Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
File:                     edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft (raw, json)
Hash identifier:          qEHCOM+jrwN389H1VuYaDIhlfXKxJxYoOwaQCa/r7ow=
Subject key identifier:   9F:CA:CB:BC:1E:72:FC:A0:7A:5B:35:CC:33:41:B8:91:7F:E6:4C:AC
Authority key identifier: 79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
Certificate issuer:       /CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Certificate serial:       01A1A66FEA53828E3E0DC208DDFB6806ECA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
Manifest number:          11FF
Signing time:             Wed 04 Nov 2026 12:01:54 +0000
Manifest this update:     Wed 04 Nov 2026 12:01:54 +0000
Manifest next update:     Thu 05 Nov 2026 12:01:54 +0000
Files and hashes:         1: 8x6YocXhEAE4EUV764wUI2PKiKU.roa (hash: yeyp7+DYbQfuSd5MS8n2WSRAshm6pVInjHRluL8iOew=)
                          2: a_FCKCt6dnU7F2M3SMQI1J1wlrw.roa (hash: AtVF3QXcvO4VESZ6rn9J2bX+Ej+cAO1z0o2Qbw21J8E=)
                          3: edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl (hash: c55pLJZIFyx1OLGmV4E8UI4oNqgNaWpVVjER3PRdmw4=)
                          4: oG6E9ZToy7RTlQOkPq4zuV7XG0U.roa (hash: 2JYfuKBfp+nWk/czqBEKKIWfjScVuKeSQovGMXxQmwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 10:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:a6:6f:ea:53:82:8e:3e:0d:c2:08:dd:fb:68:06:ec:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d0d856764a3fee64be14f0a49f59a6865285d1
        Validity
            Not Before: Nov  4 12:01:54 2026 GMT
            Not After : Nov  5 12:01:54 2026 GMT
        Subject: CN=9fcacbbc1e72fca07a5b35cc3341b8917fe64cac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ee:ef:6c:13:a5:fa:2c:2a:4e:05:4c:e2:09:
                    60:a8:06:e7:e9:bc:36:92:0d:e7:bf:cf:ea:a7:87:
                    d3:32:15:9e:08:81:51:ae:10:c4:49:7e:20:95:03:
                    08:8a:e8:d6:24:e6:af:19:e1:df:41:82:e9:46:fd:
                    b2:31:45:b7:21:ac:1f:e1:ff:97:65:3b:60:f0:b8:
                    04:b7:8d:f0:ad:44:71:3b:73:16:85:4b:ae:cd:6a:
                    59:df:3c:0e:7e:8f:97:f1:a8:d7:a6:0e:11:91:b2:
                    1a:98:5b:e6:90:27:53:89:2e:ef:6c:15:16:44:b9:
                    0b:3d:21:5c:f1:27:de:32:7b:23:6c:58:3b:69:a2:
                    c6:28:57:84:29:c9:29:00:d4:32:2b:ea:30:1a:ed:
                    4a:37:9d:bd:3c:37:f9:3e:16:80:14:c9:e8:52:16:
                    d1:9d:48:ea:ad:58:57:6a:eb:9c:dd:2d:1c:07:eb:
                    7a:ae:b2:54:f0:be:25:e6:fb:6f:d3:82:fe:a9:77:
                    3b:a5:8d:f0:f7:89:4c:a3:16:06:6e:4f:cf:30:78:
                    a3:cd:ea:90:4c:8a:90:97:4d:88:56:a8:84:69:cc:
                    d1:78:bf:30:4c:7b:b5:5a:7e:95:5f:a5:82:9e:29:
                    23:91:17:57:6d:df:46:d1:94:ce:d2:c3:b9:2d:b0:
                    f6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:CA:CB:BC:1E:72:FC:A0:7A:5B:35:CC:33:41:B8:91:7F:E6:4C:AC
            X509v3 Authority Key Identifier:
                keyid:79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:0f:c9:c7:9a:13:6c:8a:12:00:4d:4c:a2:2f:04:e5:17:1c:
         53:c7:03:20:aa:1a:ca:95:f9:74:9f:2c:74:82:d6:64:3d:11:
         42:f5:09:6e:d4:d5:ff:76:e5:15:63:4e:c3:af:43:5d:0a:79:
         3c:f0:cb:86:5e:b4:b1:f2:27:63:0e:6d:3e:10:d3:d1:32:5b:
         b9:70:d1:2a:20:9b:2b:ee:2d:3b:8e:aa:90:df:c5:60:cb:29:
         cf:7e:2e:16:47:d4:02:9f:17:94:82:f3:23:da:df:e1:cb:6a:
         9d:a4:9e:99:16:12:59:ac:53:a0:87:dc:95:58:76:9a:9f:b7:
         2c:cb:36:11:9a:8e:4e:ee:e6:26:1f:94:26:bb:ca:2b:e3:67:
         db:ac:3b:9e:5f:00:9a:74:80:0a:50:4f:e3:a0:a4:1e:37:d7:
         13:d4:42:fc:13:8f:7f:f5:2c:55:1e:d9:98:6e:f3:56:9e:5f:
         90:ab:5e:25:7f:0a:3d:d3:14:27:46:f4:86:b2:16:82:35:20:
         df:51:45:0a:38:1b:81:83:a5:ff:37:a6:cb:30:48:eb:9c:95:
         a2:6c:eb:12:fd:4d:5d:1c:06:27:34:d4:ec:cb:0b:5b:cf:bb:
         c8:69:a2:19:94:d7:95:d8:ca:31:18:60:d3:aa:2e:4c:c3:ad:
         4c:86:fb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 19:02:57 2026 by rpki-client