Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft
File:                     YzCxTOdPYKjqSrtuqmDuRHD0On8.mft (raw, json)
Hash identifier:          PRbR/mwbbQxfRT6OlpfVh6F2TnlVGhfa88hDRE6i5BY=
Subject key identifier:   63:1A:32:22:BB:92:F3:19:7D:50:0D:9A:4D:FB:B2:FD:F2:AB:B2:C4
Authority key identifier: 63:30:B1:4C:E7:4F:60:A8:EA:4A:BB:6E:AA:60:EE:44:70:F4:3A:7F
Certificate issuer:       /CN=6330b14ce74f60a8ea4abb6eaa60ee4470f43a7f
Certificate serial:       01A1DE70E838E023662344E28855EE8EAF10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft
Manifest number:          0458
Signing time:             Sun 15 Nov 2026 09:01:43 +0000
Manifest this update:     Sun 15 Nov 2026 09:01:43 +0000
Manifest next update:     Mon 16 Nov 2026 09:01:43 +0000
Files and hashes:         1: 30S6gV2oh78DXtrqvndtvSPPKd4.roa (hash: OcTAJVeDjRXR19iBC0Wj5Tjt34V2Iwuh2sKP2/1+Fgg=)
                          2: YzCxTOdPYKjqSrtuqmDuRHD0On8.crl (hash: 0wqlrJ7I9gns0BU6qH5pMDU9AUtO1zObBnxqalLjnTM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 09:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:70:e8:38:e0:23:66:23:44:e2:88:55:ee:8e:af:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6330b14ce74f60a8ea4abb6eaa60ee4470f43a7f
        Validity
            Not Before: Nov 15 09:01:43 2026 GMT
            Not After : Nov 16 09:01:43 2026 GMT
        Subject: CN=631a3222bb92f3197d500d9a4dfbb2fdf2abb2c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:86:0d:83:52:f9:e1:78:43:3c:89:19:42:05:
                    b7:e1:73:9e:0e:d4:a4:ef:61:bf:c4:82:95:55:df:
                    f8:98:0f:ac:18:fd:f0:53:a3:92:cd:c9:3c:23:97:
                    e0:1f:ff:b5:28:7c:22:dd:cd:2a:43:a3:32:4b:a7:
                    c0:07:24:45:1e:9f:ad:d7:05:11:33:ee:18:11:a6:
                    2b:87:2e:9a:3e:53:65:84:c0:45:ae:64:3d:89:c9:
                    10:1a:23:1d:a9:7d:ba:16:58:94:b7:d4:7c:ef:35:
                    ad:d0:72:1b:6e:7d:84:3c:aa:3b:3d:ac:a2:54:37:
                    05:15:bc:68:d2:56:9b:a7:4e:0c:08:1a:32:92:83:
                    80:17:c1:98:f7:d2:b9:37:30:f7:60:a7:3c:01:71:
                    6c:5e:05:1a:3d:c1:78:22:11:7e:12:15:69:83:fc:
                    ae:62:88:08:22:3e:a1:47:e1:9e:d2:85:17:c3:1f:
                    44:f2:7e:f9:78:34:be:c0:f9:93:40:51:5a:93:0f:
                    a8:18:db:9d:ba:a5:1e:73:00:50:42:91:94:60:9e:
                    57:7e:d6:42:33:25:33:3f:91:29:70:33:5f:80:bd:
                    87:dc:a3:0c:51:97:37:f3:18:69:88:c2:56:61:c3:
                    95:bf:ca:57:f5:20:ad:12:8e:d5:ae:a5:75:6b:c7:
                    b9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:1A:32:22:BB:92:F3:19:7D:50:0D:9A:4D:FB:B2:FD:F2:AB:B2:C4
            X509v3 Authority Key Identifier:
                keyid:63:30:B1:4C:E7:4F:60:A8:EA:4A:BB:6E:AA:60:EE:44:70:F4:3A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:10:35:ab:3f:bc:98:99:c2:86:a7:7d:86:3f:c8:80:79:2c:
         32:3a:ad:61:14:00:86:a9:f4:68:f7:13:72:cd:22:97:7a:41:
         1b:6e:ef:cb:fb:17:50:79:fa:38:c3:ed:08:ed:83:ea:69:54:
         bc:57:3a:c7:ff:68:9f:60:9c:7e:1b:c0:c2:18:c2:e6:dd:50:
         f7:f4:4c:ba:f2:86:e8:3a:2f:f0:d5:95:87:d4:d0:9c:c0:7c:
         81:9e:a1:25:6d:c1:db:3e:85:1b:1b:2a:3b:2b:14:5d:06:75:
         1b:da:22:a2:f1:db:d1:ac:84:e2:84:80:b1:f3:37:0a:d0:06:
         96:bc:01:b6:01:04:ac:21:28:1c:91:b9:76:a3:e5:6f:8f:13:
         34:0b:79:cb:37:5e:57:18:19:95:dc:f9:f0:1b:21:06:f3:4f:
         fd:d5:9e:ef:8f:58:be:1e:74:ff:7f:7d:8e:6a:3d:97:26:61:
         2b:f1:cc:c8:b7:f8:f0:30:85:5e:87:ec:1c:29:e2:8c:90:2d:
         f9:53:90:e1:eb:92:55:4d:1b:8e:00:99:7b:de:91:38:d6:a5:
         bc:90:6e:bd:5e:83:17:97:1f:59:e9:96:56:8b:4d:68:4e:f8:
         97:ae:b9:3c:8d:23:93:e2:a2:7f:24:44:6e:02:8b:69:5d:bc:
         a6:82:f1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:16:41 2026 by rpki-client