Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
File:                     dVSsTH9FHFu5OC-81G1wxMD53lY.mft (raw, json)
Hash identifier:          98CbaJS8JATdv8Gfv7HjFjMzBfhmO5tKK7BiTXpzFKY=
Subject key identifier:   F1:A2:CB:36:30:9C:DF:F2:E4:D3:92:B3:A1:D9:A5:E9:8A:47:61:95
Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
Certificate issuer:       /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Certificate serial:       01A1C21CB658469FFC08BE41115B72DAC9E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
Manifest number:          1B00
Signing time:             Mon 09 Nov 2026 21:00:23 +0000
Manifest this update:     Mon 09 Nov 2026 21:00:23 +0000
Manifest next update:     Tue 10 Nov 2026 21:00:23 +0000
Files and hashes:         1: 1A0OgYXG3iVS7dYyDn-eVIhO8eM.roa (hash: FrUEKKMZAguXIpXWScc68qO/IKUabeFzGLn6njmAiyg=)
                          2: 8dKEBvqW0GYmkZiIWQJZSYQLqLU.roa (hash: kjvVcc0xOxJUg+x1ocm3gLplTcfZBpQ+nllVK3oSP4I=)
                          3: BYRF65R_gvTrOamV1sFiMyQQwwo.roa (hash: UcJdHpYQj1TR2O2eeL78WCxx+T3hnx4QNGLSHOCWD40=)
                          4: Clokdo8iEnkyRg1-72rcFdu0uTM.roa (hash: qI/NxfPHzKCTkxa3q3ZgfCGrWFBeBUVuUQo7H3Os6L4=)
                          5: IULcSReBl6BR3I_U3liy7HZAnac.roa (hash: 8rcQZaYhRzic9A6LKK6K6/YTQNKz/3wSmuzt2vfN2vM=)
                          6: X5-PcFCXcBmeXFytRndx1GWZR6M.roa (hash: CusHkyVTE5E1hf9Dcr6iJxa9rL7UUSerxewweRWup5Q=)
                          7: cpXyEOPsQYnhoiU9YXgEHRotygE.roa (hash: 1cwR9tQfEOIHfGITqs8rBDCiCASn32+xpW4m0FX9NNo=)
                          8: d7PUDxLVlQHb2Dc0NDQzVZOes0E.roa (hash: bMQ8wqEnr9dnX2pC6dva+/kVC86AP2FCZzjDGc+wVkw=)
                          9: dVSsTH9FHFu5OC-81G1wxMD53lY.crl (hash: 3aZtk7GF0SfU2M/bSs8GUAtWUmI72rFoG3JMh6U6PbA=)
                          10: nZHqQhlAUfpi-xyQQIlLnT_5zVY.roa (hash: pyPCsxzb7EcyMnd9eFCWZ2gNgE3Dkb4SSpOIKliViJ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Nov 2026 21:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:c2:1c:b6:58:46:9f:fc:08:be:41:11:5b:72:da:c9:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
        Validity
            Not Before: Nov  9 21:00:23 2026 GMT
            Not After : Nov 10 21:00:23 2026 GMT
        Subject: CN=f1a2cb36309cdff2e4d392b3a1d9a5e98a476195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:71:0c:20:dc:7e:05:dd:35:a0:3e:59:4a:c5:
                    00:43:77:0c:b5:15:bd:d4:c4:d6:49:44:17:74:81:
                    8f:0b:c0:58:83:43:d7:4d:b6:44:ec:c7:c3:f2:17:
                    d3:9a:9d:1b:63:b2:5c:68:25:6f:ba:3d:66:e4:bb:
                    15:06:64:ea:7b:96:ee:4a:25:36:14:79:a2:b3:9c:
                    55:4d:7c:2e:32:cb:a2:6a:fc:de:54:78:0b:bf:e6:
                    56:28:33:be:5e:99:e4:de:34:03:84:8e:37:70:96:
                    d1:76:4e:e8:a4:76:f6:e2:b3:f6:d4:54:f3:0a:7d:
                    6d:e9:47:60:a6:e9:17:38:53:cf:9e:de:d2:e8:ea:
                    c5:30:98:88:aa:3e:bd:b8:7b:69:b7:af:31:99:66:
                    15:82:76:de:86:15:61:1d:79:14:6e:2a:ab:d8:15:
                    d4:05:5c:4e:98:71:1a:9f:e6:64:04:57:01:0a:f0:
                    b5:df:b0:53:58:77:dc:56:91:b4:84:8a:7c:ed:53:
                    0a:f8:c6:6a:d5:0c:50:ff:1d:d8:e6:1a:95:80:06:
                    16:e5:cf:1d:90:9e:c1:de:26:95:cc:ef:53:3b:4a:
                    f1:17:99:ba:d8:39:df:83:07:5a:5c:f9:e0:b6:71:
                    35:28:04:96:15:bb:1b:16:4a:ed:6c:81:20:ae:24:
                    28:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A2:CB:36:30:9C:DF:F2:E4:D3:92:B3:A1:D9:A5:E9:8A:47:61:95
            X509v3 Authority Key Identifier:
                keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:d6:78:0d:f3:7c:84:49:2f:08:77:b4:90:c3:38:6f:28:11:
         34:04:84:7c:cc:2c:0e:87:e5:aa:55:53:f7:d7:6b:cd:18:e5:
         45:4b:fa:c4:67:15:99:2b:06:c0:82:9f:d5:5d:a2:34:38:cb:
         99:1d:9d:75:52:54:09:a1:3b:1d:05:17:b1:f2:d4:3a:07:0c:
         ad:4a:c2:23:ed:62:82:6e:b6:eb:af:37:b5:5b:59:f6:5d:80:
         c3:7f:88:a3:c5:b6:7f:33:39:fb:88:c4:ef:18:d5:2e:d7:ee:
         97:a0:92:8b:41:83:8a:21:3c:3a:23:a0:1c:98:8f:24:61:8e:
         d4:04:ea:35:88:2d:c6:81:12:ab:6d:84:d5:8b:bc:63:f4:50:
         ba:0c:e2:ca:3b:cd:0d:83:88:72:b9:99:95:16:6d:45:61:09:
         a4:7b:ae:2e:f3:93:e5:ba:bd:5e:c7:2f:78:f3:44:e3:fa:30:
         ac:f5:e6:ea:33:f9:4f:09:5a:b9:e3:4a:a6:c8:17:e7:99:fd:
         f8:c1:9f:a2:bb:01:77:7b:fb:22:17:d2:83:38:2c:11:04:dd:
         ad:63:53:3c:f0:12:89:00:21:c5:39:8a:16:02:b9:b5:6b:44:
         c4:7b:15:3e:cf:a0:9e:fa:4d:03:38:8b:7d:b1:64:79:ba:ac:
         06:2a:07:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 06:19:28 2026 by rpki-client