Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
File:                     vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft (raw, json)
Hash identifier:          WqLwW0o+kMBRZXrGyZ1iOX3MNjVs3DSgrNPndWHoGQE=
Subject key identifier:   C5:3A:EF:AF:1F:E4:A9:87:65:85:62:E1:5D:37:2C:53:E7:DF:22:69
Authority key identifier: BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
Certificate issuer:       /CN=becec531e5c37756b828663f9cc20ad6217713ac
Certificate serial:       01A1DB6FB43D75035C791F76661C1CA69B72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
Manifest number:          1425
Signing time:             Sat 14 Nov 2026 19:01:33 +0000
Manifest this update:     Sat 14 Nov 2026 19:01:33 +0000
Manifest next update:     Sun 15 Nov 2026 19:01:33 +0000
Files and hashes:         1: OTRSO5_pHSeulNj4xXvHd4-oZGw.roa (hash: GumSyhlt9WpNHRYRGiGvb9zCBM/7gwLeOV+M6h7PvAY=)
                          2: YFFevfcb0MJ_yPF5gFWuiYNPaqg.roa (hash: lHBaBK2XvWUWSJ/Pzslgj1K8IVs6D38UMIfHsQwv/ik=)
                          3: rti6tjnaJyfv_Ylmdsnl4AB3DYs.roa (hash: RksYRj9xScfDwNjU2z8C2o8FShcQoua9yZqEvSMWJ+M=)
                          4: vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl (hash: 3hgpQqWSd7QrR862Enupm67SPsQ8ngC5twSiyHqMTeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 19:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:6f:b4:3d:75:03:5c:79:1f:76:66:1c:1c:a6:9b:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=becec531e5c37756b828663f9cc20ad6217713ac
        Validity
            Not Before: Nov 14 19:01:33 2026 GMT
            Not After : Nov 15 19:01:33 2026 GMT
        Subject: CN=c53aefaf1fe4a987658562e15d372c53e7df2269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5a:21:11:de:a6:95:b3:11:64:3d:ef:14:6a:
                    79:01:30:1b:4e:53:69:d6:b4:e4:3a:2d:ba:27:de:
                    7d:7a:6a:ca:e6:ec:fd:52:a3:7d:bd:41:e9:c3:5a:
                    ea:72:43:a5:38:cb:8a:7e:b1:a0:e8:fb:f9:9a:e3:
                    8d:f1:e2:9d:13:56:67:15:7e:f1:1b:37:e2:69:1e:
                    0f:8d:c2:44:08:f4:c1:1f:76:6c:21:2e:e2:ed:89:
                    c7:42:26:00:8a:ce:0d:1d:36:f2:9f:5d:41:3d:20:
                    9a:ae:86:7f:f5:d8:3e:08:68:f2:6b:8a:10:d7:9c:
                    d1:d4:05:0f:b9:06:d1:b1:b0:b4:a4:b9:af:fe:37:
                    eb:87:2c:c7:9b:b3:e6:48:0d:2c:21:49:fe:13:6d:
                    44:9a:87:97:d1:38:73:32:b5:e0:b1:5a:aa:1b:1b:
                    f4:f0:0d:de:89:89:57:3c:55:ff:58:58:1c:73:b9:
                    12:0e:2f:e3:72:5a:4b:48:b4:7a:f2:05:ab:d7:cb:
                    9c:7e:58:12:ca:98:94:62:4c:61:99:20:26:fa:f7:
                    aa:6b:93:ca:bb:be:12:87:c8:d1:b3:3c:27:75:23:
                    f4:54:ad:35:15:5b:41:81:f0:be:6b:b9:b3:c2:2d:
                    7a:ad:80:e0:2c:5a:95:1b:23:e7:33:58:c8:40:33:
                    f7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:3A:EF:AF:1F:E4:A9:87:65:85:62:E1:5D:37:2C:53:E7:DF:22:69
            X509v3 Authority Key Identifier:
                keyid:BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:51:3a:44:d0:3d:98:c1:2b:85:57:97:94:7b:aa:ba:9f:f7:
         91:00:91:e7:c2:29:97:3f:7f:7a:c5:91:de:49:db:8c:02:2f:
         fa:d9:4b:9c:78:06:d7:1f:64:bb:51:51:be:94:c9:0e:e8:e2:
         ed:8b:ac:f6:7b:53:94:b1:3b:1e:d1:85:d6:d6:fc:b3:bb:78:
         ed:c2:f5:45:6a:c4:9d:55:f0:e6:dc:d5:16:89:ab:1c:0c:2a:
         01:30:8b:33:1d:cf:d7:0f:0f:a8:5c:b4:ef:2b:61:0e:2e:f4:
         69:a8:c4:c3:76:93:11:a4:57:4c:88:53:59:03:1e:d8:a8:79:
         5f:e1:9f:10:d6:9b:a9:c5:e3:5d:99:fb:4e:78:07:c9:94:b5:
         3f:2c:12:67:f5:e0:45:33:9b:19:89:23:cf:f5:e4:95:6c:c1:
         ac:cb:d5:26:7e:30:21:5b:6b:e7:9d:c9:e8:45:07:bb:e7:28:
         e4:75:e6:42:f8:ee:9c:1c:cc:f5:ab:22:23:63:03:9f:0b:d9:
         ba:b4:7a:c1:47:45:59:21:eb:8f:14:10:89:79:72:ee:9b:9e:
         16:3f:9f:b3:bc:57:46:8f:19:1c:f6:50:9c:37:f5:b0:ef:cf:
         f7:9c:d0:5e:cc:b5:fb:9c:51:d1:49:cc:43:7d:e9:c9:1b:b2:
         19:bd:a9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:54:03 2026 by rpki-client