Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
File:                     B_65rg-oknBF-DQjdDxKc6J6dKc.mft (raw, json)
Hash identifier:          bf1D/evCYP3XSzJPMVgLQGhWKxA0z6XSKFi9BdecaNQ=
Subject key identifier:   0F:B4:C8:9F:97:9A:D4:17:82:1E:A5:FD:2F:57:6C:29:8C:82:7D:02
Authority key identifier: 07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
Certificate issuer:       /CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Certificate serial:       01A1DE3987F5AFA81E21CEF64CD5712AF6C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
Manifest number:          1AFA
Signing time:             Sun 15 Nov 2026 08:01:14 +0000
Manifest this update:     Sun 15 Nov 2026 08:01:14 +0000
Manifest next update:     Mon 16 Nov 2026 08:01:14 +0000
Files and hashes:         1: ABBwkEzotHssFvLAUqOqZl36BVo.roa (hash: dEDcIYfYDWYKiT/mjWB6IYlv7v5dgtX5b4iPv92zXw4=)
                          2: B_65rg-oknBF-DQjdDxKc6J6dKc.crl (hash: aN1q3qtY2mHwIbSj4MxMr8UrysT3guzBSbyfCoEBOeI=)
                          3: JxdVQlPabf5FpimKARBZDSKiNxU.roa (hash: iaX91Mhj2IG2/tYDP0MoHlwqtJyUmq2/acODPla0N8E=)
                          4: KtSkCkgQPN_jCjx_NpSrj0Cqf2k.roa (hash: Z7pmLe6ijXP6+y2mebYVp1P1jXZISWrSpz5NJdmd0Uo=)
                          5: dtKfjS2Cx153-9Bxv94dxO25icU.roa (hash: e1P0tOI8yTdnj97qKiJfMB6m74LROCBqW62mLe1obDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:39:87:f5:af:a8:1e:21:ce:f6:4c:d5:71:2a:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
        Validity
            Not Before: Nov 15 08:01:14 2026 GMT
            Not After : Nov 16 08:01:14 2026 GMT
        Subject: CN=0fb4c89f979ad417821ea5fd2f576c298c827d02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:05:a7:df:50:ab:2d:cc:90:c4:8b:92:86:ce:
                    62:b0:34:25:55:15:4f:16:a5:5f:8a:d1:5f:dc:a1:
                    37:ac:8f:82:fc:2c:5a:36:5c:da:12:fe:c0:17:ff:
                    08:4c:d6:28:de:7f:9a:2d:8e:11:f3:70:52:a3:77:
                    3f:1a:e1:47:b3:cc:73:8f:dc:f8:b8:20:09:d6:e1:
                    ca:34:0a:5c:67:5c:9d:70:af:fb:4e:17:82:45:c6:
                    19:a1:92:9f:37:3f:79:82:79:74:06:bb:df:b7:4d:
                    b8:00:d0:d7:12:51:e8:3f:4e:2d:3c:bb:9c:bd:4e:
                    0e:8d:a3:0d:6b:05:f9:eb:4e:ab:f7:05:91:64:8c:
                    ff:2f:34:9e:fc:7e:92:0f:84:14:a2:e9:65:f8:d6:
                    17:6b:30:76:2f:49:99:54:01:68:41:0c:42:f2:1c:
                    dd:b0:c8:7c:9b:0c:9a:8f:40:46:47:fe:ed:cb:9a:
                    63:e0:b6:94:ce:33:77:f8:ad:cb:74:22:3c:3c:ef:
                    bf:00:dd:74:c5:61:04:12:5e:a1:2e:6f:c0:7c:07:
                    78:b4:cd:ad:f3:74:82:a9:59:5e:a0:d2:2d:41:24:
                    9e:72:8d:58:0d:9a:49:60:36:bc:95:ba:5d:a9:ba:
                    9e:c8:8b:e7:df:94:79:59:f2:b0:f8:c0:e0:bb:e3:
                    83:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B4:C8:9F:97:9A:D4:17:82:1E:A5:FD:2F:57:6C:29:8C:82:7D:02
            X509v3 Authority Key Identifier:
                keyid:07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:77:d6:5a:7f:86:28:56:e8:14:ee:5e:29:ff:6d:ea:9b:7b:
         07:8e:4b:69:87:44:42:a3:ee:e6:2c:25:d7:79:46:52:b3:a0:
         f8:03:70:15:7d:3b:44:1f:e4:42:08:49:56:f7:aa:9e:d8:ab:
         53:80:f9:24:14:c1:bb:fb:b5:6c:e8:dd:23:05:63:22:68:d6:
         33:bf:2f:65:3a:44:8c:3d:70:61:5b:e3:19:8f:06:c9:3b:bd:
         c7:ca:8a:1c:c9:d4:a2:06:89:be:24:15:f7:56:3e:a8:c7:5f:
         19:7b:e1:7d:87:6e:85:a1:06:1d:ec:c7:97:53:5d:e4:55:1f:
         1d:17:fe:12:c9:3c:17:39:ef:97:22:1e:87:eb:21:76:b7:e2:
         27:a9:8a:ef:48:c2:a9:e2:de:51:ae:de:32:ac:7d:5c:8a:62:
         ee:6d:cc:f9:2f:a1:73:38:be:24:65:8c:4f:14:2c:41:14:88:
         df:b4:a6:2b:58:89:69:d3:69:c8:0e:03:f4:a6:64:e8:df:a1:
         ae:24:ba:e8:df:af:38:dd:87:b0:f5:2e:e4:1c:f5:33:8c:d6:
         f9:9c:de:17:be:7a:8c:81:8d:7e:a9:f3:5d:73:ab:94:30:d6:
         dc:68:92:f9:a2:c1:12:dd:6e:de:03:e0:53:22:51:61:38:f5:
         94:d0:e6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:10:54 2026 by rpki-client