Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/22f8fa-6b27-4e7d-ac97-f2e44fcf99b5/1/f4YB033R1wRC7_JgMETpncYEZ7E.mft
File:                     f4YB033R1wRC7_JgMETpncYEZ7E.mft (raw, json)
Hash identifier:          xRy9Nu9SVvcWBUzxFgJR79HLQiEUWvCfDfwCTOHSSoE=
Subject key identifier:   FD:05:B8:BE:18:54:85:C2:DE:39:0F:C9:7A:41:8F:99:A4:14:D7:3A
Authority key identifier: 7F:86:01:D3:7D:D1:D7:04:42:EF:F2:60:30:44:E9:9D:C6:04:67:B1
Certificate issuer:       /CN=7f8601d37dd1d70442eff2603044e99dc60467b1
Certificate serial:       01A1DE7066DB991515E213CD215C20D74CA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f4YB033R1wRC7_JgMETpncYEZ7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/22f8fa-6b27-4e7d-ac97-f2e44fcf99b5/1/f4YB033R1wRC7_JgMETpncYEZ7E.mft
Manifest number:          54
Signing time:             Sun 15 Nov 2026 09:01:10 +0000
Manifest this update:     Sun 15 Nov 2026 09:01:10 +0000
Manifest next update:     Mon 16 Nov 2026 09:01:10 +0000
Files and hashes:         1: MP-bUhmCCORbDRfR0QVPeVgT1Kk.roa (hash: HcVs9BJP1XponvF2Dbd8qRv9Wk1bZyXCrH6YwBz1b/U=)
                          2: f4YB033R1wRC7_JgMETpncYEZ7E.crl (hash: CS6vItga0hZbotBx9zEKeJl7LXn7U8YDW2ZIQbmsiIU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/22f8fa-6b27-4e7d-ac97-f2e44fcf99b5/1/f4YB033R1wRC7_JgMETpncYEZ7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/22f8fa-6b27-4e7d-ac97-f2e44fcf99b5/1/f4YB033R1wRC7_JgMETpncYEZ7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f4YB033R1wRC7_JgMETpncYEZ7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:70:66:db:99:15:15:e2:13:cd:21:5c:20:d7:4c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f8601d37dd1d70442eff2603044e99dc60467b1
        Validity
            Not Before: Nov 15 09:01:10 2026 GMT
            Not After : Nov 16 09:01:10 2026 GMT
        Subject: CN=fd05b8be185485c2de390fc97a418f99a414d73a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b4:00:a1:e0:11:0e:4e:6b:8f:c4:2e:14:30:
                    2b:94:08:9d:01:ab:b0:9b:92:0c:a2:76:bf:e3:5a:
                    06:0e:87:4b:4f:76:7c:24:00:0f:f8:a1:8e:39:ac:
                    24:a4:b3:61:27:a3:e4:71:45:b5:1d:af:27:d7:f0:
                    b8:81:21:3d:0d:74:c2:ee:7b:bd:e6:90:0b:d7:77:
                    8c:e1:c3:8e:09:31:39:55:c2:6b:c4:06:e8:85:6c:
                    42:90:a8:37:5b:94:55:a2:d3:eb:71:39:92:8c:bb:
                    a7:40:0b:c1:2d:09:38:fa:2b:b7:44:63:21:17:0d:
                    df:40:27:8e:07:ea:1a:51:24:1e:74:06:80:2e:34:
                    5d:6c:20:33:56:e4:9c:ff:c4:53:1d:98:6d:46:8e:
                    a9:82:91:83:1e:24:b3:c6:0c:6d:98:ca:fd:58:90:
                    56:63:a3:03:dc:42:72:cd:5f:cb:3b:20:6d:83:82:
                    71:f4:3a:d9:48:47:02:6b:f7:8c:f5:4f:af:d2:df:
                    12:71:bf:ae:34:95:da:3c:e0:ba:24:32:fc:02:89:
                    25:a1:59:16:6d:d5:c1:ac:81:6c:2b:21:d9:e8:ef:
                    52:43:aa:58:3e:da:ea:94:7d:47:d7:49:9a:a2:fb:
                    23:38:50:59:d6:21:ca:f9:f1:f2:4f:97:0e:e8:04:
                    b0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:05:B8:BE:18:54:85:C2:DE:39:0F:C9:7A:41:8F:99:A4:14:D7:3A
            X509v3 Authority Key Identifier:
                keyid:7F:86:01:D3:7D:D1:D7:04:42:EF:F2:60:30:44:E9:9D:C6:04:67:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4YB033R1wRC7_JgMETpncYEZ7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/22f8fa-6b27-4e7d-ac97-f2e44fcf99b5/1/f4YB033R1wRC7_JgMETpncYEZ7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/22f8fa-6b27-4e7d-ac97-f2e44fcf99b5/1/f4YB033R1wRC7_JgMETpncYEZ7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:b4:ea:73:3b:ee:7e:55:5e:30:e1:67:91:ab:a5:4b:64:08:
         6d:6e:72:e6:c3:8a:f0:f0:31:e3:aa:a6:9d:21:93:c8:ad:ae:
         0d:79:72:94:df:d2:4f:ed:b5:8c:85:25:0d:e4:53:88:79:38:
         37:d1:f3:02:6a:96:48:f9:d2:61:75:9d:f3:6e:cb:49:52:6d:
         16:19:cf:6e:be:b7:a1:5d:87:51:9a:ee:c5:06:c2:e0:73:13:
         cd:c2:d0:c6:9d:39:c8:42:88:1c:3f:b8:14:05:4e:fe:5e:13:
         1d:d7:0e:59:0d:dd:1f:4c:14:52:a7:a1:55:0d:ea:fe:88:8c:
         2c:7b:81:1d:f2:1c:5a:cf:70:56:39:62:15:52:6f:b0:84:86:
         8d:a5:cd:9e:2e:90:54:a3:6b:dc:20:93:7a:89:5d:3a:06:87:
         ad:c8:74:1e:55:c1:75:e7:3f:97:65:96:52:8e:74:d4:94:fc:
         a1:42:18:57:7e:76:95:c9:78:4c:39:85:42:1d:00:df:18:6e:
         6e:47:e1:1e:92:b7:07:e3:e0:67:8c:13:fc:a6:0c:64:d8:78:
         14:34:bf:21:7e:27:b2:a5:dc:d4:95:20:00:75:13:29:cb:b8:
         a1:70:ef:ed:1e:21:61:a2:bb:91:f6:58:be:b8:15:c5:35:4a:
         6c:bb:7c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:45:27 2026 by rpki-client