Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
File:                     dr5GHrn3AE8poX_d3-8uLqBeua8.mft (raw, json)
Hash identifier:          ClOfm0KKX9D8ux2X2ASCcw3YsTrNW3aveUGM5Yhl4r4=
Subject key identifier:   E5:2E:83:65:3D:8F:3B:52:05:CC:18:11:19:38:3E:2E:84:75:9F:14
Authority key identifier: 76:BE:46:1E:B9:F7:00:4F:29:A1:7F:DD:DF:EF:2E:2E:A0:5E:B9:AF
Certificate issuer:       /CN=76be461eb9f7004f29a17fdddfef2e2ea05eb9af
Certificate serial:       01A1DA942E4656D45CAA8938EC7B0212D2AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
Manifest number:          1A8A
Signing time:             Sat 14 Nov 2026 15:01:46 +0000
Manifest this update:     Sat 14 Nov 2026 15:01:46 +0000
Manifest next update:     Sun 15 Nov 2026 15:01:46 +0000
Files and hashes:         1: adYAw1QARYUATfxCFb6i8Q_fm-o.roa (hash: QPoF7S4xS1/LhTKBOqbjrxIWUWpnI5hm5nl1XAjSOeg=)
                          2: dr5GHrn3AE8poX_d3-8uLqBeua8.crl (hash: rWr6AB4aIJiFPDDw5zJRRIr9I6F8Xff4AHHE8dyUi9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:da:94:2e:46:56:d4:5c:aa:89:38:ec:7b:02:12:d2:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76be461eb9f7004f29a17fdddfef2e2ea05eb9af
        Validity
            Not Before: Nov 14 15:01:46 2026 GMT
            Not After : Nov 15 15:01:46 2026 GMT
        Subject: CN=e52e83653d8f3b5205cc181119383e2e84759f14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:50:3a:3b:27:6b:91:5d:ae:5c:8c:de:3f:7c:
                    f8:15:b8:5c:cb:ed:71:ea:d6:3f:a6:ad:34:9e:34:
                    e3:1f:cb:94:0b:32:ca:bc:d8:8d:4e:84:9c:ed:f1:
                    b3:76:8e:7a:ef:93:db:ea:49:8d:b1:9c:ef:46:96:
                    99:6c:fc:c2:f2:59:be:68:1e:6e:bc:3d:0a:67:de:
                    8e:05:55:02:80:f9:06:3b:70:34:ac:0f:9c:4f:26:
                    d7:e6:d0:85:15:16:19:a4:c5:42:9b:6f:aa:57:08:
                    6f:a5:c2:24:40:38:ca:d2:fc:95:70:16:5c:6d:d0:
                    dc:03:cf:64:d0:8f:77:4e:b8:08:7b:10:59:a3:b2:
                    1c:6e:8c:0f:fb:8d:44:e3:9f:93:40:4f:7c:de:07:
                    3e:b2:29:a9:5e:6f:cd:cc:6b:67:34:38:6b:72:ea:
                    6c:e0:8a:e0:e3:58:17:d0:3f:55:25:cc:12:cc:d5:
                    91:c2:6d:c5:4e:93:05:07:9d:75:6c:2f:0f:7b:bf:
                    28:93:80:e2:c2:6c:56:d8:c6:3c:04:9c:72:b8:b6:
                    fe:16:c8:63:5d:1d:0e:39:d3:f9:14:42:e0:48:7f:
                    f1:3d:db:c9:f9:64:51:76:cf:67:f5:2b:ca:74:95:
                    e7:3d:f9:2f:7e:a7:6e:f3:74:66:87:3a:c4:60:06:
                    5d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:2E:83:65:3D:8F:3B:52:05:CC:18:11:19:38:3E:2E:84:75:9F:14
            X509v3 Authority Key Identifier:
                keyid:76:BE:46:1E:B9:F7:00:4F:29:A1:7F:DD:DF:EF:2E:2E:A0:5E:B9:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:7a:2e:36:af:99:72:8f:2f:68:b7:2c:63:1f:22:c2:6f:8b:
         24:63:d5:d6:9f:98:4b:3d:25:0a:18:c3:a3:88:00:80:25:44:
         33:5c:a8:9b:a5:58:70:b3:b1:7c:80:9a:4a:02:73:a6:42:ac:
         52:5b:7e:85:89:f3:a1:1b:99:ec:f2:b6:9c:a5:88:44:65:84:
         5b:f2:97:7a:e9:01:76:e9:61:0d:9b:b4:eb:87:6a:e7:e3:7d:
         db:66:fa:d1:c6:a0:9a:44:37:18:c0:4e:9f:26:51:5a:e8:b1:
         96:9e:52:cb:07:53:cd:7d:08:55:d2:63:b3:87:5b:df:ce:d3:
         b2:60:03:23:7a:eb:56:2c:ea:aa:67:31:7b:d6:2a:29:45:fc:
         ee:9a:3b:37:1f:a4:e4:4a:89:75:1b:55:e6:84:68:1a:a5:e4:
         2d:c0:be:29:99:50:67:f4:16:5c:67:e8:72:a5:9f:af:ae:d4:
         88:43:e9:e6:8d:4a:d9:94:44:dd:cd:cd:07:d7:25:13:32:71:
         a5:9f:99:d8:ad:df:b5:3e:fa:02:36:d8:55:9f:3d:a6:18:5f:
         54:fd:c3:37:73:48:10:e5:e3:96:91:23:fd:8a:e9:6f:20:3d:
         24:57:33:91:b5:9e:11:ee:07:35:47:e3:cb:e3:71:02:42:d1:
         3a:b7:d8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:40:04 2026 by rpki-client