Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
File:                     lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft (raw, json)
Hash identifier:          OTZRaZ4Tei9djOl8wCWXps3J5EvsLwT0HgLgrTIbDGU=
Subject key identifier:   07:77:78:A7:17:2A:3D:FF:41:1D:A2:EC:56:62:E9:BC:70:20:F5:F1
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Certificate issuer:       /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial:       01A1DA9388EAFC2390762A574982ECE960EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
Manifest number:          1B51
Signing time:             Sat 14 Nov 2026 15:01:04 +0000
Manifest this update:     Sat 14 Nov 2026 15:01:04 +0000
Manifest next update:     Sun 15 Nov 2026 15:01:04 +0000
Files and hashes:         1: 0h-gynlt37_ccfmJ3_-3V9IsODo.roa (hash: lhk56T89fsYDt9b3bZzoR43znTFjvZYbijTV/1C9Si0=)
                          2: 2CWCfCy9K4Vi9k3gQcjDl2NrNEM.roa (hash: 9rqgytTtMM+w+XpSLnW26DVZMUTWIVNTb8QB8FjrNS4=)
                          3: 2lifCuWCmZX74wg673_4xS-ONag.roa (hash: 6lY0ENu0kD82v4utL4LG2PKDIcs5NRuZ7W1h/UjeZ3s=)
                          4: DO9K3CDX-0DMt_u5fehH0WQcqJ0.roa (hash: uYInFYzDeRAdWcAcrc9tbS0qrMrDwJVw7F9l4//iM4o=)
                          5: ETkKagkgQjnGBNgqOyAmTkHn0P4.roa (hash: 6KoIwag+dQ/SFaGrb0LDubj89Z8MHJmf6ejIXexoZAM=)
                          6: FEe4UnqvSWKSAea0PHBwUXaDpm4.roa (hash: /HsHyiEMwRFNM8wBIEun/RLlHvSJ/E/CrgYY4W1LbRU=)
                          7: GgJTJx_b5aOrjfbC7HKHi62LrcY.roa (hash: PnUpyulLa8GGkQy4mSxl7aVOPLy8nEhjtw1K51C+1bI=)
                          8: Iel3Ea-3rxsZQQ6iJD4-HfTuhhw.roa (hash: TU3oVPvyWOIEJstN9ZVVdTsiXgUUc4Vlg6zQUCF02SE=)
                          9: Lgy8y2r2iS0jXhVcsxg6dv326oE.roa (hash: wPcIhg3eIiw6VkkR9oijQGGlSbnCfpW6p5KDiz8+B2I=)
                          10: Rr67ih9bEGLQGJTMg-vMhZ2Azwg.roa (hash: v3/IENdSa8OyjnUENK4zTVbFIGnNSEC4jJo2ZT+P0fw=)
                          11: Wmzqqd8jQ8l2zH8p6qvUwjNUBCo.roa (hash: Hj1fjYxq7Hq5Pozz0dv4JvpffmO3HqQHwPJ42oxJcrk=)
                          12: Xwtva-5JS24pgtPa6RiyB6jgWs8.roa (hash: 4crKYMPlObMDOjEeTCvMoGko6l7Xz46lTNJ2hPww31s=)
                          13: agDTouKXh27x35ZP6bEJ5yzcJrA.roa (hash: OVkcnAYHjQt80Lrs6fk4p5r9gtYIWdVvRl09WAS/lM8=)
                          14: dYKy0V0V-kDfDOZR4gtFzNeiaww.roa (hash: ECNi8rSbsFUBmyj3614uPGhFINVbMd3PxyWgQRCiork=)
                          15: gkm6rTE9F1Jbq6u1Gdul0_uIhQI.roa (hash: e17L5xzP7AyerioqF9cvfemAnnXUxd+u4XnsDKjQioc=)
                          16: j_5CDSXMOqrHPG6FDCM7g-ZB6QU.roa (hash: ZMHtO8ciFMPwXHC89RNtj8BL+Af+U+EUztECColxrQQ=)
                          17: kb6gSfM5mGHVL2sldaFxnmKjhg0.roa (hash: M9+8l6+F24TF6oMlUeKq+hsgUYqqlaAwBaPlCZF5HRE=)
                          18: lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl (hash: 7e865OD5W0rb+ogYFHl1QMYSjrw4V/g9rZPUwX/o5mk=)
                          19: rKmAVK4PxzbR_IThsBb1WgVN_YY.roa (hash: TV5HtQ7LPjAdjxp+ggpRM593FUWUOfL9JtSMN7pzuhU=)
                          20: ssnuhARu1fuiNnb4_oZWRvDSFXY.roa (hash: zL1smxJXroypMyfkPMa22a+jWX5wbouMpSy2PWfX5No=)
