Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft
File:                     o875PLessPtJuiiKeg-_JtMAT6U.mft (raw, json)
Hash identifier:          +TtQ08yn8pJ6K084OgSDxNZ67WOmqBdoKZLtVA1SzqI=
Subject key identifier:   58:3D:6B:0F:97:E4:A9:2B:92:91:32:00:20:C6:31:45:B8:44:8C:D6
Authority key identifier: A3:CE:F9:3C:B7:AC:B0:FB:49:BA:28:8A:7A:0F:BF:26:D3:00:4F:A5
Certificate issuer:       /CN=a3cef93cb7acb0fb49ba288a7a0fbf26d3004fa5
Certificate serial:       01A1DCF06F57813EF402CB4A8306F81F2FF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft
Manifest number:          0C60
Signing time:             Sun 15 Nov 2026 02:01:47 +0000
Manifest this update:     Sun 15 Nov 2026 02:01:47 +0000
Manifest next update:     Mon 16 Nov 2026 02:01:47 +0000
Files and hashes:         1: 5t3r-e7tyLlW84cUDqRXL5ROFSo.roa (hash: LjPlWorNn2ybzLX8+yX/V0IpzdHIQY94ZXTGvGnunJ4=)
                          2: o875PLessPtJuiiKeg-_JtMAT6U.crl (hash: itRmglKq5PjNDU+y5RSmfv0ub3M2deyH93o0riSww7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 02:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dc:f0:6f:57:81:3e:f4:02:cb:4a:83:06:f8:1f:2f:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3cef93cb7acb0fb49ba288a7a0fbf26d3004fa5
        Validity
            Not Before: Nov 15 02:01:47 2026 GMT
            Not After : Nov 16 02:01:47 2026 GMT
        Subject: CN=583d6b0f97e4a92b9291320020c63145b8448cd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c2:30:31:ac:5e:96:84:29:b5:72:00:84:79:
                    30:6a:56:ed:c6:35:95:10:c9:a5:25:0d:6c:98:97:
                    62:db:43:06:4e:37:f8:cb:97:05:e5:99:15:f3:ef:
                    0e:d4:c7:27:cd:d4:86:0e:e7:f3:81:10:56:65:23:
                    74:d6:07:ff:c0:ed:26:40:d1:5e:31:69:8b:34:13:
                    c5:23:f7:c9:55:01:15:ee:19:28:75:a0:76:2d:81:
                    9d:97:5b:29:fc:6c:98:92:80:4a:b9:2b:16:78:91:
                    8a:62:45:94:99:7f:0f:cc:3c:bb:2a:27:7c:a5:72:
                    25:13:b3:e4:2f:cb:7e:11:b1:a5:36:61:49:83:09:
                    a7:3f:2f:80:9b:ea:1b:ea:7a:42:25:69:89:bf:fc:
                    a8:9c:2a:d1:6d:a4:fa:33:06:22:e8:66:ea:55:e9:
                    46:c4:c8:8c:0d:9a:31:1b:51:e3:ec:db:aa:ac:0f:
                    a5:ea:86:c1:f4:c7:14:ef:fa:96:31:53:7f:44:b6:
                    ec:00:b7:a2:44:38:1e:4c:f3:1b:63:4d:6d:29:e8:
                    95:e8:0d:83:be:1d:0e:c2:86:8e:10:4a:67:86:59:
                    3b:f9:74:73:31:d7:f0:ef:ec:1c:dc:9e:41:f7:f7:
                    ad:a9:d3:50:88:1e:24:80:5e:5c:93:6e:33:27:af:
                    0b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3D:6B:0F:97:E4:A9:2B:92:91:32:00:20:C6:31:45:B8:44:8C:D6
            X509v3 Authority Key Identifier:
                keyid:A3:CE:F9:3C:B7:AC:B0:FB:49:BA:28:8A:7A:0F:BF:26:D3:00:4F:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ce:24:a2:2b:e1:d3:71:cc:5e:30:f8:6c:2c:4f:e4:ae:dd:
         e5:3d:de:33:5b:ea:a8:b1:d3:7c:98:c8:82:79:1b:54:e8:fe:
         04:52:08:d4:32:3e:c8:c9:08:f1:c8:83:07:e7:4b:fc:ea:38:
         11:f7:09:8a:e4:6c:9e:3c:a1:64:4e:4f:7c:15:8c:1c:c3:59:
         e4:72:1d:40:92:e0:63:11:00:e4:f9:44:ea:67:73:06:1e:0d:
         d8:cc:e0:6e:8f:f3:c4:ea:6b:b1:cf:ee:39:d1:b9:39:ae:c2:
         71:ab:9f:a9:66:3a:cd:a2:e2:f9:70:d6:28:37:2a:69:f6:a2:
         c2:71:08:06:2d:48:ea:64:97:c2:43:c7:7c:bb:48:d7:7d:d6:
         0d:a1:e5:cb:0e:6f:28:b9:5c:8a:1c:0a:0a:fe:0d:4c:6f:d5:
         65:88:9d:dd:b5:e3:e3:96:d5:4c:ea:33:1c:96:8c:c0:08:a8:
         c0:1f:2b:6a:1e:aa:a9:9b:06:98:f0:05:68:f6:b5:8e:40:13:
         fc:d0:d4:e0:43:85:ab:64:21:67:24:f5:82:65:d3:98:48:54:
         12:7b:36:e8:c0:51:f2:20:49:83:67:f2:aa:4e:59:2b:e3:aa:
         80:93:01:9a:7e:96:34:4a:b4:87:5a:3e:7e:c2:58:85:56:d1:
         9d:e7:7b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:33:48 2026 by rpki-client