Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
File:                     sHplogTjx5n7GDuevkc2L6fP6MQ.mft (raw, json)
Hash identifier:          nGpUZPr63Iig9h3Px91Gtw98kSPXPo/C7uHlyzrmMX0=
Subject key identifier:   E9:85:09:B1:4C:5A:8A:8A:BB:02:2B:55:AD:83:FB:A3:52:A6:16:C6
Authority key identifier: B0:7A:65:A2:04:E3:C7:99:FB:18:3B:9E:BE:47:36:2F:A7:CF:E8:C4
Certificate issuer:       /CN=b07a65a204e3c799fb183b9ebe47362fa7cfe8c4
Certificate serial:       01A1DB385C96939CA94C95FCF3C5B2D516C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
Manifest number:          053C
Signing time:             Sat 14 Nov 2026 18:01:06 +0000
Manifest this update:     Sat 14 Nov 2026 18:01:06 +0000
Manifest next update:     Sun 15 Nov 2026 18:01:06 +0000
Files and hashes:         1: sHplogTjx5n7GDuevkc2L6fP6MQ.crl (hash: Onj08HqsfLrd+dfyZnijZoXVSHnjX2S0nMwZ/AdMxMs=)
                          2: tq8f01ARQEUsEl7noRAgINDzWjo.roa (hash: xcw1atTXhZ541jIny6BlvX9vowxrvPRi1s85cLABOpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 18:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:38:5c:96:93:9c:a9:4c:95:fc:f3:c5:b2:d5:16:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b07a65a204e3c799fb183b9ebe47362fa7cfe8c4
        Validity
            Not Before: Nov 14 18:01:06 2026 GMT
            Not After : Nov 15 18:01:06 2026 GMT
        Subject: CN=e98509b14c5a8a8abb022b55ad83fba352a616c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c5:3e:e5:42:52:a4:e3:6a:75:f4:40:fb:00:
                    c1:aa:e0:ce:ab:97:d8:ac:e4:bc:10:65:1f:a8:4b:
                    56:f8:72:94:90:f2:2d:a9:fe:ad:57:c1:dd:5a:fd:
                    4b:29:59:15:86:7f:21:e2:e3:86:e9:bd:fa:5e:db:
                    62:62:a0:97:48:c9:5f:f1:f8:07:f8:6b:b4:3e:14:
                    34:e6:54:40:89:96:d1:47:62:80:f5:01:53:8e:43:
                    fc:91:bc:f9:91:36:b1:a7:1e:e7:5a:05:46:d3:ee:
                    68:81:0e:f8:9a:43:45:3b:57:29:c2:12:60:69:aa:
                    86:98:b6:58:d1:44:b3:6c:e4:54:47:fe:fa:c0:4b:
                    4a:7a:df:c5:dc:cb:cf:6b:1e:f2:4c:9b:75:12:ca:
                    57:1a:b5:f4:5f:46:70:3a:5b:f7:82:95:ff:40:58:
                    94:74:a4:d4:4a:d8:ef:f1:40:b9:5b:ef:09:bd:18:
                    80:36:76:4f:68:e2:7e:05:26:cd:98:e4:8b:d2:9a:
                    36:91:3e:d6:7f:bd:7e:b3:35:2d:70:ff:c8:ca:62:
                    30:c3:c4:41:49:e9:df:90:43:53:2a:06:59:e0:20:
                    ec:0d:30:58:c0:5f:aa:0e:2c:2f:13:6d:ad:27:35:
                    9e:d9:1d:f1:ad:0d:4e:7d:3b:6b:4b:92:31:11:58:
                    6e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:85:09:B1:4C:5A:8A:8A:BB:02:2B:55:AD:83:FB:A3:52:A6:16:C6
            X509v3 Authority Key Identifier:
                keyid:B0:7A:65:A2:04:E3:C7:99:FB:18:3B:9E:BE:47:36:2F:A7:CF:E8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:d3:09:8c:25:cd:a4:fe:df:6e:c4:87:f4:1d:c4:09:a6:70:
         cf:12:42:ae:c0:f8:70:a0:11:c6:2d:73:e0:e9:c8:e0:e4:d6:
         b4:43:37:dc:62:fb:40:7d:43:99:78:94:94:8f:83:03:53:92:
         9b:48:5d:4a:58:aa:32:da:93:4a:78:f0:b9:8d:e4:e7:28:07:
         61:72:5a:c0:3a:d8:9d:9e:3e:6f:1f:33:f4:1b:d9:fd:22:78:
         3c:1a:68:7e:3e:81:0b:b6:1e:1d:2c:e2:33:93:55:b7:a6:68:
         b2:0a:3d:8c:01:5b:4b:6d:1e:5b:de:68:d9:4a:d5:b3:53:38:
         78:1a:ec:00:90:aa:d0:89:53:e2:3e:c3:00:46:e6:07:85:8e:
         32:03:ad:7d:c1:c3:5b:84:f3:67:ac:0c:47:3b:fe:c2:50:71:
         60:34:5c:98:d5:86:2e:80:21:b9:a3:21:04:0b:57:9a:8c:7e:
         b9:57:2d:08:b0:9d:3b:a3:61:15:68:8a:cb:62:62:4e:83:db:
         c0:ec:b7:c6:e2:77:fc:3c:11:48:43:47:d2:82:93:93:3c:e9:
         eb:a9:be:60:86:e6:47:7b:da:7f:6e:04:a5:f7:5f:05:9c:4a:
         43:88:db:ab:66:c3:5b:59:d6:be:81:8d:69:1c:57:aa:ad:db:
         4e:c7:e9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:05:47 2026 by rpki-client