Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft
File:                     8WsoQW3b85-ySwmWaGrPrOdsmNU.mft (raw, json)
Hash identifier:          H8R2l+KDvQ7g47CboohoKOh5D8eaMLNCmHhLkvx4Pro=
Subject key identifier:   0B:D0:44:FF:4F:50:4A:F5:DB:49:9A:31:89:68:50:40:48:8B:97:3C
Authority key identifier: F1:6B:28:41:6D:DB:F3:9F:B2:4B:09:96:68:6A:CF:AC:E7:6C:98:D5
Certificate issuer:       /CN=f16b28416ddbf39fb24b0996686acface76c98d5
Certificate serial:       01A1DE02E2AE04B9BFD835DBC32F6027A150
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft
Manifest number:          1AFA
Signing time:             Sun 15 Nov 2026 07:01:33 +0000
Manifest this update:     Sun 15 Nov 2026 07:01:33 +0000
Manifest next update:     Mon 16 Nov 2026 07:01:33 +0000
Files and hashes:         1: 8WsoQW3b85-ySwmWaGrPrOdsmNU.crl (hash: 2NLYuOwNUj3yceek8IYNymmqIO6fedu+xhr+44YpQZ4=)
                          2: M2iBBMOA3qsSMyjlSglJFjGkADw.roa (hash: cG0ba+40x+sUUIApNoE0kjA0ui/lM0Su8lRnaV2pbUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:02:e2:ae:04:b9:bf:d8:35:db:c3:2f:60:27:a1:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f16b28416ddbf39fb24b0996686acface76c98d5
        Validity
            Not Before: Nov 15 07:01:33 2026 GMT
            Not After : Nov 16 07:01:33 2026 GMT
        Subject: CN=0bd044ff4f504af5db499a3189685040488b973c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:98:3e:b4:4b:c8:65:d6:e6:c7:94:84:73:ae:
                    7e:63:23:0a:d6:be:21:02:fc:95:57:f8:56:5b:f8:
                    8e:07:c8:43:21:54:8e:17:a7:fb:0b:85:5d:c0:18:
                    b0:ad:73:69:8a:3c:6a:38:11:dc:c6:65:d6:42:5e:
                    d4:95:e3:78:14:8c:c9:07:1f:b2:63:ef:b9:88:72:
                    65:8c:d8:ee:15:be:04:bc:1e:1d:3e:74:6d:2e:69:
                    01:97:0d:49:b4:06:0d:4a:89:f9:4c:48:ca:05:a4:
                    ae:9f:43:27:e5:c1:67:36:01:58:7f:ea:89:19:75:
                    de:78:5b:2a:1b:08:55:dc:a1:c7:a6:54:f3:c5:ed:
                    af:95:df:6c:03:75:3f:99:a5:d4:c9:79:bf:2a:a3:
                    37:92:df:93:7f:c4:86:03:f9:38:5f:8b:71:e8:dc:
                    53:14:6b:8e:e2:ce:7e:48:02:c2:10:4e:c7:d0:ef:
                    94:92:d0:e7:67:bf:b3:8f:c3:fc:86:03:e2:9e:8e:
                    72:ff:eb:66:72:20:d8:01:8c:de:5b:80:4a:7c:7f:
                    29:61:1b:7b:6e:7b:48:a4:5c:df:e4:91:51:b6:bf:
                    2a:1b:c0:c1:2c:de:1e:11:d5:79:55:4a:0e:97:66:
                    40:1a:73:bb:bc:9e:24:7b:42:2a:c7:5e:49:de:bf:
                    bb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D0:44:FF:4F:50:4A:F5:DB:49:9A:31:89:68:50:40:48:8B:97:3C
            X509v3 Authority Key Identifier:
                keyid:F1:6B:28:41:6D:DB:F3:9F:B2:4B:09:96:68:6A:CF:AC:E7:6C:98:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:06:ac:fe:12:2d:76:58:af:70:93:2d:0e:fe:41:99:05:e5:
         cd:29:6b:64:f7:7f:bb:bb:f7:f4:16:11:83:8f:22:ce:e5:da:
         76:85:8e:fb:83:26:57:30:d3:bc:20:06:87:67:39:70:f0:f0:
         4e:bb:c4:03:3b:5f:67:93:2a:61:09:65:2f:0f:91:0b:82:cf:
         69:40:d3:4f:9b:11:5e:35:89:63:9a:06:53:f8:4d:35:48:98:
         1c:e9:7b:5b:3e:94:65:61:0f:c0:af:3b:24:f6:86:9a:f3:65:
         20:6d:4d:41:9b:72:ed:28:77:8e:96:c5:0c:ca:9d:ec:39:9d:
         3b:eb:a4:92:74:3a:f1:91:93:fe:44:71:e1:41:87:0d:e4:6c:
         45:11:be:2f:2f:a2:c6:33:31:a0:65:c8:86:e1:5a:eb:69:99:
         dc:1d:f4:93:be:8f:2d:99:3b:20:a8:c1:98:eb:6f:95:bb:cb:
         3a:ef:68:bf:4a:8a:96:ea:9c:c5:a0:65:ad:62:cb:50:21:06:
         46:7d:d5:0f:b8:3c:d6:e5:0a:e9:e0:20:88:09:30:44:e1:fc:
         bc:38:89:6f:d6:b0:a9:d0:05:59:28:b5:cd:92:19:21:e2:f7:
         a1:40:bd:c9:f8:47:fb:ab:02:d8:f2:d2:d2:cd:6f:97:ca:dd:
         d5:c0:0d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:44:29 2026 by rpki-client