Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File:                     s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier:          dy+FovUoqDcsvve6cLOsgf5B2ekf9a+yljjL8ZYh9HA=
Subject key identifier:   2C:01:92:31:43:2B:E9:8D:95:1B:3B:2F:DB:92:43:11:74:B8:47:04
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer:       /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial:       01A1DEA79BCAECD6FF40C356595A783D38C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number:          1B14
Signing time:             Sun 15 Nov 2026 10:01:28 +0000
Manifest this update:     Sun 15 Nov 2026 10:01:28 +0000
Manifest next update:     Mon 16 Nov 2026 10:01:28 +0000
Files and hashes:         1: 2b8ZwVq_mjczOCytV3AyHOIxQIc.roa (hash: tt5DqAanKGArO0UxY768cJIb05kbBNt+jtmYkkG2iA4=)
                          2: 4Em1zLDNhErKpeOQsW4q5AzcEVQ.roa (hash: FhFw00ipa0mGK9r5LYLVgU8LDCSf4yXWR2ahLt8/jwI=)
                          3: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
                          4: QEQV3WVZ7h4-w6mCHFQMDuhmGOg.roa (hash: Rll5oOTs7j8UzHs/imFhP7b3Ziq5FCxfwcEt7Ya0/xU=)
                          5: UssRL_azfcBW0-ZAXO28l_WRTQ8.roa (hash: Q1CPH56Bt7FCDBhQza5YAQW6lKSo+XxyyUkTKJFqTBQ=)
                          6: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
                          7: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
                          8: lUTVi-_PDzyWzw8K-fsuosZWRiI.roa (hash: OmUNgtrNFRnsn2wonPhEVO1CJuTfc6rf60NoEOm1QYw=)
                          9: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: 9LpLl8q7Ue6VrCDb9/UDRat3KL60HgtEY3lIX6NtB5Y=)
                          10: wa9zMyfDDEuwe9jHEEf5XR0rY1U.roa (hash: w6cKFExTNVukVfdOoaJCYRMUgY7AI2mb+j8X2JfaAr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 10:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:a7:9b:ca:ec:d6:ff:40:c3:56:59:5a:78:3d:38:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
        Validity
            Not Before: Nov 15 10:01:28 2026 GMT
            Not After : Nov 16 10:01:28 2026 GMT
        Subject: CN=2c019231432be98d951b3b2fdb92431174b84704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:92:06:1f:b1:b3:0c:21:98:1d:7f:12:16:7f:
                    cb:eb:20:f1:94:eb:02:ae:7b:6d:9e:82:3f:db:2f:
                    bc:28:08:d0:10:0b:7d:99:ae:8e:3a:b0:bf:36:07:
                    72:f6:d7:ca:d0:3a:75:3c:8c:86:3b:a2:19:7e:d1:
                    07:1b:cb:8d:f9:40:9a:98:cf:ae:69:6f:b2:5d:ab:
                    96:14:d3:d9:26:b4:7d:8d:86:92:d7:a8:92:1c:a0:
                    86:3a:3c:f0:05:f3:53:20:a0:d9:20:e5:0c:a6:90:
                    2b:4e:bb:bd:5f:dc:86:4c:77:36:47:de:29:63:45:
                    7d:57:89:e6:eb:cd:b3:47:82:d5:66:4c:36:ca:cd:
                    7c:5c:66:dc:be:3a:42:ed:71:fa:1b:bd:0e:99:16:
                    d6:92:0d:12:a1:63:7b:2a:f6:b3:8d:6d:85:f1:e1:
                    db:73:c3:46:ec:63:bb:57:7b:d8:fc:73:3f:45:dd:
                    69:63:ed:8a:d0:63:6e:cc:5b:62:d4:d6:f9:f3:30:
                    23:df:40:6c:73:bb:eb:0a:79:11:59:79:bb:dd:9c:
                    d8:bc:75:2e:b1:55:6d:f1:7c:c1:6a:c5:40:36:14:
                    6e:12:05:2b:34:d0:6e:f4:6d:dd:be:03:b2:99:9c:
                    fb:5e:27:c1:b7:29:ab:70:c6:5f:7d:92:13:b9:20:
                    d2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:01:92:31:43:2B:E9:8D:95:1B:3B:2F:DB:92:43:11:74:B8:47:04
            X509v3 Authority Key Identifier:
                keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:b0:14:43:7f:76:9d:d5:4f:ee:51:58:84:f6:d3:3d:4f:15:
         c3:d8:99:ab:11:1a:8c:33:90:f9:3e:3c:cf:bf:be:8e:44:4b:
         40:2f:63:3a:9e:29:2e:c0:e3:63:f1:ee:57:e6:a0:03:cd:af:
         94:60:f7:4d:66:d6:79:99:0e:f0:13:3d:07:2f:34:3e:3f:6a:
         13:b5:9a:ba:94:a1:d0:d9:33:ca:3c:f2:2d:05:ad:58:7e:36:
         e3:21:7f:1a:4a:aa:d9:e1:2e:6d:05:88:74:7c:4d:69:c6:11:
         71:48:cb:eb:60:3f:0a:f7:0f:46:9a:9e:a5:a8:59:88:a7:82:
         d9:ec:56:1c:bf:75:3c:5a:b7:e4:95:ed:54:0d:8d:c4:e5:e7:
         9e:a1:4e:3e:10:d3:2e:63:b1:65:da:bd:05:9f:47:6e:02:0a:
         d5:b0:c0:3f:7c:10:29:45:2e:5e:5e:9f:55:4d:d0:37:d4:da:
         53:24:2b:4b:e7:8e:3f:d0:08:28:24:5b:09:3c:a0:35:36:e3:
         ed:3a:f6:30:be:8e:42:32:cc:55:c0:45:ea:2f:6b:cf:00:0c:
         dc:b7:33:0d:68:ae:98:46:20:ea:74:c7:16:f4:b5:9f:e8:e7:
         38:86:58:89:7c:15:a1:27:52:04:d9:cc:f2:8a:0c:8e:fa:e0:
         a3:9d:d8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:18:09 2026 by rpki-client