0:b8:a3:a2:68:23:7b:f7:e8:bf:80:73:6c:
         75:e7:a3:af:fb:06:60:ea:01:0d:16:5f:b1:65:5b:69:ba:ab:
         f2:a6:a6:5b:57:06:f9:80:d5:3d:c8:15:db:81:c6:7d:99:9a:
         63:63:e9:77:8f:00:47:66:21:37:cb:24:f3:f8:5f:1c:8c:64:
         90:01:94:4f:5c:ea:db:f8:75:2b:41:ed:cb:d3:de:3d:f7:62:
         2b:b0:19:e7:bd:c3:1b:d0:33:36:d6:27:45:b8:49:5b:ac:b5:
         4e:0d:e7:70:c0:21:13:ed:ae:00:ec:d4:d4:24:a1:82:63:e5:
         c4:1d:78:37:e4:4d:b9:ab:1d:6f:22:67:a7:c9:5d:1d:7a:95:
         5a:4d:79:fb:26:72:87:93:0d:23:65:d0:a6:ed:b4:a7:c4:ab:
         2f:a2:99:6a:2e:03:a0:21:3d:50:ed:0e:7a:d6:50:5b:1e:73:
         dd:d2:1b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 02:40:41 2026 by rpki-client