Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
File:                     tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft (raw, json)
Hash identifier:          nKmlOJ47zJtQepr0gy+0Tg/jh6kE81AHeAIICUe2sUY=
Subject key identifier:   7B:FE:56:56:45:12:F7:DF:C3:F3:CE:61:C6:89:D7:D2:68:91:22:FE
Authority key identifier: B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC
Certificate issuer:       /CN=b55800300fa4017f970c95d767d812fd10d0dcbc
Certificate serial:       01A1DE029FBA6CFDD869ECCBEDA5526AAFBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
Manifest number:          1AF8
Signing time:             Sun 15 Nov 2026 07:01:16 +0000
Manifest this update:     Sun 15 Nov 2026 07:01:16 +0000
Manifest next update:     Mon 16 Nov 2026 07:01:16 +0000
Files and hashes:         1: 5fU_xs0EEgSMGfBZP3SSuRqBI8Y.roa (hash: 5waSnyUntbdrIupQ0AXFYbyfHR9BZyMzO6WszJloMOU=)
                          2: 9ZxAC10NuAqnXMcED-lsCy84WUc.roa (hash: 2Vs0nLDkGXSJoDb56Vxw17AmovqxUT3lVuAZuNKdDYU=)
                          3: JWBtzeLFUDlhmERoUCTbc_uAex0.roa (hash: kxreH6y2E+SNRj6sI1npU33Oy4JXyeQw/3NaAYiK4Gk=)
                          4: hbbJ0MKd5AI8GzkfAZt3l1L7uR8.roa (hash: qiesRgMfoPlRIvGxB5feazmMjwpZhmvrVOznCajAxhM=)
                          5: p-BxC3UVD_nEROYM_iUQsrzD9Gw.roa (hash: OH559fj6Vr/ZVBWmRgyMZY/pv/BDJUIdzOx8psGNE+4=)
                          6: tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl (hash: boWIB+77mXb04uhKPL4712dxy8JMeiznHx+GFyVi0A8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:02:9f:ba:6c:fd:d8:69:ec:cb:ed:a5:52:6a:af:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b55800300fa4017f970c95d767d812fd10d0dcbc
        Validity
            Not Before: Nov 15 07:01:16 2026 GMT
            Not After : Nov 16 07:01:16 2026 GMT
        Subject: CN=7bfe56564512f7dfc3f3ce61c689d7d2689122fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:47:bd:83:f1:eb:5c:35:4a:55:f8:41:84:40:
                    da:ff:23:2d:2b:9f:ba:46:83:32:17:d7:a0:46:49:
                    09:be:cf:4f:84:4f:60:7f:3f:2e:58:4e:cf:f4:ce:
                    fb:7d:b4:07:1e:1a:f8:48:c3:ad:25:43:83:0e:72:
                    ba:78:f9:59:84:c9:ce:0e:52:b4:67:32:4c:c7:6a:
                    3d:4a:e9:08:9e:58:da:37:58:c1:90:9c:84:64:05:
                    54:7b:12:38:65:85:27:f8:31:e0:14:69:77:5e:33:
                    e5:4c:1e:32:e3:b9:a2:ff:4f:9a:e3:f5:77:60:90:
                    c0:a6:1d:08:d3:32:e7:2a:1f:83:5f:09:c4:fa:42:
                    b3:56:68:af:28:f6:89:d1:e8:db:1b:d6:b0:7a:82:
                    be:dc:c7:18:76:ec:5c:5c:18:f5:9b:10:11:b7:4f:
                    8c:22:be:aa:3f:f2:cb:17:8a:f3:ae:32:da:1c:c8:
                    f0:02:31:8b:58:de:75:10:ec:17:d1:79:6a:4e:92:
                    b3:dd:06:1b:4b:d0:a2:32:40:04:ac:67:37:f6:ad:
                    b8:51:2e:76:93:3b:8a:e7:ce:f9:92:53:c5:20:93:
                    e9:c0:81:41:02:13:5d:60:03:0f:bb:9c:74:fa:cd:
                    a6:44:71:db:97:42:bf:ab:57:fe:b6:08:ed:9b:87:
                    16:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:FE:56:56:45:12:F7:DF:C3:F3:CE:61:C6:89:D7:D2:68:91:22:FE
            X509v3 Authority Key Identifier:
                keyid:B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:35:fa:ec:3a:cb:87:b7:d0:e7:0d:13:89:58:52:22:6a:6a:
         7b:54:ee:b1:f1:36:8c:43:b5:2a:9d:57:02:1b:6e:39:90:32:
         f3:21:e3:5e:c1:86:3f:50:6d:6c:62:22:e0:a5:ee:5f:9c:1f:
         6b:1e:fc:6b:ab:ad:3e:e5:ad:1a:59:c4:5a:3d:8e:b8:2e:9b:
         ac:97:8c:2e:9d:5a:bd:34:48:69:fd:56:bc:03:1b:5d:3d:c5:
         0a:55:53:e0:b7:1a:9e:de:fd:9d:04:1a:fd:a7:68:69:97:77:
         f9:c4:d8:d2:28:28:62:3f:79:8b:32:8e:3b:3c:77:f3:75:58:
         94:e7:27:14:7b:3b:37:b4:9b:18:da:96:9a:93:9b:92:20:1d:
         64:a9:3d:39:c5:b3:30:9b:16:07:0b:e1:ae:47:50:4f:b8:fc:
         03:e8:f4:52:02:9f:2a:9a:a8:65:a2:fb:b5:fa:c7:5e:85:ad:
         7e:d2:5a:9f:be:2c:db:b0:61:eb:77:bc:1c:43:a2:1b:f5:8a:
         18:23:bb:2a:ca:26:49:45:6e:9d:37:36:11:21:21:59:da:91:
         14:dc:06:fb:d2:65:45:3f:0f:3c:9f:c0:1b:55:52:cc:28:82:
         31:18:21:3c:05:ae:85:55:af:04:69:8c:6d:5b:cd:48:21:6d:
         56:14:8b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:41:45 2026 by rpki-client