Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/17d643-a2e4-4cf7-8fab-a03cbd30ae6a/1/jDOuTBqzl29JpB_r6aCPUrauED4.mft
File:                     jDOuTBqzl29JpB_r6aCPUrauED4.mft (raw, json)
Hash identifier:          Ig3TtW5JyYMSNYbmsYxv4650Igmw7nqsj01EN1ptdfY=
Subject key identifier:   F4:B4:1A:2B:3A:D8:18:A6:BF:7D:D3:86:9A:4D:F7:78:CC:C5:98:77
Authority key identifier: 8C:33:AE:4C:1A:B3:97:6F:49:A4:1F:EB:E9:A0:8F:52:B6:AE:10:3E
Certificate issuer:       /CN=8c33ae4c1ab3976f49a41febe9a08f52b6ae103e
Certificate serial:       01A1DF832C77092F75996AABA424ED6E6757
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jDOuTBqzl29JpB_r6aCPUrauED4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/17d643-a2e4-4cf7-8fab-a03cbd30ae6a/1/jDOuTBqzl29JpB_r6aCPUrauED4.mft
Manifest number:          42
Signing time:             Sun 15 Nov 2026 14:01:18 +0000
Manifest this update:     Sun 15 Nov 2026 14:01:18 +0000
Manifest next update:     Mon 16 Nov 2026 14:01:18 +0000
Files and hashes:         1: h7b1e-fYNrOFKY69rJAwyPwBQlI.roa (hash: a8WXz49agKGnTCvXU5WXk2SqsC8W6MUt/TapTI9Vb6k=)
                          2: jDOuTBqzl29JpB_r6aCPUrauED4.crl (hash: foE9A4DGi+yMPhWZeqpaRAgdEH2QQLRE5JjtdL8wlzQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/17d643-a2e4-4cf7-8fab-a03cbd30ae6a/1/jDOuTBqzl29JpB_r6aCPUrauED4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/17d643-a2e4-4cf7-8fab-a03cbd30ae6a/1/jDOuTBqzl29JpB_r6aCPUrauED4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jDOuTBqzl29JpB_r6aCPUrauED4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:83:2c:77:09:2f:75:99:6a:ab:a4:24:ed:6e:67:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c33ae4c1ab3976f49a41febe9a08f52b6ae103e
        Validity
            Not Before: Nov 15 14:01:18 2026 GMT
            Not After : Nov 16 14:01:18 2026 GMT
        Subject: CN=f4b41a2b3ad818a6bf7dd3869a4df778ccc59877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2f:ab:0f:72:3b:a3:b0:20:6e:68:5e:17:46:
                    82:dc:1e:8c:ce:00:22:44:e7:f6:05:eb:05:00:41:
                    18:97:5e:29:e0:db:ff:02:a4:e3:1e:51:f4:c9:b6:
                    39:7d:13:9d:64:e8:ed:7d:85:7c:2e:be:48:9b:02:
                    27:8e:d0:68:fc:ed:91:c5:af:ee:62:be:7b:81:1a:
                    a1:07:15:50:f6:b0:cd:68:54:df:eb:3c:7f:a2:cf:
                    c7:f5:8f:63:5e:1e:9f:af:63:e6:6f:f6:ef:a1:79:
                    b8:0b:9d:56:62:f7:11:5f:62:94:a5:9f:ed:91:06:
                    44:d0:7f:06:1c:ec:b2:5c:ae:aa:e5:a6:f6:65:bc:
                    5e:15:81:bb:66:08:c3:ad:b4:b0:a9:3f:8a:eb:9d:
                    1a:a8:0d:70:0d:e9:0e:cc:82:f1:ca:82:36:56:99:
                    e1:a2:40:c4:50:ab:96:a8:1a:f1:0c:63:1a:77:60:
                    1f:ba:61:a1:19:c1:6e:f9:1d:f3:38:d0:a1:09:a5:
                    39:58:09:85:89:fc:32:ef:35:3f:6d:59:21:94:88:
                    4c:25:ff:b0:c4:7a:8e:4b:78:03:f3:22:fe:93:40:
                    a4:d1:08:06:d8:49:0c:05:19:8b:f4:19:0d:27:55:
                    47:16:23:5c:14:da:38:2e:aa:c5:ed:a9:20:37:c3:
                    df:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B4:1A:2B:3A:D8:18:A6:BF:7D:D3:86:9A:4D:F7:78:CC:C5:98:77
            X509v3 Authority Key Identifier:
                keyid:8C:33:AE:4C:1A:B3:97:6F:49:A4:1F:EB:E9:A0:8F:52:B6:AE:10:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDOuTBqzl29JpB_r6aCPUrauED4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/17d643-a2e4-4cf7-8fab-a03cbd30ae6a/1/jDOuTBqzl29JpB_r6aCPUrauED4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/17d643-a2e4-4cf7-8fab-a03cbd30ae6a/1/jDOuTBqzl29JpB_r6aCPUrauED4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:27:30:fc:62:57:b8:3a:ee:04:d9:a3:bd:d2:59:f1:a2:af:
         de:a2:d7:b2:ac:87:6e:88:05:4e:4a:6b:c1:52:2f:07:ae:0a:
         5b:b6:8b:3d:58:8d:19:c1:23:06:92:f3:52:c6:1f:a2:0c:24:
         11:b0:39:08:ee:8a:49:4f:2f:5d:9c:89:ed:80:7a:8c:30:de:
         ea:a1:19:f3:4c:6f:30:4e:fc:7f:3b:e2:77:9c:90:66:5f:47:
         46:43:70:22:69:00:95:b0:03:b6:28:3f:02:a7:8b:3a:6d:44:
         86:a3:1c:4c:1f:45:05:3d:5d:41:cd:00:80:14:f7:6c:b5:31:
         4a:51:e7:f8:dc:1a:1a:e3:7d:5b:74:66:5a:e4:0c:18:a8:95:
         b3:ce:d5:44:52:92:1d:03:e8:3c:02:7e:fe:66:eb:e1:55:6c:
         82:6f:df:ba:8f:e9:9b:ec:a1:1a:33:06:8b:84:92:37:71:53:
         f7:03:52:1f:89:bd:a7:32:2a:49:95:1c:dc:a2:8f:cc:4b:04:
         05:f9:f5:16:83:65:d6:cd:13:60:90:f7:6d:a6:7b:68:fd:53:
         40:9d:27:3e:17:2b:82:fe:1c:5c:2f:7f:f0:aa:0f:bd:23:da:
         15:12:3e:77:77:27:37:1a:54:24:68:52:48:9e:de:7a:7b:83:
         a7:5b:44:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:43:06 2026 by rpki-client