Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
File:                     e71RJyBktjssZjwClroR216iOMA.mft (raw, json)
Hash identifier:          AiwUCrp+u+mcGlJz9BVy7zAZNh9JKC5IyuYy/ukLbxY=
Subject key identifier:   B5:8E:D4:F1:26:C4:47:C5:62:BD:FA:5A:9C:BF:7D:D5:A6:C4:63:9B
Authority key identifier: 7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
Certificate issuer:       /CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Certificate serial:       01A1DCB97BE943A6B91FC997CE91F3E02545
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
Manifest number:          1B01
Signing time:             Sun 15 Nov 2026 01:01:45 +0000
Manifest this update:     Sun 15 Nov 2026 01:01:45 +0000
Manifest next update:     Mon 16 Nov 2026 01:01:45 +0000
Files and hashes:         1: I2q3ifUktwdWLFVk814q3GS4fWI.roa (hash: IGOlAHTyV8D50YrVyxyBur7sPUQLiEB5K2gkPY8V5KM=)
                          2: OxGf8ePayJwU09gGZnySyoA8iyo.roa (hash: yf38tU7zRVwzX10bjvQIj5OiLgW6pM5L8OevnEJQOXA=)
                          3: RVARB5gmjTf2RYyiXEPOpOXxCDs.roa (hash: K6dew7DJ4uzjFiJigW12hfzcSGSynvBz3c731CNk5sM=)
                          4: Tn1byzDG3LC_-4W5cdtymqE-7H8.roa (hash: Lg0SZJ99rab4Y0en6j2xpoNxdMlIboyOteh0f0kPzyU=)
                          5: YueSZbKV98CmzxsiRfWA83jDNEs.roa (hash: pu97V45FIqBvOF8XHHzv+H1DedOkRlyDXAiuHDoYLCw=)
                          6: cGSyEqlaNLY1LymfACjH5x7qwiY.roa (hash: PPsjXk3d3JTucJBSEkB9JMB6kS1QWHypumoBDsX0uds=)
                          7: e71RJyBktjssZjwClroR216iOMA.crl (hash: UAKj8L30J+K3DT7p5KDjq6lSUsv07h8rxb2u7uvuvWE=)
                          8: gne3kq1o-I5H5isdKeVnYHfgRM8.roa (hash: OHMcztr6MiSOs8pzNesHKIFuwuf6t31tDx5kJSWgBCw=)
                          9: oeuzQUYyPkW-V2UkOlxP_jVk-4w.roa (hash: c4HWnVLhY5gwzEC9ub/fPbXgeg83cue7m376DrPhXoA=)
                          10: w2zX0OlEApQBeN-eJRqrMs7-KhQ.roa (hash: VAl4aNgTKdrb4Wh3EXu5ag7LbozTNcCxOnMz/M31Mvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 01:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dc:b9:7b:e9:43:a6:b9:1f:c9:97:ce:91:f3:e0:25:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
        Validity
            Not Before: Nov 15 01:01:45 2026 GMT
            Not After : Nov 16 01:01:45 2026 GMT
        Subject: CN=b58ed4f126c447c562bdfa5a9cbf7dd5a6c4639b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:4f:70:54:6b:03:02:9a:5b:f4:02:ff:0e:03:
                    13:0e:b5:fa:c4:67:4c:1e:53:22:76:c7:fd:f3:5d:
                    92:b8:99:09:5f:33:b4:2e:d7:46:d5:9b:69:f7:a9:
                    1a:b3:26:a5:f2:d7:76:2a:9a:6b:2c:25:6a:7f:91:
                    e9:ce:da:d5:8e:8b:bf:6b:38:e5:98:7a:66:cf:b5:
                    5a:ba:79:8c:47:75:24:63:75:90:d7:3a:74:33:e0:
                    d2:fc:e6:ff:60:85:ce:4d:0d:ea:ce:e3:eb:2e:d8:
                    95:f3:52:20:81:e2:80:ed:1a:54:66:8b:a8:5d:15:
                    7e:49:8c:9c:93:bd:c3:65:a4:b8:b4:f7:04:24:3d:
                    91:14:95:17:14:30:a3:20:e4:fb:8e:ff:a9:47:f4:
                    2a:04:a3:c9:a6:13:d5:ad:ba:88:b9:5c:d6:a3:fb:
                    b9:06:77:af:db:02:6e:d7:37:d5:b6:d8:ff:bd:7e:
                    69:f7:c0:2b:3c:36:3c:dd:cb:a2:a7:fb:0c:95:a8:
                    df:19:f8:a9:85:58:a1:68:c1:97:53:05:1f:15:7a:
                    7f:6c:24:e2:37:ee:36:6f:9e:ff:46:8d:50:a1:95:
                    ab:82:06:95:65:a4:67:b0:b9:e6:e2:d4:28:27:7d:
                    5d:80:68:86:72:aa:8e:84:21:75:ed:10:08:ab:02:
                    eb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8E:D4:F1:26:C4:47:C5:62:BD:FA:5A:9C:BF:7D:D5:A6:C4:63:9B
            X509v3 Authority Key Identifier:
                keyid:7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:1b:c1:a7:1c:25:60:e5:f7:48:63:fa:2c:08:06:92:0d:d6:
         1b:29:3b:6e:d4:c2:6c:fe:a1:6e:97:1c:63:72:46:5b:0e:ab:
         37:2b:81:be:fd:c1:9b:2a:c5:94:98:6d:87:e7:11:68:40:d9:
         67:e1:60:09:0e:01:37:26:06:62:04:b4:4e:26:3e:0e:16:74:
         53:65:65:d5:14:35:39:a7:4a:f3:cf:01:d2:19:4c:72:af:fc:
         85:50:c1:2c:90:b5:57:d8:09:a2:5d:3c:f0:5c:1d:d1:86:ef:
         51:87:4b:c5:0b:ba:32:bb:4c:44:97:b8:05:30:5b:18:28:01:
         76:65:a1:00:62:85:f0:d8:97:26:c3:5e:9c:d2:b9:34:f3:6f:
         26:9b:c5:e5:cd:5b:b5:20:71:45:e8:c2:10:53:11:87:a7:5c:
         d1:81:53:fa:44:3f:c2:ce:e0:29:b5:ec:d2:f4:47:31:56:dc:
         63:63:02:48:96:68:d1:c6:ee:73:68:a7:c1:82:a8:26:51:77:
         ac:c2:3e:2f:cc:36:91:13:c2:01:9f:78:4f:ba:6e:db:19:93:
         b9:e4:f2:6f:f0:63:24:76:5a:ed:46:82:d9:15:4a:0f:e4:23:
         dd:75:a1:c1:1d:27:33:77:90:7a:59:63:ec:a4:cd:ad:9f:a9:
         8a:59:d5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:26:43 2026 by rpki-client