Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
File:                     gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft (raw, json)
Hash identifier:          BEu+iJd81nY07NJRV7bZG/cdZ+r544j3nqeg0zDjazk=
Subject key identifier:   3A:07:89:39:4F:81:0A:9E:AB:34:4D:48:D4:65:3B:57:61:AF:06:54
Authority key identifier: 80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8
Certificate issuer:       /CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
Certificate serial:       01A1DC1479D3E9B990BD693DCE09912002D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
Manifest number:          0C57
Signing time:             Sat 14 Nov 2026 22:01:31 +0000
Manifest this update:     Sat 14 Nov 2026 22:01:31 +0000
Manifest next update:     Sun 15 Nov 2026 22:01:31 +0000
Files and hashes:         1: HGlsVrHEnVUZTxnltUDYgtbddII.roa (hash: PRTqegkFaXBSmjlIahMPcYyZ0ftS890tO/2pjXR1d6s=)
                          2: W0JnqG_1catAnHEXGycEO8oq48k.roa (hash: A6AJQgQl743BUazqkp43vOKzFjK/bipy9CgPiB+KG6U=)
                          3: gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl (hash: BDjICTIPUocSq/kMxHNhQZRpHgeMNQTg4FvDYYnerHw=)
                          4: jcRnGzty5tFJLCYMbqQ9KAoJt0M.roa (hash: a1X93SlCywmHujOimn+Po6M7RMMfbT2R8166ZJ7vS9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 21:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dc:14:79:d3:e9:b9:90:bd:69:3d:ce:09:91:20:02:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
        Validity
            Not Before: Nov 14 22:01:31 2026 GMT
            Not After : Nov 15 22:01:31 2026 GMT
        Subject: CN=3a0789394f810a9eab344d48d4653b5761af0654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:44:12:8b:8e:37:ec:4a:43:e6:14:9f:0e:cb:
                    39:49:83:ba:45:ee:ec:60:a7:1f:a5:b2:43:27:5b:
                    10:2f:8d:85:a1:0d:60:56:c2:0f:b5:af:99:a6:b1:
                    c1:5f:fe:e0:25:96:86:41:25:d7:7e:03:de:2b:cc:
                    39:64:04:a1:08:36:72:e9:3c:5c:ba:da:69:b0:16:
                    83:a5:29:ea:2d:11:28:db:99:0c:c7:15:f9:01:b5:
                    de:ed:91:33:81:5e:3d:2a:b3:49:9d:81:06:a4:91:
                    9b:cd:ff:3e:fa:21:ed:d9:07:14:c0:f6:8f:4c:d7:
                    8b:ad:26:12:26:d5:7d:49:3b:db:5b:56:e1:25:90:
                    0e:22:16:80:4e:90:de:cb:03:29:30:f6:9b:cb:b9:
                    1f:33:30:e1:4d:d8:53:ca:b9:ee:b1:b5:da:b1:df:
                    bb:08:f9:4e:d0:f2:49:77:2e:1d:82:23:96:ed:f8:
                    a7:46:0c:ad:dd:ec:24:0d:c6:06:15:d7:a8:cf:34:
                    ef:16:ab:46:25:63:7b:1d:df:7d:38:4d:ce:53:1d:
                    6b:65:18:be:05:d6:48:ee:4e:20:9e:2d:07:38:4e:
                    46:a9:44:e2:22:34:99:4d:31:ac:de:8a:2f:58:46:
                    49:0f:d1:3f:9c:f1:44:6f:17:9a:bb:3a:d1:c0:31:
                    f7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:07:89:39:4F:81:0A:9E:AB:34:4D:48:D4:65:3B:57:61:AF:06:54
            X509v3 Authority Key Identifier:
                keyid:80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:7e:1c:ba:65:1b:1e:9b:7c:0b:cb:32:cf:ea:d4:65:42:1c:
         56:f3:24:06:1c:fc:03:e5:f1:90:1d:9a:04:94:2f:0a:1f:df:
         9a:be:80:78:36:e1:72:1c:08:cd:76:da:ea:f9:38:f0:2a:a1:
         80:e4:9b:f7:4c:ba:6f:38:9d:58:77:25:44:96:f7:dc:56:79:
         05:aa:d5:39:00:7b:bd:f0:97:21:94:b9:30:ba:63:d1:7e:80:
         91:79:df:5e:a4:75:23:7c:26:14:3d:a0:ea:d8:2b:03:63:4d:
         43:1e:96:f9:e1:81:21:67:fe:b4:f5:e6:b7:14:e7:67:4d:96:
         27:70:35:d2:6d:52:72:8d:24:b3:60:19:c9:4a:ba:57:ec:27:
         2e:0c:f2:1d:49:ea:aa:c9:cc:53:34:32:82:fe:ce:0a:26:45:
         6e:7e:e9:a6:c6:4b:49:80:8f:34:c4:d1:85:2e:52:f8:88:e1:
         77:e0:90:33:ce:f4:35:48:c8:96:57:00:6b:b2:c0:02:d1:d9:
         ab:6b:41:4f:85:14:1e:ff:55:7e:e4:cc:ce:60:4d:8e:ab:e2:
         c5:13:d9:b7:b4:cf:bd:af:4b:7d:e3:fa:9b:df:42:f9:03:93:
         cd:6e:96:4d:08:26:48:0f:5c:58:77:6a:cf:b0:2d:a3:7d:f3:
         bb:df:cd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:34:34 2026 by rpki-client