Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft
File:                     F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft (raw, json)
Hash identifier:          TysyLTeevWNSGQiuMFdrHgCZq1Veb7CmFe0oKOutOA0=
Subject key identifier:   B7:FA:68:B1:32:22:78:0F:A5:6D:C8:21:78:9F:85:DC:DF:72:E8:8B
Authority key identifier: 17:BB:D6:03:74:BC:23:ED:07:D0:1C:24:E7:CF:D9:17:8B:8F:ED:21
Certificate issuer:       /CN=17bbd60374bc23ed07d01c24e7cfd9178b8fed21
Certificate serial:       01A1DCEFC1836FC6F66B4E29A8E0BD5A658A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft
Manifest number:          0D71
Signing time:             Sun 15 Nov 2026 02:01:02 +0000
Manifest this update:     Sun 15 Nov 2026 02:01:02 +0000
Manifest next update:     Mon 16 Nov 2026 02:01:02 +0000
Files and hashes:         1: 1-2UtBiTjHsLQddCqGP3gVri-xW0.roa (hash: DJE2DUvAsy++YyvCOr1N7VjrxiOrJBdKXmpjw8gEGfk=)
                          2: 3Syacw0kA1-ynTLjhAFHVC60Ux8.roa (hash: U3SW2ZOoHktaoXakRfEn1+6KwZhVhuD7PQXG5yVZEPA=)
                          3: Esustr-nKce0GYWSsdcq1S7FWqk.roa (hash: 2zstjXpc+hHGR68Drzr0jQj4a47IKNLiUrHDnn0u3wk=)
                          4: F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl (hash: /wcXDspJYqUzGN6EXh+PhzIEPf+OhOF3sT0YH1gDqwo=)
                          5: GnkphrOjuxTcnLnVByZAmcLPCW8.roa (hash: JM+qW4wdjiqLdb+xSRmHLF9aUafcLcAwlui6gPABGZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 02:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dc:ef:c1:83:6f:c6:f6:6b:4e:29:a8:e0:bd:5a:65:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17bbd60374bc23ed07d01c24e7cfd9178b8fed21
        Validity
            Not Before: Nov 15 02:01:02 2026 GMT
            Not After : Nov 16 02:01:02 2026 GMT
        Subject: CN=b7fa68b13222780fa56dc821789f85dcdf72e88b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:92:ab:8c:9c:ab:26:1f:d0:cf:8e:ee:4d:88:
                    9a:52:d8:93:71:41:ab:26:0b:a0:02:77:df:11:18:
                    e3:71:14:3e:92:30:53:4b:65:b9:ce:f8:ce:8a:bf:
                    40:1a:2a:b2:0d:68:15:bb:2d:94:b9:71:2f:86:89:
                    5c:43:29:93:9c:ef:74:9c:d2:6b:46:ba:f7:58:10:
                    d9:5e:8e:d1:74:24:48:59:01:44:56:12:af:16:97:
                    dd:3d:71:ed:90:23:d0:f7:76:26:f9:f7:ee:3f:e0:
                    6f:bb:5f:25:24:18:b8:e8:1c:ef:f9:8d:0f:9c:8d:
                    f6:f0:44:1f:94:51:fe:9e:77:12:23:2c:1f:f7:10:
                    69:c5:3d:da:30:34:7f:65:32:9d:56:41:b5:a6:e1:
                    fa:63:f2:ea:c2:74:7f:e4:34:0d:35:46:c3:0c:ab:
                    20:07:b9:38:c7:a9:7d:80:c9:b0:f5:c1:07:82:83:
                    fa:61:7e:b2:67:38:d2:42:2b:e8:df:9d:b8:4d:cb:
                    a6:a6:d8:31:72:60:0b:dc:f5:80:11:d9:6d:a4:0d:
                    8b:d2:6d:de:e7:f9:62:4c:6b:8e:37:44:78:9b:cf:
                    0a:63:8b:08:04:73:3b:9e:6b:af:88:06:be:ec:38:
                    06:24:be:cf:26:2c:58:98:c7:8c:ea:9e:fb:17:19:
                    fc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:FA:68:B1:32:22:78:0F:A5:6D:C8:21:78:9F:85:DC:DF:72:E8:8B
            X509v3 Authority Key Identifier:
                keyid:17:BB:D6:03:74:BC:23:ED:07:D0:1C:24:E7:CF:D9:17:8B:8F:ED:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:5c:15:23:c3:16:25:d3:90:ec:b6:5f:95:e7:24:16:bd:6c:
         d6:4d:5a:64:76:d9:fa:44:94:d9:89:1d:90:ba:dc:77:f1:f1:
         ed:21:7f:4b:ab:bf:57:f6:cc:c8:ab:b3:4a:3e:9d:e3:72:49:
         36:b2:7d:b1:8c:f5:7c:22:cc:30:27:84:9a:0b:07:ef:aa:75:
         4d:3e:9b:b1:e3:89:c1:1d:61:5e:2b:af:49:15:1e:69:e3:4a:
         41:4e:eb:c2:53:33:8d:d3:7f:f5:5a:6b:d9:53:97:da:33:e2:
         60:1a:c4:f4:09:16:16:9e:1b:c6:8f:23:48:d1:fd:1a:a1:36:
         0f:4a:68:e5:63:94:3f:7e:85:be:0e:4a:51:a4:da:0d:e6:52:
         08:11:33:ef:57:fc:3d:88:58:73:fa:b0:06:d4:49:46:51:36:
         c1:c1:96:11:7a:a6:eb:aa:19:42:30:a3:b3:db:b8:05:99:81:
         79:61:2c:d2:06:f6:8c:d6:11:64:08:c9:3b:ff:39:d5:8b:d7:
         e1:4c:fa:9b:f8:6c:2a:1c:f6:0a:92:bd:40:53:96:e2:c9:51:
         e7:b0:44:39:1f:1d:19:a5:7c:2b:e2:82:5a:d7:6c:29:e9:8a:
         5b:06:bd:1a:43:70:0f:33:82:8b:80:09:17:f5:5f:f6:b2:1e:
         4f:2e:66:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:34:58 2026 by rpki-client