Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
File:                     IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft (raw, json)
Hash identifier:          Gnjx8v1tipkKdNsfKMKcSoUKWF8oukuyIISVfCWWxOc=
Subject key identifier:   00:51:EF:9B:7F:5F:36:11:F2:02:FB:D5:95:2B:9C:98:AA:65:6E:76
Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
Certificate issuer:       /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Certificate serial:       01A1DBDD4FC5683D44D064839758D30578B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
Manifest number:          1B55
Signing time:             Sat 14 Nov 2026 21:01:16 +0000
Manifest this update:     Sat 14 Nov 2026 21:01:16 +0000
Manifest next update:     Sun 15 Nov 2026 21:01:16 +0000
Files and hashes:         1: 06efRp_YLLMigOISh9p5zbfjQsU.roa (hash: wEc6I99DrGtZKsss8jbEP0QrNOCnTgf0xe2uQcvZ3B4=)
                          2: 907yoKciXNACwbzosQ9EdtEnzxE.roa (hash: xy6JOgAicMUUYBfqaL/uhSj/UHERrsePLpE/jODbSog=)
                          3: EDn6jQwDUb3_g3td9FsRuFag4vc.roa (hash: odWjY9IlQTpSIG4MhA9Jlqnd2G5ltLMnoOP98UOiafU=)
                          4: IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl (hash: CPpYSaC/1J5+D75rxXoGYMYHBDLWfC2h5rPTPPChZBg=)
                          5: YzlzcRhu-iD3ZDhfYDRmSdZddgQ.roa (hash: 753e9bkRX1Fsp5S+P9nf7VxsaR5WwPAEieFcCkQGZ4o=)
                          6: gtJ9_qnrLM6uoyEewoWSxKZMD2E.roa (hash: e/UmWjVQNlt0QB85gty4tqxfoWYbZ3kgYFWs7Ud3Mjs=)
                          7: ikgXwMpWPgQZc8FsPHVC_slVM18.roa (hash: SUfSLegrVe2t+HnXqp8P0ZG10H96D9fqhOh+KXCzXy0=)
                          8: xOkTZSLsa771caq28USEEIkXpes.roa (hash: NwIcfsi68DSP9V21cWD03wWREzD0An2kgwljZOmrIf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 21:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:dd:4f:c5:68:3d:44:d0:64:83:97:58:d3:05:78:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
        Validity
            Not Before: Nov 14 21:01:16 2026 GMT
            Not After : Nov 15 21:01:16 2026 GMT
        Subject: CN=0051ef9b7f5f3611f202fbd5952b9c98aa656e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ba:45:cf:3f:4b:7a:49:bf:b7:b5:f9:7f:68:
                    d2:73:74:d1:e7:73:d1:dc:81:54:f8:19:ba:cb:8a:
                    42:d1:e3:48:83:48:af:9f:94:3a:92:41:b7:f0:14:
                    f4:95:cd:a5:ea:84:5f:60:b0:a1:bc:1b:9d:db:56:
                    f4:84:7f:34:3b:7b:60:cb:83:76:7d:06:e1:c2:e1:
                    70:47:5e:ee:e9:bf:74:46:35:d7:c9:f1:c5:8e:4e:
                    b7:e4:f0:91:d8:f2:e1:19:78:57:6a:44:d7:38:28:
                    ba:e8:8c:83:09:e6:6d:c9:c3:19:f2:fd:13:13:d6:
                    e6:5d:2e:e8:59:d0:3f:d0:69:d5:94:c7:de:9d:27:
                    60:e7:3f:2a:9e:6c:fc:7d:d0:11:74:dd:32:3e:0f:
                    e1:30:db:a6:08:c8:b2:b7:04:38:da:d8:5f:0b:b0:
                    e2:b6:25:51:58:e0:54:7d:8d:64:1f:49:cb:af:6f:
                    53:2c:63:3c:62:b8:0f:ac:6e:4b:6d:23:14:f6:4d:
                    89:ee:ee:b2:f8:f6:e4:78:05:a1:60:59:f5:29:75:
                    e1:38:62:08:b0:b4:33:a4:78:61:d8:fa:f0:80:71:
                    9a:31:b1:26:55:57:de:c0:24:31:22:4a:28:db:a5:
                    37:b1:ef:1c:f3:5c:70:2c:4f:c1:9c:07:87:47:08:
                    9a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:51:EF:9B:7F:5F:36:11:F2:02:FB:D5:95:2B:9C:98:AA:65:6E:76
            X509v3 Authority Key Identifier:
                keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:f4:55:35:36:30:a8:5e:a1:22:1a:df:ae:21:0e:dc:e3:c7:
         1e:a8:9e:db:4b:aa:ec:e3:af:34:44:b7:10:1b:1a:35:67:7a:
         e9:a4:ce:94:d1:1a:db:cf:b0:4b:a5:3e:9e:18:d8:fb:a4:ee:
         71:17:93:17:15:79:43:6c:ea:67:31:6f:27:6f:6a:5d:f7:87:
         a4:58:f1:08:9a:11:26:ba:0b:6c:f0:5d:35:f3:bf:a0:ab:fd:
         30:bd:b3:56:fe:1c:36:10:2e:ba:6a:02:f4:e1:b2:7c:f3:9a:
         45:7c:56:c7:4b:1c:d8:b6:05:4a:84:54:03:f4:cc:9b:56:20:
         1b:8b:08:da:98:3e:33:3b:19:1f:be:a4:50:65:42:fb:4e:1a:
         97:d9:25:c6:d2:7a:24:44:dd:06:68:9c:bc:37:00:d3:3c:3e:
         11:04:97:bc:26:2a:ec:10:bb:2f:56:39:24:f3:39:df:63:d0:
         9f:b8:f5:d9:34:0d:eb:92:dd:a2:fd:89:3a:15:2f:6d:99:5c:
         c7:dc:fc:4d:74:2f:6a:67:b8:a9:12:fb:04:5b:92:a0:6e:ee:
         57:3d:8e:6f:58:f8:c0:43:cf:33:03:a9:1c:47:6d:5d:91:0b:
         3e:01:16:7a:6a:48:06:50:b5:68:3b:8a:54:22:92:54:8f:83:
         d2:24:ae:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:11:15 2026 by rpki-client