Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
File:                     iBvRQCkk7CpkTo9U5plMtKyOJKY.mft (raw, json)
Hash identifier:          XFYy9NKi1Bz2TmWrU8P/Pm1bPoDlIcdUxiNYNwoYDJ4=
Subject key identifier:   A2:70:BF:9B:BE:B7:DE:5B:18:E4:C2:AA:44:66:6F:2B:59:52:B9:04
Authority key identifier: 88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6
Certificate issuer:       /CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6
Certificate serial:       01A1DD5DDBBB30E8625D4CB69123CA510A75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
Manifest number:          13BD
Signing time:             Sun 15 Nov 2026 04:01:18 +0000
Manifest this update:     Sun 15 Nov 2026 04:01:18 +0000
Manifest next update:     Mon 16 Nov 2026 04:01:18 +0000
Files and hashes:         1: 8mKhApHYp_839P6yQXD0oAwm2qo.roa (hash: dEUbCXMVw9xAIsh0W5Y8ji1NQ46062f5dJUppcXKzCY=)
                          2: C3xZ11UfhI0GeWTbExlimKS-cZs.roa (hash: xhykIG9PAX9cR5qhXwtefG/7lrssloObCNE0+5PnTIg=)
                          3: ZQHzJnKmGMmYQF_x6i-pgoB3otk.roa (hash: y+ugl+hZqb559F4FeCaZ0WayeCgZERvzHW8L8s5FBBo=)
                          4: iBvRQCkk7CpkTo9U5plMtKyOJKY.crl (hash: SYvXlZY2q9oCoJookb4jttNIMfi2l2S3mWDkvBE0ojc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 04:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:5d:db:bb:30:e8:62:5d:4c:b6:91:23:ca:51:0a:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6
        Validity
            Not Before: Nov 15 04:01:18 2026 GMT
            Not After : Nov 16 04:01:18 2026 GMT
        Subject: CN=a270bf9bbeb7de5b18e4c2aa44666f2b5952b904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:35:9d:04:5c:29:50:86:52:3d:97:c7:11:af:
                    ea:95:3a:7f:d3:94:cd:38:a1:b8:5a:a4:26:37:ee:
                    cb:4b:07:69:26:e5:ca:46:ce:8b:3b:38:2d:57:3c:
                    be:7e:97:d3:d4:03:cd:bc:bb:7c:68:6e:c8:6a:a3:
                    e1:62:e1:48:e9:97:04:e7:57:58:7e:a6:9f:38:66:
                    a7:7b:78:74:0b:37:5b:a4:0a:41:7f:78:f7:cd:d6:
                    a2:91:a5:94:16:1c:ec:0c:48:3f:08:8d:30:eb:a7:
                    7a:bf:33:66:55:3d:6a:0b:46:0c:4e:5a:34:5b:cf:
                    e8:67:13:7e:e6:ff:3b:8b:96:39:63:46:25:db:b9:
                    65:b0:2a:ce:4f:ac:be:06:0f:2f:ca:01:4f:8e:1b:
                    68:3f:6b:27:c6:f8:7b:73:9d:f3:d3:e1:75:cd:d1:
                    fd:2f:7f:1c:2c:37:ce:9b:ff:8a:33:4b:fe:a7:79:
                    d2:68:11:96:c5:0a:3b:96:f0:ee:a5:d6:e8:84:87:
                    ca:37:88:aa:a1:cb:dc:1f:99:08:69:17:c6:6f:78:
                    25:df:fc:4b:6d:e9:f5:7e:08:ad:0a:4c:49:77:0a:
                    a8:c0:f8:43:c8:ef:31:7f:6b:3f:46:61:6e:99:b7:
                    af:58:fc:0e:ad:ca:9e:c4:36:69:dc:9f:f9:28:99:
                    b6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:70:BF:9B:BE:B7:DE:5B:18:E4:C2:AA:44:66:6F:2B:59:52:B9:04
            X509v3 Authority Key Identifier:
                keyid:88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:96:31:39:02:c3:ec:3f:3f:05:b3:60:2d:64:2c:8d:8a:3d:
         70:64:75:5c:41:c4:c5:5b:45:0d:bf:62:f4:ce:0f:47:7f:0c:
         c7:bf:49:82:fd:17:9d:54:53:98:ce:3d:c9:a8:58:b6:e9:a4:
         ea:b7:f5:6f:61:91:49:a5:0f:a7:70:4c:a0:2e:a6:61:82:05:
         37:1b:f3:02:69:5d:9f:01:56:31:59:3e:29:95:36:e4:57:ef:
         6d:f7:f1:58:7d:6c:5f:53:7a:d6:ef:b6:0e:85:a2:09:ed:ec:
         84:e8:d0:ee:ae:45:18:47:d2:b3:50:58:38:5d:cf:d8:a2:bb:
         d3:cf:4d:d8:7a:5a:09:29:09:b6:b3:38:56:0b:f6:7f:8d:f6:
         5c:5b:e6:d8:6c:ee:97:b7:4b:51:b4:e4:81:79:e6:4e:68:7b:
         4f:e1:03:5b:e1:59:82:59:2e:e6:82:fa:06:54:ca:df:35:e0:
         bd:74:f8:c8:96:65:a4:a5:ae:b5:6f:b9:43:e9:6b:b2:01:22:
         a1:b5:81:eb:df:87:8c:89:d2:ad:f4:31:6b:e6:fb:d5:eb:ae:
         9f:73:c0:7f:85:cc:0a:49:52:ed:0f:ce:2a:ef:98:ba:ca:6b:
         01:f4:41:ad:ba:ce:c5:3e:5e:58:7f:da:10:7f:d2:3a:4c:18:
         ca:af:d6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:20:57 2026 by rpki-client