Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft
File:                     wFIM7LolHNN83zxNWrA2JVIruqw.mft (raw, json)
Hash identifier:          fimE4r9uPxoMQbesn7TvFat8XAEBMg+kwfgAVUUw/iU=
Subject key identifier:   75:0F:01:58:28:19:EA:1F:07:5F:3A:2A:63:ED:F0:4C:3C:56:D6:FE
Authority key identifier: C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC
Certificate issuer:       /CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac
Certificate serial:       01A1DF4C6DFF6CB50208134684687FC17CE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft
Manifest number:          1AFC
Signing time:             Sun 15 Nov 2026 13:01:30 +0000
Manifest this update:     Sun 15 Nov 2026 13:01:30 +0000
Manifest next update:     Mon 16 Nov 2026 13:01:30 +0000
Files and hashes:         1: 36T8Tn4Sup8fmQcjWCy26dR6re0.roa (hash: SG3LgOxnqBUaF6P4Vt2PLcBh7paYsvxM9iIaS6ERJJ0=)
                          2: 5QI4fVyPMm0-K60PBKXaZ8ZbhYY.roa (hash: PJ8hWL8fv95vnL+98n7N2nc5zp7ZDQ14+kWYLI42xqM=)
                          3: D3Scbfl6fBr15c-mbPSi-zu0HHY.roa (hash: GocWeJMCxjrHRiAM5S4dU7oou7wP+fPBVESKdHPj5Io=)
                          4: wFIM7LolHNN83zxNWrA2JVIruqw.crl (hash: hpapFAbBZGTTnZdFgPEtVKyq1xneprKhLVnplyp73zQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:4c:6d:ff:6c:b5:02:08:13:46:84:68:7f:c1:7c:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac
        Validity
            Not Before: Nov 15 13:01:30 2026 GMT
            Not After : Nov 16 13:01:30 2026 GMT
        Subject: CN=750f01582819ea1f075f3a2a63edf04c3c56d6fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:11:bc:3f:7e:d5:59:16:c5:82:2e:3d:77:b3:
                    7e:07:a0:a6:cf:7a:94:0b:00:86:44:ec:db:cc:3c:
                    fe:1f:ae:34:e9:79:64:f6:ed:6d:7c:4a:82:41:6e:
                    56:b2:8a:b1:d0:d2:0f:8b:33:20:c8:b8:6e:35:cf:
                    b2:7f:26:8b:66:f7:2b:07:86:d4:9f:d2:14:16:f6:
                    23:49:c0:1c:91:81:38:2f:82:58:50:3a:63:33:f1:
                    4e:6e:81:6b:f3:8f:7a:b7:7a:9f:ae:8e:d6:94:06:
                    6f:0c:21:1a:cc:fb:ce:3b:81:66:77:42:76:a0:d0:
                    5e:9c:1e:4d:d2:e3:a1:f7:00:64:9b:9b:16:e1:98:
                    aa:31:02:c5:35:7f:fb:58:66:66:1f:05:49:a1:27:
                    4d:08:e6:0c:06:19:1f:18:67:9e:7e:31:44:4f:b4:
                    1b:dc:cb:59:f6:7b:59:26:88:52:5b:0e:5d:a2:c3:
                    6c:44:98:7a:17:5c:8a:b2:b3:b5:40:cb:72:ee:5c:
                    15:08:aa:32:96:15:03:d0:54:ff:48:9c:b0:65:11:
                    3b:90:b1:d1:b2:e5:68:8a:e0:26:bf:e1:f0:d3:b5:
                    6f:85:07:c2:68:6f:84:c8:ae:80:23:5b:44:8b:88:
                    53:16:7a:e8:1c:15:c8:7b:50:94:01:8e:47:f7:87:
                    25:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:0F:01:58:28:19:EA:1F:07:5F:3A:2A:63:ED:F0:4C:3C:56:D6:FE
            X509v3 Authority Key Identifier:
                keyid:C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:69:e4:f4:67:96:f4:5d:f8:7a:93:4f:aa:16:28:a5:f1:8d:
         50:9c:41:12:5f:2a:8b:36:c0:be:dc:dd:a6:b9:3c:4c:c6:e3:
         d8:85:eb:17:66:3f:c7:89:0e:85:4d:d5:ae:eb:e6:2e:65:d4:
         c5:26:c6:92:5f:6a:dc:e4:7f:15:a3:c0:26:33:7f:26:a7:49:
         0d:e5:73:60:a4:cc:b4:92:23:87:a8:11:2d:7f:c7:dd:5b:3c:
         1d:1d:34:ab:3d:79:6c:ac:6e:4d:5a:35:bc:88:82:85:9c:01:
         ea:59:73:21:06:51:6d:68:c5:97:62:98:97:1c:a4:4b:f1:48:
         e8:65:3a:32:38:32:6b:f7:ea:2e:bc:54:39:45:f3:99:4c:00:
         04:8b:79:cb:1c:c0:44:82:09:af:cd:7e:74:c6:5d:c2:f3:e9:
         37:55:1f:d0:09:fb:1b:42:3b:15:26:62:33:54:b8:cb:02:78:
         c1:df:92:43:d7:74:a2:ff:3f:20:37:da:5b:81:bc:16:aa:9b:
         f8:ca:51:3e:62:4e:c3:0f:b8:8d:4d:e3:12:a8:69:15:94:48:
         83:95:ad:41:e7:df:63:ef:78:a5:65:d3:92:43:67:95:c0:5c:
         ce:b6:ef:87:fd:84:ad:ee:d7:c5:6f:ed:a8:60:c9:b4:a8:15:
         44:2d:cb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:13:28 2026 by rpki-client