Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.mft
File:                     e2nv5gFvctRZLxsLq5GGR2_zop0.mft (raw, json)
Hash identifier:          YogSD4bY8kvH63mArw7kq+I9xOAgamwxS2Gub/zDLes=
Subject key identifier:   B3:CB:ED:95:46:84:3E:C8:B5:47:0E:C0:71:CC:C9:67:CB:AF:34:8F
Authority key identifier: 7B:69:EF:E6:01:6F:72:D4:59:2F:1B:0B:AB:91:86:47:6F:F3:A2:9D
Certificate issuer:       /CN=7b69efe6016f72d4592f1b0bab9186476ff3a29d
Certificate serial:       01A1DB38DC96788966BD0A7BBD7EB979EB41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e2nv5gFvctRZLxsLq5GGR2_zop0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.mft
Manifest number:          0305
Signing time:             Sat 14 Nov 2026 18:01:39 +0000
Manifest this update:     Sat 14 Nov 2026 18:01:39 +0000
Manifest next update:     Sun 15 Nov 2026 18:01:39 +0000
Files and hashes:         1: DhhEzrCSvtlaHslOfzFqY95aZ90.roa (hash: VOvJoF9EWNuxMkJTKQzWpsIdU1FWWr51hxl56iJSfuY=)
                          2: ICKL-vNS4Ve2n8KrobzVtvKP7a8.roa (hash: KJYnqYyOofOZzadxEkB/wfQ8LlG+IKUvm99MnwqJGO4=)
                          3: X1S1z6CrzJkdF4dCeCm-se-s4J8.roa (hash: Y5udF7iCsk7tkEh52H+ceEwvOnXrZWaMJVMZZgF25Vw=)
                          4: e2nv5gFvctRZLxsLq5GGR2_zop0.crl (hash: jH3C0JDRkatLf/5GtrtdEMlg/lt+cED/vGGm8zlBboI=)
                          5: oNyVV9F-UayJsBNMERK1JiJ0D7o.roa (hash: k7jOjhLjlTb4tvt1HZS9xHgB6yHXR3vwiFuwHTGcB/0=)
                          6: pwN-2lFR66jS8tzjgg4a5hQ9SZc.roa (hash: vx5holsz8fk1dc3w+YKiWzzSNZ1ZzCCUAaCQLnUJmIY=)
                          7: r23QCb42Tz1gHCNmFF9MYh0kkS0.roa (hash: ULoM0qs6keKyvA3e5JZk0wAwuCLfnphbYK3aR4+GSfE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e2nv5gFvctRZLxsLq5GGR2_zop0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 10:37:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:38:dc:96:78:89:66:bd:0a:7b:bd:7e:b9:79:eb:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b69efe6016f72d4592f1b0bab9186476ff3a29d
        Validity
            Not Before: Nov 14 18:01:39 2026 GMT
            Not After : Nov 15 18:01:39 2026 GMT
        Subject: CN=b3cbed9546843ec8b5470ec071ccc967cbaf348f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c4:f4:5f:3a:90:85:bf:fa:9a:d5:5b:94:af:
                    dc:04:c2:cb:12:94:a5:24:dd:84:17:6c:f7:08:10:
                    98:f1:aa:8c:c7:aa:3d:2d:c5:d2:54:56:c3:94:0a:
                    de:87:a9:8b:bc:6b:dc:d8:33:7a:88:4c:19:d5:9e:
                    f9:0c:9b:af:ae:dc:cd:74:52:1f:f1:0e:3a:36:98:
                    64:17:ec:91:40:4b:d1:c9:00:a3:76:76:5c:f5:2e:
                    bc:27:7f:3a:f9:0e:b9:7e:13:92:51:6f:1e:65:ae:
                    f5:fb:4b:c1:f2:99:96:74:96:25:78:1d:cf:2b:fd:
                    f6:c5:16:c1:6d:7c:2d:a9:87:8e:f3:19:01:1c:04:
                    1d:bb:46:cd:94:dc:46:92:8e:90:67:ad:d0:6f:59:
                    b0:86:0f:ed:68:25:92:dc:2e:21:0a:10:4e:ca:2b:
                    19:39:58:d1:57:eb:74:3f:b7:05:02:a8:27:e9:e8:
                    85:57:9a:fe:06:6b:3f:46:c9:b7:e9:1a:0e:fc:54:
                    02:e0:81:e2:92:ad:42:1c:a8:02:25:76:72:df:82:
                    62:d0:86:cb:c4:e7:09:6a:47:ec:1f:84:00:49:ab:
                    46:41:dc:fe:b4:28:f2:70:ae:51:32:a3:36:b0:60:
                    20:7f:69:74:bc:ca:15:99:4f:60:25:42:6a:64:a6:
                    b8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:CB:ED:95:46:84:3E:C8:B5:47:0E:C0:71:CC:C9:67:CB:AF:34:8F
            X509v3 Authority Key Identifier:
                keyid:7B:69:EF:E6:01:6F:72:D4:59:2F:1B:0B:AB:91:86:47:6F:F3:A2:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2nv5gFvctRZLxsLq5GGR2_zop0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:93:15:77:a2:a6:b1:27:75:fa:a9:59:d2:f6:af:5a:34:4a:
         59:4f:63:8e:fc:ff:71:bb:9c:8c:90:9d:9b:65:58:f5:d0:80:
         0e:86:b6:3b:88:18:23:34:e1:58:5d:de:1c:bc:68:17:b4:8a:
         74:e5:17:56:88:f7:39:b6:17:15:32:d5:ff:7c:57:d7:ad:03:
         bc:62:cb:93:20:07:0c:56:5e:fe:b3:02:e5:4f:f6:9b:7c:46:
         bb:ae:8a:0c:b2:11:b8:1a:d1:2b:32:74:04:5c:82:76:94:5c:
         ba:e1:eb:51:86:09:32:d9:5e:94:56:1b:b8:35:41:3c:29:1b:
         12:30:af:8e:d5:28:c8:c8:36:bf:be:e7:70:58:e9:5e:35:73:
         35:ec:e0:6e:33:54:bc:90:a7:36:ec:2c:b9:eb:e7:18:5d:3d:
         af:84:aa:df:11:47:f4:64:9a:a3:5a:ef:99:3a:1b:5a:58:e3:
         af:5b:72:1a:f8:b8:55:02:75:eb:73:ef:a9:cf:b6:ec:54:29:
         c9:57:c1:3b:b4:53:37:d8:1b:e8:1d:cd:58:08:ee:79:5a:49:
         15:89:4e:9b:79:c4:0e:f6:95:53:bf:f5:d6:6e:4a:54:82:de:
         cc:ae:27:2c:3e:d2:c1:6d:1d:5a:08:b2:df:04:4a:01:dc:96:
         6c:59:2a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:54:30 2026 by rpki-client