                          21: tO4CEoSB6kxpv7bhTHEnpWackIc.roa (hash: FEK2OPgPfqRTSL5u/YZmiQXmpGK2M6+AWhKFOM6G6As=)
                          22: x2QeoV9YjEnvngKa8MC3rROtI0s.roa (hash: TLUO3bCDce91dJPd3p+jeNSpDA+KWUjSTGFeGUMfFFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 15:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:da:93:88:ea:fc:23:90:76:2a:57:49:82:ec:e9:60:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
        Validity
            Not Before: Nov 14 15:01:04 2026 GMT
            Not After : Nov 15 15:01:04 2026 GMT
        Subject: CN=077778a7172a3dff411da2ec5662e9bc7020f5f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:eb:50:6b:af:f7:0a:b0:a3:b3:91:18:3d:d8:
                    49:54:64:f9:e9:f2:82:66:ef:80:43:c0:f1:bd:ca:
                    f3:e9:c9:6e:20:9e:27:ab:4d:24:86:da:a8:6d:c4:
                    18:ac:fe:92:6f:0e:3c:73:7e:e9:8c:12:4f:04:e0:
                    ad:0e:2e:a7:6b:8a:66:93:6c:e7:07:6f:4b:fd:5d:
                    ad:f6:1e:fd:2b:fc:68:17:4c:f0:83:a0:3a:92:ae:
                    02:03:de:71:2e:b1:74:3c:20:29:92:ad:0e:be:42:
                    e9:bf:80:cf:7e:0f:09:80:6a:9e:07:5a:1c:99:84:
                    ae:e3:7b:6a:e1:62:1a:4d:dd:28:98:15:ff:6f:d3:
                    26:d0:f8:b3:9c:44:32:60:54:d9:71:1a:c1:28:b2:
                    b1:94:45:84:cc:39:12:27:c8:a6:99:31:c8:81:11:
                    9c:e8:5f:a5:b5:62:2a:fe:db:3f:9f:db:07:2f:5a:
                    04:fe:9b:62:b9:92:d2:6b:4c:49:40:54:ed:5a:dd:
                    6e:1e:6b:40:c9:46:f1:d4:00:d7:34:76:6c:d5:fa:
                    fe:49:68:64:28:0e:41:da:5f:2e:19:e1:2a:fb:d5:
                    b2:d9:ae:29:49:95:f2:ad:34:70:2e:28:68:c9:0d:
                    41:67:8a:fc:4b:8e:ad:7b:b1:a0:74:9d:2e:7a:70:
                    20:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:77:78:A7:17:2A:3D:FF:41:1D:A2:EC:56:62:E9:BC:70:20:F5:F1
            X509v3 Authority Key Identifier:
                keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:77:f8:b7:72:c8:71:b3:15:0f:f2:76:04:37:48:89:57:90:
         ad:c0:ba:1a:d7:aa:ca:aa:08:ad:6f:45:5e:43:75:32:c9:38:
         f3:aa:24:d2:ef:88:8c:82:78:8a:ae:29:c0:2e:6b:a5:91:e8:
         1b:68:7c:d5:77:1b:2d:db:05:8d:e9:82:f9:c8:78:04:49:19:
         4d:f0:fa:4f:14:3e:b9:00:42:e8:0e:e7:2d:02:e3:69:2b:9a:
         3b:3a:aa:c8:ba:14:f3:6e:36:9c:72:87:ae:5d:c3:90:06:41:
         70:e8:9b:91:c2:1d:ac:23:86:5a:fa:36:aa:d9:51:61:13:68:
         6d:4b:7a:23:83:4b:2a:d1:a7:45:81:33:77:fc:e6:78:80:dd:
         40:2a:19:97:b1:3f:60:14:42:e2:b9:d5:19:ad:43:7c:b4:6f:
         e1:77:51:fc:ca:7b:1e:9c:44:6e:2a:30:85:03:7f:09:8a:0d:
         59:f6:09:b2:e8:66:4d:3b:79:23:f7:85:92:2c:84:8c:cb:dc:
         46:0a:66:ee:91:10:6d:d1:9a:d8:39:6a:2b:38:17:8b:d2:92:
         7d:3f:95:06:ea:92:ad:31:77:3f:28:33:4d:e8:d2:a6:9f:37:
         fe:8e:e8:54:88:75:2d:6a:62:c5:a8:dd:74:be:a8:25:f4:81:
         9c:76:0b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:22:20 2026 by rpki-client