Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft
File:                     v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft (raw, json)
Hash identifier:          SC6N/ZOYBTLrXdBmqRytMRq3bM2aYDeAEA/I9tGkirM=
Subject key identifier:   AA:63:BD:89:14:BC:F6:30:FA:91:2A:24:D8:EF:F8:ED:A9:F4:27:D4
Authority key identifier: BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25
Certificate issuer:       /CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125
Certificate serial:       01A1DC142B4A366E3EB2CDF20DC37CDCF2F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft
Manifest number:          1B03
Signing time:             Sat 14 Nov 2026 22:01:11 +0000
Manifest this update:     Sat 14 Nov 2026 22:01:11 +0000
Manifest next update:     Sun 15 Nov 2026 22:01:11 +0000
Files and hashes:         1: Flz_OFQsmX-w-Rd12UyQRHMKatw.roa (hash: JA3smf8ytCG+n6SIrvOZ9o06IVKgViJsuYy9wwAuvgw=)
                          2: Iso7UtudzqybI9P-u3N4xN3OFFA.roa (hash: 0IZeZas6NGaEqB4YndDnq080rW0AwifZGEDKnTQjRRg=)
                          3: R-fseu38BXZxWnP0LRUzT06RrV0.roa (hash: WBYn5t2LzQwRk5CEk7ZRIj5Al789B5wx6blN8odTtJA=)
                          4: Ul_Wf7zGibMnBoONOBmC-CbebuE.roa (hash: rHROysQB1FOGTFZPpOKof8CKn+9ezFraJbOm+zE4tGw=)
                          5: iEjKKLRDgJz2LhvN_sxHnJkxBc0.roa (hash: OfSTMvRyldawaL7wcMvycL+8+eQXeUtcB3572S96OXc=)
                          6: k1dO5v20V18ZdNp1zmkc6LIciGg.roa (hash: 438dqyns6emIjrk0QOOi1yUCaMjxkliDFNzKcc/PdRA=)
                          7: v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl (hash: ZT7nrbrUXblk65yo+BYpWdOvepW63swuFwRcW8IVrGk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 22:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dc:14:2b:4a:36:6e:3e:b2:cd:f2:0d:c3:7c:dc:f2:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125
        Validity
            Not Before: Nov 14 22:01:11 2026 GMT
            Not After : Nov 15 22:01:11 2026 GMT
        Subject: CN=aa63bd8914bcf630fa912a24d8eff8eda9f427d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:91:b1:23:65:0f:08:c8:43:d1:1a:90:89:99:
                    2b:47:e5:ce:76:80:aa:f2:d2:06:fd:59:45:9e:3f:
                    dd:62:d5:72:cb:01:a1:8e:26:e6:d4:8d:34:99:55:
                    39:61:71:58:2f:cd:49:57:f0:73:bb:20:b1:fd:16:
                    26:8e:9c:51:77:ae:b4:23:02:60:b9:c7:02:ad:8e:
                    42:76:7a:06:62:4c:a7:94:c7:ff:fc:96:fd:56:03:
                    ef:be:d1:cd:cf:1a:fe:a2:f8:3c:9d:e2:fb:8e:7f:
                    43:9d:75:41:8a:0a:cb:6d:8c:c0:de:cf:01:83:32:
                    27:e7:7a:9a:69:ee:a1:b9:72:86:dd:c2:3b:e8:7c:
                    10:e5:da:6f:08:dd:df:ee:78:29:a6:c8:34:2d:02:
                    70:2c:58:a3:c9:d3:7e:c7:73:b8:0b:56:75:25:96:
                    14:b6:83:ea:41:05:06:31:91:e7:0e:c6:d6:13:64:
                    ef:c8:fb:15:b6:b0:15:a3:49:dd:46:4a:aa:19:6c:
                    f3:fc:04:6c:2d:5f:1f:49:a3:ef:8b:f4:8a:aa:49:
