Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
File:                     01CzV9ze5o--vcVVPbMknG6Clsc.mft (raw, json)
Hash identifier:          dk6Oe99rP8FQphuR2GAV5870kWxVAK/nsiXV64Yscdo=
Subject key identifier:   02:06:F8:DC:A4:39:77:03:76:44:35:EC:C0:79:49:FC:D8:6B:7E:E9
Authority key identifier: D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7
Certificate issuer:       /CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
Certificate serial:       01A1DE394F3A61FA88D89BF40F35BF2C1E55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
Manifest number:          0A01
Signing time:             Sun 15 Nov 2026 08:00:59 +0000
Manifest this update:     Sun 15 Nov 2026 08:00:59 +0000
Manifest next update:     Mon 16 Nov 2026 08:00:59 +0000
Files and hashes:         1: 01CzV9ze5o--vcVVPbMknG6Clsc.crl (hash: NW4IK3xEo/SZe9fASEZyvVlh/uSPniBSzFuKoWsVTKs=)
                          2: 4VA7wZJaiHWG2GAPtA5u1BDcn4I.roa (hash: PqJvEzmh32UVxsDr7waFI7G4gmqJkPLZ5CaOrNIefv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:39:4f:3a:61:fa:88:d8:9b:f4:0f:35:bf:2c:1e:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
        Validity
            Not Before: Nov 15 08:00:59 2026 GMT
            Not After : Nov 16 08:00:59 2026 GMT
        Subject: CN=0206f8dca4397703764435ecc07949fcd86b7ee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5b:86:3b:f6:d9:7c:cc:38:01:4f:b3:7d:74:
                    80:2a:f0:07:b8:39:96:6f:6f:c0:98:ed:80:02:6c:
                    29:ed:5a:64:c9:0e:3e:53:37:f6:ee:5b:9b:3f:8f:
                    61:86:35:0f:27:79:82:2c:f5:bb:e0:4f:a8:fa:e4:
                    12:99:d2:5b:8c:69:cb:02:2a:82:91:42:83:0e:26:
                    f1:9e:7a:29:90:32:52:f4:ca:01:f7:71:9f:84:82:
                    32:86:52:0e:61:97:ba:97:99:ee:bc:ca:2d:07:d6:
                    f3:81:72:be:32:b6:a9:f8:4e:5e:37:f1:f7:09:54:
                    d2:e5:45:11:38:a7:da:7f:ef:04:29:97:17:af:4f:
                    b7:ad:d6:ca:49:9e:9a:3b:be:7f:ae:0d:44:19:e3:
                    fa:f7:53:6b:80:5b:5d:7b:48:94:67:41:3a:56:61:
                    93:9b:42:1e:34:79:e5:97:8e:3b:52:f5:9d:dd:23:
                    f0:5a:23:29:65:1e:fb:20:2c:05:d4:3c:74:bb:a3:
                    32:a5:8a:b0:e9:84:65:70:da:d7:c5:ef:59:f1:b8:
                    56:04:78:76:b7:95:a7:1f:c6:5f:b8:74:b1:c7:b4:
                    f8:22:e3:53:80:36:66:87:de:8b:ef:b9:31:a4:45:
                    13:9b:41:00:4b:37:22:7b:81:4c:ac:96:b5:d1:98:
                    6e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:06:F8:DC:A4:39:77:03:76:44:35:EC:C0:79:49:FC:D8:6B:7E:E9
            X509v3 Authority Key Identifier:
                keyid:D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:a4:ed:f4:7f:c9:bb:d1:c7:65:e7:01:68:52:0b:d4:9c:a5:
         f8:36:e8:a9:fe:56:28:75:81:5b:32:60:a4:11:7e:3b:67:a7:
         86:81:0c:6f:ef:c9:93:56:df:5b:e1:81:03:e1:d3:26:c0:7f:
         1a:2c:82:02:1b:5a:a6:8a:11:c8:e2:86:7a:f2:8d:9a:05:1f:
         44:07:10:f5:86:2b:4e:6a:e2:fd:b7:72:a5:70:11:c6:51:d3:
         d1:ee:a1:2e:28:6b:c0:29:c8:b6:66:e6:eb:01:d0:cd:39:d3:
         04:c1:96:66:fd:f6:ad:4e:90:fb:b7:19:c2:30:e4:8c:20:84:
         f9:c5:da:75:da:24:ff:f1:42:1f:5d:ff:ea:fa:f7:a4:33:3f:
         29:20:3d:fa:de:33:5a:80:2a:37:f0:d0:db:dd:44:63:7b:17:
         64:8f:b0:b4:fc:29:4f:b2:25:aa:56:5d:43:40:ed:67:59:6c:
         c8:58:8f:e0:d9:4b:1a:41:9f:16:3d:16:bb:bb:c1:65:74:c5:
         09:40:f1:4f:cf:87:94:7c:6a:63:4f:e2:bf:a5:0e:cf:d3:8b:
         34:c4:5b:af:3c:02:12:e7:dd:64:36:f2:c9:74:88:7d:77:cd:
         a8:43:b8:98:b1:5a:f7:61:f7:f2:0b:74:49:42:5c:39:31:84:
         4e:e3:3e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:40:22 2026 by rpki-client