Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.mft
File:                     Sfkz_HMtQhKMPIiz3g5IypSs3X4.mft (raw, json)
Hash identifier:          PklgsfXtZIia6l22wILwfUmXyIPiGEZDj4r1DqcsSPA=
Subject key identifier:   FE:56:B8:2F:C6:BF:D0:A7:73:14:C0:32:1C:1E:16:B8:BC:AC:37:2F
Authority key identifier: 49:F9:33:FC:73:2D:42:12:8C:3C:88:B3:DE:0E:48:CA:94:AC:DD:7E
Certificate issuer:       /CN=49f933fc732d42128c3c88b3de0e48ca94acdd7e
Certificate serial:       01A1DEA7518D3D37A0D744C4E069A46085AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.mft
Manifest number:          0173
Signing time:             Sun 15 Nov 2026 10:01:09 +0000
Manifest this update:     Sun 15 Nov 2026 10:01:09 +0000
Manifest next update:     Mon 16 Nov 2026 10:01:09 +0000
Files and hashes:         1: 0lHNHAB1dSCHu8NfJvUD7DHgsFc.roa (hash: 722KSNZHtYdxDwgLoCah7ZpT1vkIwON9vi+ms0lvuNE=)
                          2: 4Dt7Mn1lHQkg5yii2IEpcWGwkhI.roa (hash: kHQ2nl9ekG4m6X2gKv/CM3Og7S1UQ5gzllovoXGKw5M=)
                          3: IIzVxtmDhdZdhpAbkL-ndC6CsU4.roa (hash: CQ228xdqWMGw11CGwR9Uzvgy1Q7ztTnBAHC18ATjAq4=)
                          4: NzEbjZMTTNc2f7hUh_DfDiEmK50.roa (hash: LA2UVOwQLl1GFakMw+qYipgL+jCj7BhKjZLnryCHmW0=)
                          5: Sfkz_HMtQhKMPIiz3g5IypSs3X4.crl (hash: HzCtw9Ad7czBgYB1+YuL7cX6PDx58G5I6C6dQpcRPII=)
                          6: SwlwWC6qeIOhSte4Utz7PdUgqHg.roa (hash: yli4qoeWd8be0mGTI1Qdhmlvgjg03i5HcPN89QNf6ro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 10:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:a7:51:8d:3d:37:a0:d7:44:c4:e0:69:a4:60:85:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49f933fc732d42128c3c88b3de0e48ca94acdd7e
        Validity
            Not Before: Nov 15 10:01:09 2026 GMT
            Not After : Nov 16 10:01:09 2026 GMT
        Subject: CN=fe56b82fc6bfd0a77314c0321c1e16b8bcac372f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6e:3b:ab:d1:79:39:60:c0:e9:80:de:da:cb:
                    bd:03:bb:80:58:96:88:de:69:41:78:53:c5:5b:a7:
                    9c:24:34:09:fb:be:2f:ef:dc:43:5b:69:60:32:7d:
                    fe:11:04:0f:dd:27:59:b0:2f:98:d4:a9:7b:93:10:
                    7d:08:90:3c:ed:ee:5f:c8:e2:ed:0f:aa:b8:e7:ed:
                    dc:af:9e:46:ed:93:72:ef:80:81:65:69:bd:61:e7:
                    47:39:d4:93:24:70:30:8d:d0:16:b3:31:c7:7c:98:
                    b3:3a:f1:82:bd:84:7d:c8:8f:8a:f8:cb:3a:37:a4:
                    0f:77:b3:04:f7:6b:a4:80:df:94:63:49:6a:5c:64:
                    36:f8:15:59:ce:f1:ff:95:c2:25:b5:66:09:3d:9e:
                    1f:8f:c1:75:13:4c:b3:43:cb:53:81:d7:45:36:d1:
                    4d:36:49:42:34:48:da:74:b3:4f:7a:c5:86:17:c5:
                    07:26:15:9b:89:cf:25:c0:b8:19:8f:ff:2d:a5:a8:
                    1f:a4:1f:99:00:02:42:b7:cb:83:2e:a7:89:a5:75:
                    e0:8d:5f:4d:fb:f5:49:dd:26:29:04:43:26:a3:c6:
                    0b:93:99:ad:75:6e:28:74:4d:83:f4:68:5b:cc:f2:
                    a4:6f:cb:20:63:a5:93:63:fc:d6:53:f3:65:eb:13:
                    18:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:56:B8:2F:C6:BF:D0:A7:73:14:C0:32:1C:1E:16:B8:BC:AC:37:2F
            X509v3 Authority Key Identifier:
                keyid:49:F9:33:FC:73:2D:42:12:8C:3C:88:B3:DE:0E:48:CA:94:AC:DD:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:6c:a9:c2:54:18:f8:c5:f4:bf:f5:0e:88:e1:a5:a0:e9:b7:
         a8:61:ad:98:48:52:81:b4:62:f6:f8:64:98:39:e4:fe:6d:5e:
         00:90:fc:46:94:2b:09:14:4b:ea:38:81:66:d5:d5:67:2d:77:
         a5:70:c9:24:57:aa:07:c3:c9:94:a8:4f:c1:ea:f4:94:24:cf:
         b1:27:76:5e:c0:09:27:84:42:6c:90:96:c7:8c:9a:3a:5f:f3:
         20:a6:97:05:14:e5:6b:c7:d2:0c:9f:7d:e2:93:c7:44:bc:fd:
         12:8d:7d:0a:4c:80:66:41:76:8e:d3:68:61:52:9f:c4:b3:51:
         6d:d1:17:d0:eb:b7:f4:72:e4:dc:7a:80:0f:67:3b:0f:74:bb:
         3b:7e:51:a2:9c:a7:05:a6:6f:11:93:0a:54:2f:f1:0d:79:7c:
         be:da:11:71:42:8e:8f:ce:bb:9e:0e:05:29:b0:02:55:b4:7d:
         d3:4b:f6:e5:f6:81:51:1d:f0:ec:ba:41:26:53:0c:89:6e:6e:
         96:92:1c:03:a5:f3:a4:7c:be:68:25:95:01:71:a8:b1:4d:d2:
         94:49:7f:4e:4e:21:fd:64:2e:a5:e2:01:61:66:52:20:1f:7b:
         2f:e5:42:51:e6:95:c3:cc:5f:f5:a1:d1:62:1b:d3:4a:80:44:
         d7:46:4a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:47:26 2026 by rpki-client