Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.mft
File:                     u8o_JdVGILUO-FIGV2NNOwlrrFc.mft (raw, json)
Hash identifier:          XS8GPnuUswVxMViO5EC5DfcuoUxhEQgqpp7k6EAHUTI=
Subject key identifier:   E1:41:20:5D:DF:AF:35:FC:D2:B0:FB:6C:E0:46:94:1E:AE:35:71:EF
Authority key identifier: BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57
Certificate issuer:       /CN=bbca3f25d54620b50ef8520657634d3b096bac57
Certificate serial:       01A1DACB06727215339A285953F8D8200351
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.mft
Manifest number:          132F
Signing time:             Sat 14 Nov 2026 16:01:40 +0000
Manifest this update:     Sat 14 Nov 2026 16:01:40 +0000
Manifest next update:     Sun 15 Nov 2026 16:01:40 +0000
Files and hashes:         1: B3ZkaLIo4wlScZVithXfJ7WBZh0.roa (hash: knbnHVoH+8hB05zSIWFIr8LSvfB+2nBJ8AWmnnfDRVc=)
                          2: Wm2YbkHQUqmv6dPv413SQviiSp4.asa (hash: qLrEjb9bWVLw7gePtUWvNul8m+GY4UnYRXh6gwmIR7c=)
                          3: u8o_JdVGILUO-FIGV2NNOwlrrFc.crl (hash: SJHYMlSryPOdWmbSd6lsBU1JJuA6RwqXi1IizzABPmw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 16:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:da:cb:06:72:72:15:33:9a:28:59:53:f8:d8:20:03:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbca3f25d54620b50ef8520657634d3b096bac57
        Validity
            Not Before: Nov 14 16:01:40 2026 GMT
            Not After : Nov 15 16:01:40 2026 GMT
        Subject: CN=e141205ddfaf35fcd2b0fb6ce046941eae3571ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c8:07:23:a7:7f:ab:42:7a:72:ec:0f:fd:3a:
                    7a:53:32:71:6f:7f:17:31:a2:e2:f9:e2:95:3c:b0:
                    1e:7a:43:2d:0c:ea:79:55:e6:f2:87:2b:61:41:ea:
                    17:c0:34:b5:c3:50:21:b9:ba:a9:d3:82:f0:87:21:
                    af:54:03:81:bd:07:9b:88:f7:a6:84:e2:5c:19:32:
                    5d:bd:1d:a9:f6:f3:8b:af:8f:3f:bc:0d:6f:81:39:
                    38:fc:6e:ea:b5:c3:5d:91:d6:73:92:3d:81:43:99:
                    d1:2a:d9:85:9f:f5:b6:44:18:2a:f6:8c:af:29:5d:
                    29:d8:82:be:2d:39:a5:fe:ba:01:92:e4:4f:20:48:
                    bf:41:c6:71:b7:7a:0a:83:73:c7:60:a9:65:dd:39:
                    21:ea:e6:b8:fc:3d:35:1d:63:6b:7b:bf:02:f1:ee:
                    58:55:6b:14:56:81:d9:1d:bd:ba:0a:8c:6d:52:19:
                    e2:d1:51:d1:ed:54:8b:4e:e7:bf:9a:43:c9:8f:47:
                    37:18:e3:a5:96:7b:8d:67:c1:e6:2e:eb:e6:34:4a:
                    cc:c5:96:95:8a:45:2d:d0:72:06:8b:c1:4a:f8:4f:
                    2d:b0:5e:19:57:96:10:76:5f:0d:a4:bc:12:2a:09:
                    74:1d:a4:79:7f:4b:2d:b9:5a:2a:10:54:c3:ca:5b:
                    72:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:41:20:5D:DF:AF:35:FC:D2:B0:FB:6C:E0:46:94:1E:AE:35:71:EF
