Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.mft
File:                     xi18rB_7LD-94oRiW_GvTGuuaw4.mft (raw, json)
Hash identifier:          2bJZ6cXyhaN5x3Q4DzACFYAgs2dUXR2P30prSifzG7A=
Subject key identifier:   FA:A0:32:1B:1F:B7:9D:92:FE:95:8A:91:E8:32:2E:1B:BB:DD:BE:21
Authority key identifier: C6:2D:7C:AC:1F:FB:2C:3F:BD:E2:84:62:5B:F1:AF:4C:6B:AE:6B:0E
Certificate issuer:       /CN=c62d7cac1ffb2c3fbde284625bf1af4c6bae6b0e
Certificate serial:       01A1DDCBD34058D855301B641D7DF6A68A2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.mft
Manifest number:          10A8
Signing time:             Sun 15 Nov 2026 06:01:24 +0000
Manifest this update:     Sun 15 Nov 2026 06:01:24 +0000
Manifest next update:     Mon 16 Nov 2026 06:01:24 +0000
Files and hashes:         1: __c87gyLaIGZdAuBNTC46QS9y5w.roa (hash: ccNqjFPrHrxCLGoPXUxUm0Eb2HIVJ7kl42J+9aTzGZg=)
                          2: lG6FMWT2cKO27fqSgyD7NwJGZic.roa (hash: 8vr9/y84LRaPCw3bPTcjeu/NXDEsRUvrX9EcTdM7j5g=)
                          3: xi18rB_7LD-94oRiW_GvTGuuaw4.crl (hash: sSLS9DK4GFyDUZD7briQUsmNxBGPLXhLKhhMJeu7hwE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:cb:d3:40:58:d8:55:30:1b:64:1d:7d:f6:a6:8a:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c62d7cac1ffb2c3fbde284625bf1af4c6bae6b0e
        Validity
            Not Before: Nov 15 06:01:24 2026 GMT
            Not After : Nov 16 06:01:24 2026 GMT
        Subject: CN=faa0321b1fb79d92fe958a91e8322e1bbbddbe21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fb:65:3c:82:3e:e8:d3:a4:d5:78:d4:b0:f0:
                    d5:13:3b:a5:17:df:70:bf:0b:2d:a7:ef:fe:29:01:
                    3d:0e:43:94:22:9f:25:4c:44:e9:7c:86:0d:d8:0f:
                    ea:a9:a8:98:da:45:e6:7e:9f:59:75:02:56:be:52:
                    11:1b:10:a4:c1:55:7e:05:38:c5:2e:66:a6:be:c5:
                    6e:40:59:bc:d2:70:b4:1a:ee:c3:94:c3:c5:9c:b4:
                    54:15:66:1f:3c:46:51:37:75:81:9c:96:e5:65:32:
                    18:7e:71:14:fd:35:ad:48:05:19:88:01:c3:20:97:
                    7f:d5:45:ed:31:73:e7:d5:4d:5d:bb:ab:e9:83:10:
                    7d:94:6e:24:93:79:a8:3e:26:e1:2e:7c:00:9c:85:
                    18:37:5a:3e:ef:46:66:b6:34:e4:2c:72:4c:a3:93:
                    85:c3:03:e5:a9:f4:97:f2:39:1d:54:3d:01:e3:88:
                    5c:41:f8:d6:d7:01:ad:e8:75:3d:52:42:f6:d3:97:
                    4e:4e:9f:63:2e:e7:c5:67:d8:7a:0f:43:a3:7b:70:
                    a0:d2:0c:2a:32:84:a1:a5:2e:3d:9c:ad:ba:4d:b9:
                    d8:12:25:45:f0:d1:9c:fc:55:5a:57:c6:59:54:07:
                    d6:b5:b6:fb:89:7e:06:ae:24:32:e0:73:70:da:1f:
                    d2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A0:32:1B:1F:B7:9D:92:FE:95:8A:91:E8:32:2E:1B:BB:DD:BE:21
            X509v3 Authority Key Identifier:
                keyid:C6:2D:7C:AC:1F:FB:2C:3F:BD:E2:84:62:5B:F1:AF:4C:6B:AE:6B:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:5f:ff:1d:aa:0c:6e:60:64:a1:7c:41:b3:b5:4e:e1:23:ea:
         cd:91:4f:23:86:21:8a:aa:85:16:31:09:8d:4b:6b:71:9b:a2:
         5b:ab:bc:e7:b1:12:f9:b5:07:30:c2:66:74:c8:93:9f:75:b1:
         1c:f0:c1:ff:be:d8:5f:35:7c:09:a4:84:ac:5a:18:e0:1d:fb:
         2a:08:1a:99:77:7a:9d:c7:19:60:59:12:ef:aa:64:ea:a5:4f:
         c4:70:bb:a4:3c:5e:c9:22:5d:52:1a:17:3e:58:bf:1f:a6:75:
         9d:93:95:40:a5:fa:35:db:37:d7:d5:61:4b:da:4e:c0:02:b0:
         7b:24:28:e7:57:df:ec:67:0d:c8:45:63:1c:3f:65:8f:eb:b1:
         61:88:05:9a:5a:0e:ea:fb:70:70:49:ed:91:d6:7d:05:96:09:
         5c:96:dd:3b:17:14:37:37:92:46:a5:88:c4:f4:35:7d:4c:61:
         6d:e0:e9:24:b1:a9:37:32:e1:71:cc:2d:6d:9a:49:b0:9e:3d:
         a3:97:a3:dd:51:9f:bc:dd:7c:44:22:b2:d6:14:19:ca:c9:45:
         57:6c:38:de:9a:25:e4:c2:07:5b:64:d2:35:60:1f:c4:a4:59:
         a2:55:f2:c0:4d:08:40:c0:a4:71:9a:19:d5:48:1a:69:25:fd:
         ea:ce:ca:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:56:13 2026 by rpki-client