Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
File:                     BySLUtI-vSN7iotuY-3QLf7vmEw.mft (raw, json)
Hash identifier:          /Lznf30UXCzaxck84mpYoGsLAusQCR6StFCKzG0KW2E=
Subject key identifier:   A5:B1:81:5A:68:C1:10:BE:0E:94:97:A1:D2:7D:40:61:CE:C8:D0:50
Authority key identifier: 07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C
Certificate issuer:       /CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c
Certificate serial:       01A1CFA25AE8367E449ECCF46321300C8409
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
Manifest number:          07D8
Signing time:             Thu 12 Nov 2026 12:01:26 +0000
Manifest this update:     Thu 12 Nov 2026 12:01:26 +0000
Manifest next update:     Fri 13 Nov 2026 12:01:26 +0000
Files and hashes:         1: BySLUtI-vSN7iotuY-3QLf7vmEw.crl (hash: i34kSZmiOpphZtLeXudqLfUeBlKKa/9mh9SWwEfphiA=)
                          2: WjdZRnfpfiK7EPcTHN6T_Hbhi2g.roa (hash: c2NkdQLg1UmIOJ9gE664QKmmEytOaSIm+ZEQFc0pnYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Nov 2026 12:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:cf:a2:5a:e8:36:7e:44:9e:cc:f4:63:21:30:0c:84:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c
        Validity
            Not Before: Nov 12 12:01:26 2026 GMT
            Not After : Nov 13 12:01:26 2026 GMT
        Subject: CN=a5b1815a68c110be0e9497a1d27d4061cec8d050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:91:70:09:d6:b0:50:fb:32:02:ae:1c:96:bc:
                    c5:53:7a:93:e1:cd:2e:89:c8:46:99:bf:f9:76:7d:
                    2d:d9:82:ab:60:31:b8:ab:ff:72:c8:bb:e1:82:ba:
                    b7:a1:f9:3c:1d:54:5c:54:d2:44:9e:98:a0:c4:64:
                    17:10:b8:a5:84:70:72:df:42:e6:30:3c:b3:c2:d6:
                    67:61:b0:b4:f8:6f:e3:ab:7e:61:7f:56:1a:96:1c:
                    e9:8e:b7:ee:09:fc:53:2c:8e:82:ce:7c:b9:48:84:
                    bd:cf:49:2a:6b:76:1b:5b:7a:ef:ee:7c:71:d1:eb:
                    97:8d:4a:3f:cd:dd:ad:48:4f:06:7e:b3:38:8f:65:
                    d4:ef:52:75:13:27:0e:4b:12:05:ff:68:43:c4:37:
                    54:b3:d4:7a:6d:f8:e5:97:9f:48:3d:09:77:d0:f4:
                    70:da:9a:15:8d:7e:cc:74:e7:4e:fa:7c:34:92:87:
                    a4:e1:df:77:af:5f:f2:ea:fe:64:e2:44:e0:27:e5:
                    3b:26:ad:07:4b:42:2b:1a:40:39:b4:47:a5:47:e5:
                    fc:30:e5:ab:e0:f7:bb:56:ca:28:a8:16:09:99:bc:
                    9d:fe:a4:88:82:95:58:9b:3a:0a:3a:24:f5:85:00:
                    26:ef:28:bc:97:8f:39:29:e0:45:e1:62:99:ef:fa:
                    88:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B1:81:5A:68:C1:10:BE:0E:94:97:A1:D2:7D:40:61:CE:C8:D0:50
            X509v3 Authority Key Identifier:
                keyid:07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:72:7b:15:36:16:97:5c:ae:89:86:6a:7d:0e:97:0f:8a:85:
         72:6a:b4:29:af:04:83:30:03:5e:ae:8b:b2:51:68:be:dc:54:
         4e:4e:2c:33:bb:3a:62:0a:00:4d:26:62:8d:af:73:4c:e5:37:
         39:6b:a4:ca:61:a5:de:44:ff:37:05:40:70:df:46:5d:04:0c:
         1f:52:c1:a3:be:16:9f:27:c8:c7:f1:7c:ba:45:9e:eb:8c:bb:
         5f:31:49:8b:12:fb:52:4b:e9:3d:3a:63:3a:2d:2d:82:0a:e5:
         42:68:d8:ee:f2:18:cd:10:ed:6c:37:5c:27:8b:c3:9f:77:6c:
         e4:f9:3f:61:19:bc:7e:77:72:f3:e1:28:87:35:7b:ba:73:4b:
         b3:d0:f6:40:c1:39:97:72:63:73:0f:b0:f1:46:f1:59:27:54:
         29:d5:33:88:3d:da:65:a6:74:78:cb:61:c8:db:e6:3c:c5:cb:
         c3:d2:32:48:00:e5:6e:bc:00:db:92:b8:29:68:e2:53:5c:5b:
         9d:f8:fc:8e:c7:8c:61:64:40:96:bb:92:d2:5d:15:ce:56:42:
         60:48:31:e9:6b:e1:01:b3:50:00:63:11:e2:b0:24:45:0c:2f:
         5f:8e:b9:f0:b1:19:53:41:ff:27:2f:04:b4:a3:48:be:46:51:
         10:aa:63:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 20:19:44 2026 by rpki-client