Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
File:                     ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft (raw, json)
Hash identifier:          M9gjs1I2WrAAEH65VqgsClO58sRg0jDLFLYZmPwgvhc=
Subject key identifier:   F1:39:A1:EC:E2:12:53:85:79:B2:DC:F3:9F:A7:AA:0D:5C:DE:3F:4E
Authority key identifier: A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
Certificate issuer:       /CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Certificate serial:       01A1DEDE292E56D4436312FC7D624A38D329
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
Manifest number:          1051
Signing time:             Sun 15 Nov 2026 11:01:03 +0000
Manifest this update:     Sun 15 Nov 2026 11:01:03 +0000
Manifest next update:     Mon 16 Nov 2026 11:01:03 +0000
Files and hashes:         1: fs8d2893qiZikthsq_-JlA6ljMA.roa (hash: ZrsMMWfWT5ZYVuIhEglHV6ViI9TadV+uTXWR+dIXLo4=)
                          2: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl (hash: +EEh/5IjqVX1IADprCZZV7AF/kwPYsZOOqPFdRpXx3I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:de:29:2e:56:d4:43:63:12:fc:7d:62:4a:38:d3:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
        Validity
            Not Before: Nov 15 11:01:03 2026 GMT
            Not After : Nov 16 11:01:03 2026 GMT
        Subject: CN=f139a1ece212538579b2dcf39fa7aa0d5cde3f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:74:5d:5e:9b:96:63:6b:1a:b8:b8:a7:34:7c:
                    49:62:49:78:c8:ad:39:1d:15:67:cd:34:c1:1e:55:
                    18:33:24:c0:da:61:f1:44:35:11:06:e6:d9:93:bc:
                    2e:09:e2:cb:98:74:8c:53:d0:1e:9a:a9:b1:83:d1:
                    bc:9e:bc:18:d1:5b:50:4f:c2:3c:23:49:85:ed:26:
                    7d:ba:4e:7e:70:04:c1:cb:46:da:11:8c:d3:aa:5c:
                    3d:7c:ba:2c:92:eb:0b:74:65:de:c4:3c:72:83:9a:
                    f2:7d:78:4a:41:40:79:04:e4:f5:04:65:ac:0a:a3:
                    60:b6:4a:9c:bf:29:f6:36:d6:ef:9d:e5:a6:f5:2b:
                    dd:a7:9b:da:84:0e:3f:fd:25:c4:de:78:3d:6f:cc:
                    70:05:a9:d3:99:bc:d9:83:ac:ae:94:c2:eb:16:4b:
                    6c:2d:ed:01:6d:df:63:e6:ed:5f:d1:09:5c:d3:d0:
                    58:0d:36:c7:e0:55:af:65:2e:3b:e2:c9:97:f8:2c:
                    18:4d:e8:35:02:c2:b1:74:de:4c:5b:3b:55:15:30:
                    b5:49:fc:64:6d:2d:f6:73:50:ea:a0:e8:2f:1f:3a:
                    3e:60:86:23:76:78:c4:93:c5:9e:76:a5:ac:6f:e9:
                    57:d3:d5:76:b8:8f:5b:ca:01:4d:7c:9f:64:8d:65:
                    d8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:39:A1:EC:E2:12:53:85:79:B2:DC:F3:9F:A7:AA:0D:5C:DE:3F:4E
            X509v3 Authority Key Identifier:
                keyid:A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:08:0d:7b:d6:85:79:c9:84:56:e3:37:a1:1f:d4:de:d2:2a:
         5c:3a:e1:51:49:26:f5:63:fe:bd:a8:a7:93:98:d6:52:b0:e9:
         49:c7:99:1a:87:1f:de:9f:69:d8:46:f1:62:ea:69:9b:75:76:
         42:36:b4:fb:ea:ab:07:b3:62:db:58:72:32:c9:58:3d:b7:8a:
         09:e3:1a:09:18:d0:dc:6a:03:99:b5:4c:f8:87:cd:81:92:51:
         e5:1b:3d:dc:84:36:a1:93:a8:65:d0:1e:b9:ec:d8:88:11:82:
         a4:30:0a:04:f0:b2:6d:9d:92:a3:f3:da:b7:d0:85:aa:57:7a:
         19:80:6f:36:e4:a8:03:ab:6c:d8:cf:96:a6:1a:f7:27:89:c6:
         53:e5:f4:76:b8:80:6e:65:b3:0b:b8:7b:73:fb:ed:ad:53:72:
         e2:b9:cd:59:d6:80:fc:3f:b1:63:7a:cb:84:6f:1c:ce:b3:aa:
         af:a8:68:40:35:7b:1d:d8:7f:55:ad:e9:98:32:bd:30:74:cc:
         d2:a5:8c:ae:52:13:fd:d5:69:06:62:a8:36:ac:51:7f:0a:40:
         c0:46:57:c4:e3:bf:08:e6:ab:ad:d1:dd:ed:c5:94:0b:0c:eb:
         86:df:a9:40:63:57:70:e4:69:2c:53:88:a3:f2:45:21:f8:7b:
         b1:9f:09:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:44:34 2026 by rpki-client