            X509v3 Authority Key Identifier:
                keyid:BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:ee:3e:24:60:15:4b:85:5b:db:7b:6f:19:5d:33:11:0c:c1:
         d3:65:3a:23:cd:f3:95:21:41:fe:ec:44:a7:f8:b8:c4:96:b2:
         24:9b:74:60:3b:be:4d:5f:a2:97:0a:8b:18:9c:35:bf:da:a7:
         50:fb:c2:05:5e:a4:9a:3f:da:7d:b7:b5:75:fe:f9:d9:64:35:
         bb:fe:5c:85:a7:c3:42:7d:0e:6e:a5:1f:43:f1:10:6d:24:15:
         9a:f4:de:e6:c4:66:70:a6:ce:25:ae:b4:8c:d2:bf:23:80:d1:
         c8:1c:56:9c:48:10:c8:97:cb:89:ac:bb:20:f8:1e:95:93:28:
         1a:de:d8:87:20:76:98:99:f3:0f:47:c3:89:75:f4:f2:9e:1c:
         7c:02:b2:3f:eb:94:8b:aa:6d:80:d7:ca:d9:bc:dc:6e:0d:53:
         6f:d6:e6:90:f9:bc:00:16:0e:25:bc:47:aa:83:89:db:bf:9a:
         de:7c:38:bf:c2:9e:0b:00:fa:a9:17:31:84:cf:9d:7d:99:8e:
         92:fc:a1:50:c1:35:0c:bb:c2:fd:19:5a:6e:63:3c:c1:c2:95:
         16:38:18:c7:a1:be:a6:d6:6f:c0:20:6b:9f:de:84:08:d9:81:
         5c:06:43:8b:a0:16:42:32:09:1b:72:b3:39:c4:22:97:c8:82:
         3f:aa:0b:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHaywZychUzmihZU/jYIANRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiY2EzZjI1ZDU0NjIwYjUwZWY4NTIwNjU3NjM0ZDNiMDk2
YmFjNTcwHhcNMjYxMTE0MTYwMTQwWhcNMjYxMTE1MTYwMTQwWjAzMTEwLwYDVQQD
EyhlMTQxMjA1ZGRmYWYzNWZjZDJiMGZiNmNlMDQ2OTQxZWFlMzU3MWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8gHI6d/q0J6cuwP/Tp6UzJxb38X
MaLi+eKVPLAeekMtDOp5VebyhythQeoXwDS1w1Ahubqp04LwhyGvVAOBvQebiPem
hOJcGTJdvR2p9vOLr48/vA1vgTk4/G7qtcNdkdZzkj2BQ5nRKtmFn/W2RBgq9oyv
KV0p2IK+LTml/roBkuRPIEi/QcZxt3oKg3PHYKll3Tkh6ua4/D01HWNre78C8e5Y
VWsUVoHZHb26CoxtUhni0VHR7VSLTue/mkPJj0c3GOOllnuNZ8HmLuvmNErMxZaV
ikUt0HIGi8FK+E8tsF4ZV5YQdl8NpLwSKgl0HaR5f0stuVoqEFTDyltyLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOFBIF3frzX80rD7bOBGlB6uNXHvMB8GA1UdIwQY
MBaAFLvKPyXVRiC1DvhSBldjTTsJa6xXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdThvX0pkVkdJTFVPLUZJR1YyTk5Pd2xyckZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi81NjFkMjQtZTkyMS00ZWM4LWE2MTEt
NGRjMjBjNWI2MjY4LzEvdThvX0pkVkdJTFVPLUZJR1YyTk5Pd2xyckZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi81NjFkMjQtZTkyMS00ZWM4LWE2MTEtNGRjMjBjNWI2MjY4
LzEvdThvX0pkVkdJTFVPLUZJR1YyTk5Pd2xyckZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq+4+JGAV
S4Vb23tvGV0zEQzB02U6I83zlSFB/uxEp/i4xJayJJt0YDu+TV+ilwqLGJw1v9qn
UPvCBV6kmj/afbe1df752WQ1u/5chafDQn0ObqUfQ/EQbSQVmvTe5sRmcKbOJa60
jNK/I4DRyBxWnEgQyJfLiay7IPgelZMoGt7YhyB2mJnzD0fDiXX08p4cfAKyP+uU
i6ptgNfK2bzcbg1Tb9bmkPm8ABYOJbxHqoOJ27+a3nw4v8KeCwD6qRcxhM+dfZmO
kvyhUME1DLvC/RlabmM8wcKVFjgYx6G+ptZvwCBrn96ECNmBXAZDi6AWQjIJG3Kz
OcQil8iCP6oLag==
-----END CERTIFICATE-----
Generated at Sun Nov 15 01:21:19 2026 by rpki-client