Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ijndHRPq-YwAdGPZWosv_eojbOM.mft
File:                     ijndHRPq-YwAdGPZWosv_eojbOM.mft (raw, json)
Hash identifier:          FByBwZPHwMLkanHiuFsQVdhK+yB1ukInNTrnR1A/cFg=
Subject key identifier:   4C:C5:2A:41:DC:CD:1B:E8:29:81:48:D3:8E:2E:1F:3E:58:B7:19:5E
Authority key identifier: 8A:39:DD:1D:13:EA:F9:8C:00:74:63:D9:5A:8B:2F:FD:EA:23:6C:E3
Certificate issuer:       /CN=8a39dd1d13eaf98c007463d95a8b2ffdea236ce3
Certificate serial:       01A1DBA68EE9BE098ED8A279B5551ABD5985
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ijndHRPq-YwAdGPZWosv_eojbOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ijndHRPq-YwAdGPZWosv_eojbOM.mft
Manifest number:          0171
Signing time:             Sat 14 Nov 2026 20:01:28 +0000
Manifest this update:     Sat 14 Nov 2026 20:01:28 +0000
Manifest next update:     Sun 15 Nov 2026 20:01:28 +0000
Files and hashes:         1: 6rv05GtLZsXL9J9Y6iVnWISfLLc.roa (hash: GAnhNVg8nqzeI7Ci7ArjFVVwDPu5FHycG1EQRRYdOSs=)
                          2: FdICOUOUZECuZrYTF0rlnSSQfSg.roa (hash: UxVhHcCRrdLBmXzhpiCm6r/fpPjHyB3h0v03x9mBzNo=)
                          3: _2bBQtFU643Ua_XDUBQXnI5_hL0.roa (hash: o1RrXnEGdNnf+Cc7zxGHA3KTxxkiPiJd3UQspAymEfg=)
                          4: ijndHRPq-YwAdGPZWosv_eojbOM.crl (hash: n0xCwuzStFPrlIyU8ovEGlN77SwGhyluB/GPQ36VSDQ=)
                          5: qEVDrxw8lXCl8aRODSA_1SPziJA.roa (hash: Q8I9Y/Qx/205GtVMmvPcisKl71EAafMgAUaQkhvO3XY=)
                          6: w5AS2KGdDReJzcd8Ht55gZO1pE4.roa (hash: ytd5KWe3NLPZnEwsv+SGbVXQdd/O7rHivZ3d1JF1Ww0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ijndHRPq-YwAdGPZWosv_eojbOM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ijndHRPq-YwAdGPZWosv_eojbOM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ijndHRPq-YwAdGPZWosv_eojbOM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 20:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:a6:8e:e9:be:09:8e:d8:a2:79:b5:55:1a:bd:59:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a39dd1d13eaf98c007463d95a8b2ffdea236ce3
        Validity
            Not Before: Nov 14 20:01:28 2026 GMT
            Not After : Nov 15 20:01:28 2026 GMT
        Subject: CN=4cc52a41dccd1be8298148d38e2e1f3e58b7195e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:07:79:05:f2:86:f0:77:48:58:42:23:b4:54:
                    ad:4a:ed:3b:d1:e9:b8:97:c8:14:63:ac:c2:15:2c:
                    e8:35:f6:cc:dd:ad:40:b7:ea:3b:44:af:57:0f:b7:
                    6a:d2:6f:a1:4d:63:85:4c:eb:f6:03:85:78:ad:4b:
                    4a:5d:b0:25:2f:dd:c0:34:fe:b3:a0:df:4e:af:15:
                    ce:23:5b:6d:ed:07:df:a6:1e:1a:a5:8e:4c:de:6d:
                    2f:69:bb:ee:6e:3f:a6:a7:43:bc:11:89:4c:f0:b4:
                    2e:45:8a:c1:51:5b:e4:9d:2d:f6:7a:b4:de:4a:65:
                    bf:95:76:c9:ac:d9:c8:91:2f:53:6a:40:5d:49:0a:
                    0a:e3:d1:89:3a:3f:4c:dd:e9:eb:5c:86:61:3c:a0:
                    af:49:97:ae:48:51:0c:94:b9:fa:b6:bd:b1:e3:9e:
                    de:97:ad:e2:d7:61:4f:26:31:b4:26:7b:11:5b:cc:
                    ff:a4:59:08:0d:ff:31:1f:6d:e8:a8:8c:5f:07:7f:
                    de:5a:03:36:71:c3:b1:99:4c:2b:a3:b2:a1:19:65:
                    7f:3c:39:3f:4e:5c:cf:02:0b:4c:2f:52:d4:19:11:
                    fc:56:2f:3a:1e:af:29:07:3f:13:a2:f8:c3:66:29:
                    0d:84:6f:46:b0:b3:c9:53:fe:63:b2:24:b4:f3:da:
                    84:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C5:2A:41:DC:CD:1B:E8:29:81:48:D3:8E:2E:1F:3E:58:B7:19:5E
            X509v3 Authority Key Identifier:
                keyid:8A:39:DD:1D:13:EA:F9:8C:00:74:63:D9:5A:8B:2F:FD:EA:23:6C:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijndHRPq-YwAdGPZWosv_eojbOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ijndHRPq-YwAdGPZWosv_eojbOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ijndHRPq-YwAdGPZWosv_eojbOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:61:2d:e3:c1:45:a4:35:05:65:a1:15:79:07:d9:aa:19:b3:
         75:bd:0a:10:73:0c:b2:70:8f:99:1b:74:ec:1b:1b:e6:28:44:
         41:cf:ee:5b:63:3b:7e:5f:22:5f:45:7b:34:78:c9:b9:38:57:
         74:2a:38:d7:c0:55:ae:d4:cd:57:72:03:13:57:ef:4a:19:b5:
         6f:fb:ff:e3:51:b7:87:81:8d:e4:8f:39:23:9e:a2:c7:fb:fc:
         ec:c1:e1:7c:ff:af:9b:09:6e:ea:77:e4:22:5f:26:c2:3e:da:
         1c:f9:87:1c:f6:80:2b:6b:9e:71:cc:6d:2b:10:bd:43:19:e1:
         83:ef:45:b1:91:d1:34:34:7f:7d:45:d7:8f:e0:5b:50:eb:7b:
         50:8c:35:44:64:fa:cd:26:fb:73:1d:02:92:83:82:e4:fd:3c:
         8a:c5:d4:3a:46:24:c3:dd:41:c0:7e:00:09:1a:2d:27:60:18:
         ae:03:e1:1d:7d:57:de:e2:64:26:44:68:27:2e:c3:03:53:a8:
         09:27:9d:b5:a3:8f:f8:6c:06:ac:19:76:53:24:ff:48:fd:d1:
         b2:33:11:1b:20:5a:72:15:24:de:eb:dc:d8:b5:51:a8:54:51:
         ed:42:82:c8:81:5e:c8:7c:ab:a3:17:0c:45:34:d7:be:0e:98:
         06:57:de:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:53:11 2026 by rpki-client