                    ac:d5:28:9d:23:ae:28:57:f4:66:a2:19:2f:f1:7e:
                    4f:5a:8e:10:d7:39:17:9f:c9:02:7c:fa:f7:44:ed:
                    6d:f1:9b:fc:60:33:f4:d6:fc:8a:71:4b:a8:06:00:
                    c5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:63:BD:89:14:BC:F6:30:FA:91:2A:24:D8:EF:F8:ED:A9:F4:27:D4
            X509v3 Authority Key Identifier:
                keyid:BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:f8:80:cb:df:f2:00:df:66:09:21:01:b7:6b:45:a3:69:8e:
         bc:bb:f3:c1:e3:ff:89:6a:12:9c:92:d1:81:a8:6a:99:c8:03:
         01:04:49:92:07:32:be:82:b7:4d:40:65:5d:53:cc:6e:88:14:
         28:43:c2:58:ea:1d:f9:e5:f9:22:c3:d8:bb:c3:e0:38:f5:8a:
         81:f4:23:9a:1a:97:78:6e:af:14:21:ac:a9:3d:fe:44:65:df:
         3b:fe:c9:b5:f3:12:c0:47:01:14:a3:39:0e:1e:c2:40:62:66:
         22:be:53:fa:67:98:f8:b1:62:07:fe:32:b9:e1:a1:5a:5e:b1:
         f1:e8:f9:fe:be:18:0d:e8:dc:27:3c:23:98:d5:67:09:b0:ae:
         64:7a:2c:70:60:6e:4b:2c:36:73:ad:56:66:1d:0a:0c:22:96:
         30:6c:47:30:34:8b:e1:cb:8c:ac:f6:88:ab:e4:6a:3f:86:f9:
         98:6e:1f:cb:87:a2:5e:93:2a:9e:9d:57:f0:0b:fb:72:4a:d3:
         1c:50:cf:82:f7:8e:97:27:46:d1:4e:6f:52:56:6a:23:86:29:
         aa:cc:35:b8:c8:79:8b:0f:d2:f9:93:e0:9d:d3:a7:41:fa:f2:
         b8:34:c4:ca:31:4b:27:a5:d5:c7:a7:39:1a:71:d5:c0:59:23:
         fc:d0:a2:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHcFCtKNm4+ss3yDcN83PLzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYzQ3MGU5YjU4ZTU1N2VhOGMxZGJlZGFlYjljNmE1ZmM0
NTUxMjUwHhcNMjYxMTE0MjIwMTExWhcNMjYxMTE1MjIwMTExWjAzMTEwLwYDVQQD
EyhhYTYzYmQ4OTE0YmNmNjMwZmE5MTJhMjRkOGVmZjhlZGE5ZjQyN2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5GxI2UPCMhD0RqQiZkrR+XOdoCq
8tIG/VlFnj/dYtVyywGhjibm1I00mVU5YXFYL81JV/BzuyCx/RYmjpxRd660IwJg
uccCrY5CdnoGYkynlMf//Jb9VgPvvtHNzxr+ovg8neL7jn9DnXVBigrLbYzA3s8B
gzIn53qaae6huXKG3cI76HwQ5dpvCN3f7ngppsg0LQJwLFijydN+x3O4C1Z1JZYU
toPqQQUGMZHnDsbWE2TvyPsVtrAVo0ndRkqqGWzz/ARsLV8fSaPvi/SKqkms1Sid
I64oV/Rmohkv8X5PWo4Q1zkXn8kCfPr3RO1t8Zv8YDP01vyKcUuoBgDFuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpjvYkUvPYw+pEqJNjv+O2p9CfUMB8GA1UdIwQY
MBaAFL/EcOm1jlV+qMHb7a65xqX8RVElMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjhSdzZiV09WWDZvd2R2dHJybkdwZnhGVVNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yN2IzOWItMDQ0OS00YzY0LWJhNzkt
YTJhYTY1NDBmODc1LzEvdjhSdzZiV09WWDZvd2R2dHJybkdwZnhGVVNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8yN2IzOWItMDQ0OS00YzY0LWJhNzktYTJhYTY1NDBmODc1
LzEvdjhSdzZiV09WWDZvd2R2dHJybkdwZnhGVVNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPfiAy9/y
AN9mCSEBt2tFo2mOvLvzweP/iWoSnJLRgahqmcgDAQRJkgcyvoK3TUBlXVPMbogU
KEPCWOod+eX5IsPYu8PgOPWKgfQjmhqXeG6vFCGsqT3+RGXfO/7JtfMSwEcBFKM5
Dh7CQGJmIr5T+meY+LFiB/4yueGhWl6x8ej5/r4YDejcJzwjmNVnCbCuZHoscGBu
Syw2c61WZh0KDCKWMGxHMDSL4cuMrPaIq+RqP4b5mG4fy4eiXpMqnp1X8Av7ckrT
HFDPgveOlydG0U5vUlZqI4Ypqsw1uMh5iw/S+ZPgndOnQfryuDTEyjFLJ6XVx6c5
GnHVwFkj/NCiIg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 09:52:28 2026 by rpki-client