Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
File:                     syycJt98zYrTjYm9XUk4C5Ox4Ak.mft (raw, json)
Hash identifier:          YBQy40WuPcxzdzmEIWroFiWJfqlhUmwHIgRmZ+gubH0=
Subject key identifier:   F4:63:51:C1:AB:F9:9D:C0:25:B7:32:63:2F:98:AB:40:EE:50:5F:EB
Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
Certificate issuer:       /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Certificate serial:       01A1DB01EC5F43CA39BAC4B62F76269E40DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
Manifest number:          1856
Signing time:             Sat 14 Nov 2026 17:01:38 +0000
Manifest this update:     Sat 14 Nov 2026 17:01:38 +0000
Manifest next update:     Sun 15 Nov 2026 17:01:38 +0000
Files and hashes:         1: 6AjSknNBPYzUePStYn9MQvrmI1M.roa (hash: ADf3UuOOLELpKownvjE0DOwT2mKXZSIP0VRCvJyoRxQ=)
                          2: 6h15ndycQZ7WrXImczD2Ev_bkCE.roa (hash: /doa4/0OtLcTmvyOJrYtOjbNHUmwErl0lGb/VqRY4T4=)
                          3: JhhU-c5gOoUfoITJlyMrJgLxGis.roa (hash: IJ4mW1wxsPPV81AWWlRXhH78sbUitldbFLDgO7PWavI=)
                          4: aNMwbtnKhcF9wSCl_EbVGBGLtog.roa (hash: +CgM2pnXv7KZGRoWq4U5DBh6jhUP3vorsltumM39O1A=)
                          5: syycJt98zYrTjYm9XUk4C5Ox4Ak.crl (hash: CjvoGpeMgdN77PQUsAZlGOZ2KyS7IimQQv3SD4OogF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 17:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:01:ec:5f:43:ca:39:ba:c4:b6:2f:76:26:9e:40:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
        Validity
            Not Before: Nov 14 17:01:38 2026 GMT
            Not After : Nov 15 17:01:38 2026 GMT
        Subject: CN=f46351c1abf99dc025b732632f98ab40ee505feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ad:cc:9d:f3:4f:64:9f:1e:b9:ed:d6:f2:4f:
                    2e:62:03:37:aa:e4:da:e7:f6:a6:b4:0a:5f:b4:35:
                    99:1e:e8:64:92:7c:01:65:3f:6e:7e:1b:57:7b:12:
                    bd:65:cc:77:33:bb:8f:78:f2:34:16:80:9f:91:ab:
                    ca:e2:ad:21:f7:ac:69:3e:38:fe:43:d0:c5:7d:41:
                    c9:a0:8a:cc:a4:bf:64:b6:63:13:ce:e0:02:be:eb:
                    be:bb:37:78:7b:59:81:b2:eb:6a:24:66:4a:cc:55:
                    ef:6e:0d:b5:74:ec:8c:cd:da:18:0c:a4:01:e4:b1:
                    49:cc:49:d6:9b:57:68:78:04:13:3a:95:a0:f9:f6:
                    be:5f:8e:d9:73:62:db:d4:14:87:4b:9e:a7:eb:27:
                    1a:05:48:b8:1e:a8:7e:a3:12:6c:3d:d7:70:af:13:
                    5e:29:98:b3:82:b5:ff:09:af:49:f5:fb:a3:36:3c:
                    44:c1:17:5d:09:3c:1f:ec:a7:58:91:48:9b:39:8c:
                    4d:bb:19:72:ee:6f:30:d0:10:84:f5:37:08:e5:04:
                    1b:15:35:e2:9d:b2:0b:3b:65:d2:04:e8:79:c1:61:
                    ec:90:6b:35:64:89:cf:af:5a:09:3b:6d:f8:8a:ec:
                    62:b9:ac:ee:77:d3:5a:29:f3:5e:a5:35:9a:eb:b8:
                    1e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:63:51:C1:AB:F9:9D:C0:25:B7:32:63:2F:98:AB:40:EE:50:5F:EB
            X509v3 Authority Key Identifier:
                keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:90:41:27:7a:8e:21:a4:4a:aa:81:46:e7:06:54:1a:c5:10:
         ba:a0:24:86:5d:cf:07:b4:a2:55:37:01:3f:8f:15:d5:ac:45:
         f6:b3:f0:5c:2e:1c:23:5c:8b:2e:18:33:0c:a9:98:bc:a8:4c:
         94:f6:a9:f6:eb:ac:7e:d2:5c:0f:c6:4c:e6:cc:80:79:42:77:
         4a:43:51:c4:76:24:dd:69:25:b5:c9:c6:bd:94:a7:e8:57:a4:
         c4:51:af:59:c7:e9:e5:80:4f:3a:f3:8d:0c:b7:05:20:94:f6:
         35:46:23:81:b5:ab:c0:c2:cf:11:d7:c2:20:db:6f:e2:d8:f2:
         d6:2d:12:5a:a3:e7:c5:54:5a:51:75:28:94:f9:44:66:01:99:
         0e:c5:81:5b:62:52:e0:45:31:bb:18:ff:b6:31:3b:54:eb:72:
         71:94:71:02:3b:1d:f2:c5:c2:4a:81:4a:47:9d:1e:ac:1f:d4:
         21:d6:a2:9d:49:02:ee:a9:15:79:f5:d3:48:fc:f5:d8:b1:5f:
         7e:ab:74:3d:7e:a8:62:d7:84:4a:57:08:92:8c:84:e6:d1:ac:
         89:e8:17:a2:1f:c6:b8:47:e8:37:bd:a8:6a:56:39:12:c7:31:
         5c:5e:93:d7:20:04:02:de:0b:73:a0:e4:75:30:1c:c2:5e:52:
         0f:32:d5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:51:33 2026 by rpki-client