Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
File:                     cCHXUovnE6S6LLTbXljWTYgutVU.mft (raw, json)
Hash identifier:          U65za8rDMfNBFaPEe6DUGbqnIxDuzJpeEyE6OJkeqHQ=
Subject key identifier:   5A:7D:CB:36:99:5A:CB:B2:B4:5A:41:54:81:A8:2D:59:7A:AC:E6:8E
Authority key identifier: 70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
Certificate issuer:       /CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Certificate serial:       01A1DDCC45AE7336653B3483B618A5404FD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
Manifest number:          0AA6
Signing time:             Sun 15 Nov 2026 06:01:54 +0000
Manifest this update:     Sun 15 Nov 2026 06:01:54 +0000
Manifest next update:     Mon 16 Nov 2026 06:01:54 +0000
Files and hashes:         1: _T4q5Hpk4ipyTG7AMNyDdoKOT50.roa (hash: Lr+JB8T/f7L7H1ix+TlIyXnba9tt1bZ6qL8/Kz5nqFg=)
                          2: cCHXUovnE6S6LLTbXljWTYgutVU.crl (hash: FvAPzMnooFlkvfGA5ZMXRFx++i8shZpf+WvOaNtzGcA=)
                          3: j6lfOf4HC5bbEjaff5hljS8gJKg.roa (hash: l8XPilBi9PuRFsaYedyEyHdTGS7nhn3WNJeBccCMVBk=)
                          4: ji5uq7lgpZme2h5LP4PpoR1KlXg.roa (hash: KpOwi/Y6b4qR3//I1ROSdvQABJ8PA4YdcglI0GCbEGo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:cc:45:ae:73:36:65:3b:34:83:b6:18:a5:40:4f:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
        Validity
            Not Before: Nov 15 06:01:54 2026 GMT
            Not After : Nov 16 06:01:54 2026 GMT
        Subject: CN=5a7dcb36995acbb2b45a415481a82d597aace68e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d4:bf:12:82:47:95:05:be:92:61:a5:58:48:
                    27:38:54:d2:8b:32:e6:29:41:a2:3b:a7:9f:ae:85:
                    73:62:a3:63:27:81:ca:89:44:a1:87:11:7e:bd:8c:
                    ee:d2:9d:c4:32:7c:41:69:13:e1:f9:8b:f0:87:a4:
                    97:2e:94:3d:fb:d3:de:32:78:65:15:44:2d:92:1d:
                    c0:ac:ee:c1:14:83:89:35:fe:0e:dd:4b:2a:a9:73:
                    cc:9e:d3:85:ed:73:b4:8b:5c:c2:12:4b:8d:56:b5:
                    67:3d:4d:f6:11:64:af:54:89:9b:0c:af:14:d6:ca:
                    c7:7f:9e:a4:6b:d6:17:01:63:fd:91:36:20:44:a9:
                    bf:b7:2f:42:62:c0:45:60:b3:22:2b:c1:18:9f:44:
                    55:75:30:4d:9c:b6:a1:bb:ad:5e:d8:4f:3d:38:62:
                    06:ec:e3:e9:fb:57:9b:0f:3c:b1:35:db:45:38:54:
                    95:13:23:09:ab:bb:6b:e6:39:ce:1f:02:bd:df:40:
                    fb:2c:52:1b:99:92:1c:69:47:90:9e:15:c6:c7:cf:
                    76:df:c4:9f:77:7a:07:14:c0:75:ff:fe:d4:a9:e6:
                    5b:25:b5:e9:0c:bd:16:d9:bb:eb:74:80:b8:1e:28:
                    5d:6c:2f:72:fa:84:fb:e7:4b:e6:3b:96:b1:ed:2d:
                    32:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:7D:CB:36:99:5A:CB:B2:B4:5A:41:54:81:A8:2D:59:7A:AC:E6:8E
            X509v3 Authority Key Identifier:
                keyid:70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:5f:91:24:42:05:1f:e7:fe:4f:7e:e1:8e:04:cd:8e:2b:6a:
         cc:d9:12:c0:ac:11:c3:0d:3c:e0:76:83:c5:03:ec:b4:20:d1:
         f8:8c:4a:4b:44:1d:5c:9a:da:b6:5e:21:26:63:47:8e:93:ea:
         77:7a:86:87:28:ac:f2:24:12:3a:b8:01:26:90:f7:b8:b1:88:
         f0:23:22:3c:88:5e:5f:f9:c7:96:1a:21:c5:f6:ec:92:ee:d3:
         de:4f:23:0e:ff:b3:ad:dc:03:ce:05:67:63:bf:ec:dd:d2:85:
         6f:a9:89:62:c1:35:3c:ad:a3:6e:99:0d:a0:65:04:34:e1:15:
         bb:70:d8:78:27:0f:c9:57:dd:11:d4:33:89:4a:32:62:2b:e5:
         9e:b8:5e:64:fc:14:df:02:7f:60:a8:27:42:3f:63:bc:48:9a:
         71:34:02:1a:ff:a8:d4:6f:45:06:6f:8e:26:09:a5:ec:cb:7e:
         28:53:56:13:43:00:63:14:00:58:7e:63:f2:6b:51:00:7d:65:
         a4:df:12:c5:c1:97:e2:a9:3f:39:1b:36:db:40:52:43:4b:3d:
         c6:d7:2c:50:19:4e:6a:4c:a9:18:73:2d:67:46:c0:bf:dd:85:
         9d:f8:0f:49:b7:0d:74:40:06:7e:22:f1:35:5f:2f:bb:0e:0c:
         77:7a:99:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:11:19 2026 by rpki-client