Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
File:                     pfanGhgNz4sjDEFPCfe3G66peBw.mft (raw, json)
Hash identifier:          TNexcB+hD5vAeH7Ef0C/vIfMmJ/KqBQNvSKZsQm1GRw=
Subject key identifier:   34:78:5E:F6:05:AC:8B:6E:B6:85:53:67:68:32:09:4C:20:33:E9:71
Authority key identifier: A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
Certificate issuer:       /CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Certificate serial:       01A1DF831B0B3B91DCC29297C2624E3E2073
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
Manifest number:          07C5
Signing time:             Sun 15 Nov 2026 14:01:13 +0000
Manifest this update:     Sun 15 Nov 2026 14:01:13 +0000
Manifest next update:     Mon 16 Nov 2026 14:01:13 +0000
Files and hashes:         1: etwq045QwrYSI43CEOYjoWhjPf0.asa (hash: mHkOUoBleSqHfxS4Acb4TfhU8G2G9TKcdYd1R4Gd4OM=)
                          2: l2imbiusoMKFDayNbJoOchhQjKo.roa (hash: YYelOZGI0tep3ojBK7JJq7+uS3WslSPQkey1gLDWKRs=)
                          3: pfanGhgNz4sjDEFPCfe3G66peBw.crl (hash: Z6OVqu+sFDeaIW0Db3NEzDvp6lRHhKT8T+kfxiAQCkI=)
                          4: sqjDR9C3yuWgeDEW-u7FZq2GXwI.roa (hash: /0Ln3Zg2sTICpShIMihehk8+YHZcL9xlacfJl1AeuPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:83:1b:0b:3b:91:dc:c2:92:97:c2:62:4e:3e:20:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
        Validity
            Not Before: Nov 15 14:01:13 2026 GMT
            Not After : Nov 16 14:01:13 2026 GMT
        Subject: CN=34785ef605ac8b6eb68553676832094c2033e971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:65:37:51:5f:03:9d:19:e0:df:41:54:ee:a8:
                    e8:78:96:d3:50:95:04:4c:e8:54:90:85:37:5b:2b:
                    3c:07:9c:2d:e9:8e:7f:cb:03:ef:b7:13:22:b8:55:
                    53:86:73:7b:78:6a:d7:b4:3b:ba:ed:15:e5:cb:ba:
                    a2:0c:7a:b3:9d:c8:0e:0b:8e:f7:fa:e4:71:05:70:
                    58:1c:85:74:dc:91:ba:ed:05:fe:98:3d:d0:d6:e2:
                    63:15:6c:06:07:0f:9f:07:48:46:5b:5f:f2:31:ca:
                    fa:61:fc:eb:e2:88:79:ee:1e:57:c3:e8:7f:f7:3c:
                    fe:74:15:f2:2e:93:c3:df:51:6c:01:ed:f1:ed:3f:
                    5d:77:10:72:8e:d7:dd:b1:0f:90:17:4a:04:23:0a:
                    76:e7:97:41:0b:bd:6b:94:7d:1b:fd:ec:91:20:c9:
                    97:2c:0b:e9:0c:6e:61:aa:e7:43:79:3e:5e:db:b1:
                    f4:b7:60:42:d3:a1:a7:2e:b2:b2:77:38:d5:6a:fe:
                    ad:ad:bf:09:5b:a4:d9:f8:9c:59:47:46:31:c1:04:
                    ab:6a:e5:64:c5:b3:84:d6:0c:b7:e9:f1:39:58:81:
                    12:1b:00:a4:65:76:d4:3a:ae:f5:1c:ab:94:8a:d2:
                    5a:37:70:4b:85:69:5f:be:df:7f:d9:81:1b:e7:e8:
                    1a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:78:5E:F6:05:AC:8B:6E:B6:85:53:67:68:32:09:4C:20:33:E9:71
            X509v3 Authority Key Identifier:
                keyid:A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:37:61:b7:3d:4b:ac:15:66:1a:b5:b7:68:b8:29:b4:05:7f:
         2a:31:e3:e1:41:8f:f8:b1:80:10:83:db:a0:e9:95:8f:0d:54:
         94:9d:51:43:b5:8a:59:b1:0f:99:d9:4d:8f:a9:fd:bb:65:e5:
         d8:1d:fb:65:d7:e3:96:44:18:6b:eb:75:1d:21:5f:ff:46:06:
         7c:73:9c:af:3c:cc:e9:da:bf:8c:1e:c2:fe:4b:81:d1:77:68:
         96:1b:aa:de:94:10:33:03:4b:19:e5:8e:4e:db:3e:d5:84:87:
         48:b0:20:fb:99:0f:85:c9:91:8a:f7:f1:64:5f:f8:0a:c2:cb:
         f6:95:9d:89:76:8c:a8:ac:0b:f0:b7:30:57:05:2e:5b:32:28:
         fc:4d:46:7b:2c:a1:bd:4a:05:6f:1f:d7:05:b7:ef:2a:76:3c:
         fd:b5:7d:31:51:ed:e5:6a:ac:ea:83:cc:ec:3a:72:18:e0:09:
         9d:1e:13:3b:f4:19:1f:b9:0b:91:1c:2e:25:66:48:0c:0a:73:
         23:a1:8b:5b:05:43:45:87:f0:59:0f:ab:a5:ea:77:41:92:60:
         d5:01:02:dc:12:da:ef:77:f1:8f:ba:25:6f:a1:79:0c:8a:6a:
         13:69:b4:8e:4e:75:59:da:de:8c:b3:cd:c0:35:10:d3:7c:85:
         82:3a:c6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:53:23 2026 by rpki-client