Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/i7nGJrPNS9wiQe7TQvSIPvtWVKA.mft
File:                     i7nGJrPNS9wiQe7TQvSIPvtWVKA.mft (raw, json)
Hash identifier:          3Y1z+X6ls947+TZ+cs+xe+qewEm6Xe1rbKm+HFYoov0=
Subject key identifier:   73:27:FF:39:1A:82:72:F0:24:8F:7D:86:7C:BF:3B:EF:6D:21:FD:C5
Authority key identifier: 8B:B9:C6:26:B3:CD:4B:DC:22:41:EE:D3:42:F4:88:3E:FB:56:54:A0
Certificate issuer:       /CN=8bb9c626b3cd4bdc2241eed342f4883efb5654a0
Certificate serial:       01A1DE7055300C6DA08EAAA278C6D720B7A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i7nGJrPNS9wiQe7TQvSIPvtWVKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/i7nGJrPNS9wiQe7TQvSIPvtWVKA.mft
Manifest number:          0167
Signing time:             Sun 15 Nov 2026 09:01:06 +0000
Manifest this update:     Sun 15 Nov 2026 09:01:06 +0000
Manifest next update:     Mon 16 Nov 2026 09:01:06 +0000
Files and hashes:         1: 6KuPFzf4RKyktQ4wnHHPdKvoFXU.roa (hash: XTZ6AAhH0mITXv4PMvo+aFQ0m0dDHZ+yiHDISIQyhLc=)
                          2: ZIZ030QhhzFvggSEl-vTxdGfHlg.roa (hash: CUycEuUDS0zxjJemu4oZ9wIU+xi7vqRjfi0W27XlBfI=)
                          3: eLGE_51_6fXDl6v8POnsDoLbXD8.roa (hash: 1RwsA34iJlX33Oz/snyk+pECLx2oO8VCH9UrkWAkfXo=)
                          4: i7nGJrPNS9wiQe7TQvSIPvtWVKA.crl (hash: DAQ3N6GSVLLfoZW0WwD78PpU9syHchBs1+Q/ojkPjW4=)
                          5: stTRni4YM83OgBxFCYHTBarMniU.roa (hash: sdW8g8p16K2y61HEzLwNn3mjfOgNWIo1IuskhK0jm60=)
                          6: yER6Jwc260jYGlbdAWyVTAN3WMM.roa (hash: vpGox+pD5sY2CKKHnvr7twErOeITxh7mmeX17MbXeQo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/i7nGJrPNS9wiQe7TQvSIPvtWVKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/i7nGJrPNS9wiQe7TQvSIPvtWVKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i7nGJrPNS9wiQe7TQvSIPvtWVKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:70:55:30:0c:6d:a0:8e:aa:a2:78:c6:d7:20:b7:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bb9c626b3cd4bdc2241eed342f4883efb5654a0
        Validity
            Not Before: Nov 15 09:01:06 2026 GMT
            Not After : Nov 16 09:01:06 2026 GMT
        Subject: CN=7327ff391a8272f0248f7d867cbf3bef6d21fdc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c6:71:9f:fc:7d:dd:a8:2a:50:e1:78:73:6a:
                    8e:12:62:f4:5a:de:42:53:20:1a:59:4f:9b:e2:32:
                    a8:78:17:cb:5f:11:6b:f4:27:d1:64:a8:a5:36:3f:
                    7c:2c:6a:45:ad:53:f2:ca:db:63:b8:b7:04:10:df:
                    3f:20:42:4a:09:fb:2a:57:97:40:22:94:c0:e5:d9:
                    ca:db:81:33:8a:6d:88:9a:6e:52:51:72:7b:10:b8:
                    07:dd:a7:8a:00:0e:62:da:cc:90:e9:60:92:69:56:
                    09:a3:f0:7a:00:04:bd:23:52:b7:65:ea:c2:50:d6:
                    cd:00:cf:61:91:8f:76:6a:3b:1f:13:a0:aa:d4:81:
                    36:fd:02:46:25:11:6c:db:a3:2d:13:0f:c2:e5:ee:
                    e6:1f:19:e5:2f:bb:17:a8:86:e6:47:18:85:f5:57:
                    04:a9:ca:67:f6:0d:3a:d5:19:f9:10:5f:ff:5a:1c:
                    b0:6a:7c:89:7a:c1:3a:af:d5:51:1a:bf:14:30:c1:
                    52:7e:6d:12:49:c8:81:50:6d:06:49:d5:1b:73:c2:
                    10:b8:ec:45:66:27:18:13:fd:83:8e:f8:26:ae:66:
                    94:23:f4:62:f8:e9:b9:aa:0d:cf:22:51:0f:00:a4:
                    4b:bd:53:cc:02:cb:80:cb:26:f0:c5:92:be:c3:7e:
                    94:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:27:FF:39:1A:82:72:F0:24:8F:7D:86:7C:BF:3B:EF:6D:21:FD:C5
            X509v3 Authority Key Identifier:
                keyid:8B:B9:C6:26:B3:CD:4B:DC:22:41:EE:D3:42:F4:88:3E:FB:56:54:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7nGJrPNS9wiQe7TQvSIPvtWVKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/i7nGJrPNS9wiQe7TQvSIPvtWVKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/i7nGJrPNS9wiQe7TQvSIPvtWVKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:d4:52:4a:a5:60:8e:68:e5:5f:dd:e3:d0:da:20:cd:78:b4:
         42:0c:61:07:b3:84:3b:47:07:f4:81:2c:5d:c2:fe:db:84:76:
         bd:3f:7a:11:62:3a:5a:9f:20:cf:76:dc:04:1e:76:f7:ee:e5:
         e9:07:d9:83:13:38:6e:e7:51:a6:3e:a0:c7:30:ce:81:b5:4b:
         b7:5f:8c:cf:68:a7:7f:b1:40:de:ec:ff:87:f3:9c:c6:b6:e7:
         39:93:e1:d1:ca:35:d6:a9:65:50:e8:88:c9:51:24:ea:ab:c1:
         5b:24:0a:e4:75:20:ef:03:57:6b:0b:f1:02:f2:26:1c:d8:2c:
         09:23:66:82:2a:ce:e1:9d:8b:c8:87:4a:ab:01:48:04:41:04:
         82:1d:d7:88:6f:1b:04:d4:69:24:82:f9:03:ea:e8:1d:5c:d8:
         41:3b:4f:ad:6f:4f:fe:f3:6e:f0:3f:42:a9:58:65:fa:f1:f6:
         34:60:94:d5:fb:b2:9b:fe:5b:94:45:99:88:79:c2:27:80:44:
         18:dc:6f:0c:1f:cf:21:4d:98:17:70:c6:83:73:f9:a0:04:39:
         c8:13:db:eb:2b:31:b0:1b:a3:82:53:fb:bb:3b:81:97:fa:c6:
         c7:48:5c:78:fc:64:57:58:0a:67:11:6e:b9:c7:a1:93:b5:36:
         03:40:83:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:30:18 2026 by rpki-client