Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
File:                     zWmPVbQJWbF4987Lwgw16cE3k0Q.mft (raw, json)
Hash identifier:          LVa9zAva4gRhr7khcqn2q37lgsdfcKND+zPf9d+UCTk=
Subject key identifier:   46:D8:07:AA:3C:24:E5:53:46:1E:AB:38:A4:BB:8D:65:D8:49:2E:E4
Authority key identifier: CD:69:8F:55:B4:09:59:B1:78:F7:CE:CB:C2:0C:35:E9:C1:37:93:44
Certificate issuer:       /CN=cd698f55b40959b178f7cecbc20c35e9c1379344
Certificate serial:       01A1DD5DC9512C3D5D72664D62ABEE749905
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
Manifest number:          1AF7
Signing time:             Sun 15 Nov 2026 04:01:13 +0000
Manifest this update:     Sun 15 Nov 2026 04:01:13 +0000
Manifest next update:     Mon 16 Nov 2026 04:01:13 +0000
Files and hashes:         1: 8irMhN6XI4UTd6CziWQze6aQaRU.roa (hash: 4USQ1+WIpW+ALL4UR8+ywA+eZ3L7W74DTtNUv/veQUw=)
                          2: zWmPVbQJWbF4987Lwgw16cE3k0Q.crl (hash: nE0Per6uvA6vBG0w5SSLZW8z9HDnna5UJRspvZWaxu4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 04:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:5d:c9:51:2c:3d:5d:72:66:4d:62:ab:ee:74:99:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd698f55b40959b178f7cecbc20c35e9c1379344
        Validity
            Not Before: Nov 15 04:01:13 2026 GMT
            Not After : Nov 16 04:01:13 2026 GMT
        Subject: CN=46d807aa3c24e553461eab38a4bb8d65d8492ee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:59:12:a9:6d:b9:ed:a0:6a:4e:ea:84:6e:c3:
                    4f:07:36:13:b5:8d:95:42:6b:88:d6:28:70:40:48:
                    9d:3d:ea:03:ec:94:be:b9:53:11:2d:21:f0:0d:ee:
                    ee:4f:af:93:8c:cf:5d:8a:91:f2:65:30:07:50:4c:
                    a5:c6:f0:79:54:db:f0:33:ca:97:2c:b6:26:66:dd:
                    55:36:c7:bf:ad:ca:45:34:e3:4c:6b:a8:63:fb:50:
                    ff:87:67:8b:76:b3:df:a2:cb:84:67:4a:32:7b:63:
                    41:64:4c:a8:65:f1:20:9a:1e:2f:63:a8:c3:d2:ef:
                    9e:8b:94:af:68:29:a6:50:42:36:65:90:63:89:9a:
                    07:f0:50:30:78:26:86:ad:54:78:db:5d:84:14:b4:
                    b2:74:78:d0:19:c4:d9:26:90:87:a3:81:6d:52:61:
                    d7:4e:4f:66:f2:32:e0:0b:f9:ca:01:fc:d2:4c:28:
                    36:74:c2:63:e3:de:46:7b:58:d5:e5:44:fa:ed:ac:
                    75:a8:6a:49:5d:2d:f1:ff:57:d1:a0:7b:ad:b3:72:
                    1d:0a:23:23:ab:42:34:3e:f0:92:3a:1b:3c:e4:bb:
                    1f:d2:e0:89:c7:2b:d5:75:49:43:7f:e7:e5:19:39:
                    41:c5:7c:62:7a:23:a0:a1:94:21:f1:37:22:eb:9e:
                    82:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D8:07:AA:3C:24:E5:53:46:1E:AB:38:A4:BB:8D:65:D8:49:2E:E4
            X509v3 Authority Key Identifier:
                keyid:CD:69:8F:55:B4:09:59:B1:78:F7:CE:CB:C2:0C:35:E9:C1:37:93:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:35:a8:1f:1d:f3:7e:a1:3f:aa:7f:da:2d:76:66:2e:44:f1:
         8b:07:fd:46:e2:d8:b4:10:b0:3c:ea:0e:44:66:1e:d4:8c:8b:
         ff:d2:11:93:46:f6:36:73:89:5a:08:a7:de:6c:75:03:2c:0c:
         ae:82:17:c6:3c:70:24:9e:22:d6:17:c5:2e:04:43:4d:de:c3:
         a3:eb:43:78:18:30:4d:08:50:52:7e:8b:85:92:d7:f6:19:bf:
         2a:a1:f4:78:87:c4:bb:2c:8d:69:43:d7:ff:70:b4:3e:17:ef:
         96:15:ea:d2:5b:2e:10:fd:ab:d5:05:6d:3e:3c:98:a9:71:c2:
         5d:c0:77:e3:9c:df:0b:a8:bd:b8:0b:62:5f:88:40:16:f1:ab:
         7c:1f:6f:aa:ee:3a:d5:09:aa:00:81:8a:ef:cd:2a:4d:db:00:
         78:a3:3e:79:e6:8e:33:4f:1e:a9:c7:72:c6:2f:73:17:d4:7f:
         38:aa:d8:07:5f:d3:4b:ef:d2:d3:7d:87:94:e3:97:9c:7e:14:
         12:91:a3:23:28:e6:89:01:a7:be:34:f3:60:62:d4:3c:06:84:
         03:97:8b:aa:78:1b:08:a6:f9:af:6c:e7:1d:b4:ec:d2:ce:34:
         69:45:fb:5b:75:c6:3d:01:b3:71:44:b5:1c:59:40:8a:ed:21:
         02:a2:71:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:45:36 2026 by rpki-client