Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft
File:                     aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft (raw, json)
Hash identifier:          OqRu8cKyMEvVeLZlfDZ7eU6y1tCzMi937nCRda4dYjQ=
Subject key identifier:   E5:D1:A5:A4:AD:F2:79:45:85:BE:3B:97:52:FD:79:74:9B:AB:C8:14
Authority key identifier: 69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92
Certificate issuer:       /CN=69507f066f2bb0389dd88436074e1426114f2d92
Certificate serial:       01A1DBDD96BD2AF38F0481B80CAF5FD45662
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft
Manifest number:          0E9B
Signing time:             Sat 14 Nov 2026 21:01:34 +0000
Manifest this update:     Sat 14 Nov 2026 21:01:34 +0000
Manifest next update:     Sun 15 Nov 2026 21:01:34 +0000
Files and hashes:         1: 4WPjuQdcTYFuaKklmsOnpFVG_k8.roa (hash: RCXd7tm0HqyMJHrZAkQGbR+ZGjGMt/XtYWeMv5QHcoU=)
                          2: 8KJsvZ90HMlVQ-Gu0ZDFDln93Ls.roa (hash: DGlt++jIzcEyf2YY8cq7I9ry7xE+xVwo5HjB9DimFnk=)
                          3: _lawUkPbMS6rKq0eJzdtFnozaP0.roa (hash: 8VAyeac9InM+D4DkCVJjHuFb1ne2vlYSxpVOPX8DTlI=)
                          4: aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl (hash: K64DElsn7TDOul8hZc2KNGcm2v2it3s3cPAQ+tvJcx0=)
                          5: gzebHHHdaAflLrSgmd5cMThOPRk.roa (hash: UBALfYvCwMk1MgWprKN2MTqfVcb3bMaQ5vxtJue2TL0=)
                          6: xzXaYpELPohXHyaBsryyzKsxpi8.roa (hash: Pac357tmTBXSGA3lzxCsfoP5+/cvABrR8JYDv2qCuqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 21:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:dd:96:bd:2a:f3:8f:04:81:b8:0c:af:5f:d4:56:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69507f066f2bb0389dd88436074e1426114f2d92
        Validity
            Not Before: Nov 14 21:01:34 2026 GMT
            Not After : Nov 15 21:01:34 2026 GMT
        Subject: CN=e5d1a5a4adf2794585be3b9752fd79749babc814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:86:f1:2f:4f:b5:95:d1:10:97:ef:08:e5:2f:
                    b4:56:2f:2b:46:cd:28:d8:af:29:f5:58:1e:d4:57:
                    ec:6f:b8:de:43:34:10:3d:6d:5e:54:47:1f:2e:1a:
                    0e:d8:34:9f:f0:be:11:eb:5c:03:32:c1:23:bf:da:
                    15:32:4e:0e:97:48:29:49:96:82:4b:1c:4a:63:ff:
                    13:03:1b:ed:4c:cc:d2:30:b7:3a:62:9f:e0:87:47:
                    4d:91:0e:75:f4:40:79:c6:1e:7b:9a:4e:d9:26:80:
                    47:44:de:a7:6d:b1:ad:36:98:59:36:dc:ac:3a:a6:
                    d1:05:e8:66:51:97:43:87:88:56:16:31:8c:2c:4f:
                    ec:4a:39:0c:0b:33:dc:04:b9:af:3c:ee:c0:64:17:
                    27:35:5c:7d:aa:22:18:a7:67:18:33:b4:a3:58:34:
                    68:fc:ed:30:6e:b4:12:fc:a8:59:b1:15:7d:35:ad:
                    c3:21:c9:02:82:0c:46:22:a5:02:e7:81:63:e8:9c:
                    ac:20:71:89:7c:90:bb:f2:f4:e5:e9:5d:0f:00:fa:
                    a0:79:bd:25:c8:2f:ea:d1:ff:f7:9d:cc:e1:0e:5f:
                    fa:8c:d3:60:32:53:f7:c1:9e:ea:c7:b2:7c:90:f8:
                    c0:6e:7d:25:71:74:94:e4:55:82:8d:da:e8:20:6b:
                    40:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D1:A5:A4:AD:F2:79:45:85:BE:3B:97:52:FD:79:74:9B:AB:C8:14
            X509v3 Authority Key Identifier:
                keyid:69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:18:a5:7f:a8:ad:f4:32:57:cd:2e:7a:8c:26:02:ef:a9:15:
         1e:ed:44:3c:eb:57:a4:3b:8c:85:24:82:7c:7d:c3:50:c7:e9:
         04:da:ad:a3:fe:25:42:e6:47:ee:fb:0a:22:56:2c:71:e2:c9:
         4a:f3:fd:ef:f5:7c:39:ef:95:a8:de:c6:e1:aa:12:77:55:9d:
         4a:df:47:e3:2f:65:a5:68:78:dd:59:98:e1:ce:1f:06:2f:05:
         d4:64:2f:a2:53:8b:57:f6:11:2c:75:3c:b4:06:3a:ba:62:a9:
         73:21:2d:d8:d3:a0:38:09:1e:f5:e1:9b:e0:fd:87:0a:93:ca:
         1d:a0:c8:1f:9e:22:3d:99:7d:e5:53:f9:f2:8e:70:a6:66:f9:
         0f:ff:31:35:23:1b:7b:cd:5c:32:f6:3a:1f:76:46:cf:39:f0:
         df:de:da:ab:79:5b:65:ff:99:b5:77:f8:7c:8a:a0:e1:7a:ae:
         47:d7:aa:a4:7e:f1:0b:1c:54:dd:f1:e2:ba:fe:3a:0a:33:27:
         e5:89:6c:11:7f:ef:61:92:fb:8e:0d:b0:2b:a9:75:26:45:71:
         7e:1d:95:ae:d8:be:92:78:94:9b:c9:d6:87:5f:42:a4:bc:0c:
         6f:c7:ba:19:1e:96:14:0d:b3:5f:62:02:10:9b:c8:b3:d2:3d:
         20:f2:aa:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 02:48:15 2026 by rpki-client