Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/e05343-401b-4bf9-abdd-6ecd3226a2c5/1/mOaFDEKeTtUtdoC6mZnABVlZ9cs.mft
File:                     mOaFDEKeTtUtdoC6mZnABVlZ9cs.mft (raw, json)
Hash identifier:          u1BYvmwT6OPbEDNJa7jthDd7Y2bm5dvFLnfeAKmjgOs=
Subject key identifier:   21:44:20:F8:9B:CB:C5:C6:D5:4F:2A:3E:96:5B:74:C6:82:01:A2:ED
Authority key identifier: 98:E6:85:0C:42:9E:4E:D5:2D:76:80:BA:99:99:C0:05:59:59:F5:CB
Certificate issuer:       /CN=98e6850c429e4ed52d7680ba9999c0055959f5cb
Certificate serial:       01A1DDCBC0EBB19C67F9274D821E0EA23E08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mOaFDEKeTtUtdoC6mZnABVlZ9cs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/e05343-401b-4bf9-abdd-6ecd3226a2c5/1/mOaFDEKeTtUtdoC6mZnABVlZ9cs.mft
Manifest number:          92
Signing time:             Sun 15 Nov 2026 06:01:20 +0000
Manifest this update:     Sun 15 Nov 2026 06:01:20 +0000
Manifest next update:     Mon 16 Nov 2026 06:01:20 +0000
Files and hashes:         1: be_gkUlk9308BGLed9e-cdXDJwc.roa (hash: KnE/equmjlrwzaYmtyOj+kmh0gRoZ+9TcyDh0b0mqM0=)
                          2: mOaFDEKeTtUtdoC6mZnABVlZ9cs.crl (hash: 9wkhPelL2m0IzfAUShZE2rjhmLtNpuUf0lkImZItLxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/e05343-401b-4bf9-abdd-6ecd3226a2c5/1/mOaFDEKeTtUtdoC6mZnABVlZ9cs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/e05343-401b-4bf9-abdd-6ecd3226a2c5/1/mOaFDEKeTtUtdoC6mZnABVlZ9cs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mOaFDEKeTtUtdoC6mZnABVlZ9cs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:cb:c0:eb:b1:9c:67:f9:27:4d:82:1e:0e:a2:3e:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98e6850c429e4ed52d7680ba9999c0055959f5cb
        Validity
            Not Before: Nov 15 06:01:20 2026 GMT
            Not After : Nov 16 06:01:20 2026 GMT
        Subject: CN=214420f89bcbc5c6d54f2a3e965b74c68201a2ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:42:47:3b:45:53:d9:c0:9d:2d:59:c9:9c:b3:
                    d6:e6:f3:44:5c:b4:09:50:fe:aa:74:7e:1d:73:90:
                    5d:40:b6:78:96:8a:f7:75:3f:04:d4:a7:ca:27:63:
                    0a:1f:bb:47:12:fc:18:89:c6:6a:5b:da:25:9c:a6:
                    5c:1e:fb:95:49:6e:aa:44:ab:4e:c4:67:93:15:7c:
                    0e:c9:e8:cb:fd:3d:a7:b6:22:a4:7c:05:a7:d4:ee:
                    ed:e9:ab:a4:d5:a7:76:3b:8f:6a:85:51:ef:c2:b5:
                    b1:ef:44:f6:21:22:3c:8d:a0:ed:68:89:f3:7d:9a:
                    85:a7:1c:ed:2f:68:c0:d5:17:5c:07:22:00:d0:86:
                    38:83:e4:14:01:51:e6:b6:bc:7a:d9:a8:4b:ab:35:
                    d2:cb:21:2d:db:39:53:17:2f:e9:5e:7a:67:27:dc:
                    0f:ab:21:97:0d:0e:90:31:04:58:7c:0d:e6:de:c7:
                    68:3b:9e:a5:b8:a0:21:ed:cf:da:28:fd:59:5b:ff:
                    6b:57:60:49:bd:61:73:0c:64:40:8f:d8:3a:fe:5e:
                    0b:23:8c:f7:99:58:3b:12:8e:62:33:e8:e9:fe:f4:
                    2e:84:c3:55:cc:3c:be:2d:7c:92:73:b8:67:4e:19:
                    66:cb:9e:15:ec:4c:e9:4c:fd:af:fd:6c:47:37:04:
                    77:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:44:20:F8:9B:CB:C5:C6:D5:4F:2A:3E:96:5B:74:C6:82:01:A2:ED
            X509v3 Authority Key Identifier:
                keyid:98:E6:85:0C:42:9E:4E:D5:2D:76:80:BA:99:99:C0:05:59:59:F5:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOaFDEKeTtUtdoC6mZnABVlZ9cs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e05343-401b-4bf9-abdd-6ecd3226a2c5/1/mOaFDEKeTtUtdoC6mZnABVlZ9cs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e05343-401b-4bf9-abdd-6ecd3226a2c5/1/mOaFDEKeTtUtdoC6mZnABVlZ9cs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:c5:b2:9d:8b:23:a3:df:69:92:eb:ad:36:23:74:2b:97:fe:
         37:04:68:4a:88:15:95:cc:4b:5e:72:9b:f3:32:8a:22:66:62:
         33:b8:04:74:d3:33:ca:e5:4b:fa:71:ea:31:1f:7e:2d:62:be:
         32:50:97:66:20:48:c5:b5:07:78:82:1f:a1:5f:46:f0:7f:c2:
         41:e2:b7:ec:ad:67:9f:a1:fc:ee:24:4a:3d:1d:9b:19:d3:26:
         86:cc:d7:a9:22:ea:87:22:04:e5:64:29:3a:84:28:d4:0f:d7:
         a9:97:91:62:a0:c5:be:74:a9:6e:71:56:a9:87:31:c9:02:c9:
         32:8f:18:53:ee:16:82:85:6d:b0:22:ea:d3:64:b6:c2:fe:a4:
         23:5d:67:ed:b3:0b:a6:29:fe:d7:0f:d5:a9:7c:5c:d5:51:df:
         15:73:34:45:e3:c9:29:4e:ba:14:58:18:dd:9b:ed:9b:f8:6c:
         fd:f0:47:c6:a2:db:08:c1:d0:32:db:ec:b2:e3:f0:0d:f7:7e:
         c1:b7:bb:d4:f8:1c:64:d8:49:13:54:0f:a4:81:ca:0b:ff:96:
         ee:fe:cc:86:db:63:4d:e1:cc:1c:c9:03:ec:50:49:32:95:31:
         62:87:5e:40:06:f3:f0:5e:a5:f0:93:da:98:19:0a:73:d3:00:
         22:2b:bd:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:34:21 2026 by rpki-client