Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
File:                     maLC7PWMRLNaDaKVf_TcouYLaGo.mft (raw, json)
Hash identifier:          p4V6WmHRplN2xzR3bUi5KxovyKMOG8E7dAxZ4DTZ/6k=
Subject key identifier:   0B:17:4B:99:2C:54:B9:E6:7A:91:2B:1D:AA:C3:39:7C:E7:99:35:B1
Authority key identifier: 99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
Certificate issuer:       /CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Certificate serial:       01A1DDCBCCC6A533089AFF83C064E36AC5C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
Manifest number:          1B01
Signing time:             Sun 15 Nov 2026 06:01:23 +0000
Manifest this update:     Sun 15 Nov 2026 06:01:23 +0000
Manifest next update:     Mon 16 Nov 2026 06:01:23 +0000
Files and hashes:         1: CQ22INHNBj4XjlCUrI5XIygZ-R0.roa (hash: XIhPQfL8JPX1XhK5bY8YDY2+uw01ecHaNFfLz05TOJ0=)
                          2: KJY5nxCnM8VflNqrt-fuQ6cuQes.roa (hash: CD+3ziwBgnP7/0qdqqYvm343nyyRQZA21pgLWpHPvXc=)
                          3: lnG5zaZt-7xO_hAn8wuZTfTqkgM.roa (hash: AlDx5dd5qCfr7Hi5X2lV2/K6+UMvJudIe04xWsHdrCg=)
                          4: maLC7PWMRLNaDaKVf_TcouYLaGo.crl (hash: GYZyqu/K7Ly4ykx4IgwoMEzDYV/vb2X94cGwmKK+KSQ=)
                          5: pgw_vXBhOHyYYmolPmheFOInOlo.roa (hash: FBhZNS8WeqSQq7ASqmhTPAh4HzJGXnwv4pIHLO19zl4=)
                          6: vcqIh9RGrfqsmlHa25tlLbDVTfk.roa (hash: 8nj2WBXLZRsVEzQqCt+NovapA3YHbN5awEImncwyZTU=)
                          7: x1x-cyI_biGTaUkZngKWx4DjWCs.roa (hash: aGX6ptYmiAeod9VDsNlQzerfO//pVNDw6U3vNGlEKjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:cb:cc:c6:a5:33:08:9a:ff:83:c0:64:e3:6a:c5:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
        Validity
            Not Before: Nov 15 06:01:23 2026 GMT
            Not After : Nov 16 06:01:23 2026 GMT
        Subject: CN=0b174b992c54b9e67a912b1daac3397ce79935b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8d:e0:93:2b:bb:f5:38:5c:68:9a:39:57:e2:
                    3b:bb:e6:f4:80:55:90:ce:1c:a0:4d:8c:f2:eb:db:
                    ca:95:df:70:c5:1a:a0:cc:f7:2c:28:d2:0f:0b:cd:
                    8a:2d:46:1e:cc:80:65:db:01:c1:fb:c1:91:62:d6:
                    be:49:70:69:02:f6:cb:f6:51:62:9e:31:9a:aa:19:
                    40:07:7e:61:c5:03:c4:70:fa:81:5e:bc:e8:d7:50:
                    7d:96:7f:2f:9b:8e:49:1f:bf:c4:96:4e:29:2f:d5:
                    ec:2a:0e:68:a8:9e:69:57:ff:92:33:27:35:60:b8:
                    1c:0c:4c:39:37:a9:f8:76:29:9b:5d:aa:f1:dd:54:
                    e1:b4:74:12:5d:79:72:98:4d:67:1b:f2:cb:ff:06:
                    13:53:ea:fe:e5:40:9a:2b:1a:28:01:f7:e1:00:ea:
                    ed:46:58:35:1a:99:d8:58:b1:93:1d:d4:12:7c:a0:
                    e4:6d:03:fa:c4:c4:0a:82:54:c7:18:7f:43:31:57:
                    16:93:16:e9:84:e2:78:57:71:a2:10:cf:61:bd:78:
                    a4:ad:1d:54:91:b2:3a:60:41:88:1f:a5:f7:3b:ff:
                    65:0a:17:bd:b6:43:72:16:03:8c:fb:3a:4a:87:f6:
                    5d:8f:fb:da:ee:0e:32:50:47:72:53:e8:ee:86:cd:
                    0f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:17:4B:99:2C:54:B9:E6:7A:91:2B:1D:AA:C3:39:7C:E7:99:35:B1
            X509v3 Authority Key Identifier:
                keyid:99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:39:a6:4a:19:b5:cf:13:6a:9d:67:c7:30:ca:57:d5:97:e7:
         39:f3:06:c8:1c:dd:83:c4:dc:8f:a2:26:d1:96:41:4a:88:40:
         06:8a:e1:4d:6f:3d:c8:63:69:9f:ed:56:d1:b0:ab:ea:a1:4b:
         d9:fb:55:af:95:45:c7:fc:bb:8a:1d:59:9f:29:d5:47:86:a1:
         e8:2b:68:35:63:5b:b5:e9:22:a0:fd:d4:fe:d8:f3:14:3f:aa:
         bd:9e:e3:c3:c8:46:f8:46:7c:08:01:36:7b:79:c2:db:2a:cc:
         f3:1c:18:64:ae:1f:16:31:5b:fb:51:77:f1:ca:0a:e7:e5:6d:
         9b:da:d3:53:94:91:e5:78:dd:a8:df:9c:6a:ac:bd:5e:2f:90:
         58:ff:a3:a6:6b:58:b8:37:1f:3b:da:af:32:7e:14:36:dc:c3:
         d1:d2:c1:d8:0d:88:f6:6d:03:c2:86:ce:15:5f:c2:0e:e3:c7:
         fd:2b:03:f8:1b:ab:92:ce:6a:ed:73:41:7f:0a:49:14:34:2f:
         79:99:ec:6a:78:e3:3c:b6:3b:21:01:92:41:d9:e8:c1:8f:94:
         77:3f:9d:f0:b1:1f:97:a5:08:13:d4:77:d1:5f:af:1a:9f:ca:
         f6:32:a9:15:b3:bd:e9:47:fe:45:05:09:d1:39:4b:75:f9:62:
         ec:28:3f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:57:13 2026 by rpki-client