Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
File:                     uFsMinWJOk-OHvDZpNQUeNizMng.mft (raw, json)
Hash identifier:          LoVF0ewuQe4pyheH3kWQDzaxy5LMGXaOmg5NKrDKFHA=
Subject key identifier:   0B:A8:C2:90:33:D5:C6:3C:E6:34:B4:3D:5C:EF:3E:EA:17:72:AC:F8
Authority key identifier: B8:5B:0C:8A:75:89:3A:4F:8E:1E:F0:D9:A4:D4:14:78:D8:B3:32:78
Certificate issuer:       /CN=b85b0c8a75893a4f8e1ef0d9a4d41478d8b33278
Certificate serial:       01A1DD95343DDD27835F9937BB86DD0A0AAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
Manifest number:          1A58
Signing time:             Sun 15 Nov 2026 05:01:45 +0000
Manifest this update:     Sun 15 Nov 2026 05:01:45 +0000
Manifest next update:     Mon 16 Nov 2026 05:01:45 +0000
Files and hashes:         1: 8y3Tj4TsEaNV9uqE3_Wm8d75SXY.roa (hash: yZH4sqNiTJoNNbuM1J9mJYZWJbe1HILioSLqth5sEdY=)
                          2: HVxmAfBjZ6ZLdFwLWBto8AESvAs.asa (hash: hcVfaTwHi+0pfWKV+QVinfnUuQbFH+9lvzWtmpQvDYI=)
                          3: HqKAWum-OFZ9NLI9L0i8Qooknqs.asa (hash: lOJrYcM36+x+F6jmp2VCjFJX1AVn86mOQN9gIP6YbRA=)
                          4: Rgy-IpjS7BdWBWjYpEPLEyx392E.roa (hash: OBWGC6j1m0+8CXMlm/mj1fnd0qpOC8RX7s3qenErgDo=)
                          5: uFsMinWJOk-OHvDZpNQUeNizMng.crl (hash: gcFjuRDjeag5Qtv8nFJM4+SF71q9SIkqnhNpRp+0ZrI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 05:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:95:34:3d:dd:27:83:5f:99:37:bb:86:dd:0a:0a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b85b0c8a75893a4f8e1ef0d9a4d41478d8b33278
        Validity
            Not Before: Nov 15 05:01:45 2026 GMT
            Not After : Nov 16 05:01:45 2026 GMT
        Subject: CN=0ba8c29033d5c63ce634b43d5cef3eea1772acf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f9:cc:0c:3e:a2:95:d1:3c:d8:ec:73:ec:d9:
                    10:a4:aa:3e:fc:7d:e8:bd:ef:5f:b7:4c:03:00:f7:
                    28:84:06:1c:d8:fe:82:68:26:f3:db:85:97:e2:95:
                    c1:dc:e7:8f:55:78:44:0c:ee:c5:f8:4d:df:62:68:
                    d1:6d:d9:3a:24:2a:a5:0d:5f:f7:0e:2e:b8:36:39:
                    75:26:d4:8b:8e:64:16:c8:83:29:6f:66:71:a6:3f:
                    65:bf:7b:bc:10:eb:3d:7f:f2:22:55:2e:ac:e9:b1:
                    88:73:ea:c6:39:0e:07:d7:1a:dd:aa:c1:15:a9:33:
                    40:c6:e5:2b:33:e3:3f:72:75:51:67:7d:6a:87:30:
                    0a:d2:5a:95:a5:9c:8e:87:01:32:6b:b7:12:8e:9d:
                    5e:b5:15:d5:86:d8:2c:1f:3d:61:c5:b8:3e:eb:ff:
                    20:91:7b:cd:95:fd:76:71:b8:93:eb:f4:c8:b8:a2:
                    54:41:42:3e:0d:13:cb:4a:9f:49:a0:57:5e:79:8a:
                    56:6d:f9:96:28:91:4f:74:59:42:3d:5d:ce:74:13:
                    9a:a7:a7:23:62:9b:c4:94:b7:a4:07:e8:1c:c1:b1:
                    a5:8f:dd:62:6c:77:fe:57:c1:92:ec:88:51:6f:49:
                    7f:67:12:23:4d:76:83:ca:9e:69:5f:a1:9a:dd:f5:
                    8d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A8:C2:90:33:D5:C6:3C:E6:34:B4:3D:5C:EF:3E:EA:17:72:AC:F8
            X509v3 Authority Key Identifier:
                keyid:B8:5B:0C:8A:75:89:3A:4F:8E:1E:F0:D9:A4:D4:14:78:D8:B3:32:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:fc:73:54:f4:a0:09:1b:4f:18:19:16:96:7b:05:a5:e4:11:
         1a:eb:dd:99:6d:11:57:ae:f0:72:08:b5:3b:3d:6a:47:cb:9b:
         75:a6:7f:63:8c:93:90:5d:4b:fa:3b:2f:1e:6c:69:77:5f:84:
         d3:e5:fb:d6:d2:8a:5e:23:25:21:81:f7:06:65:df:9e:94:cd:
         61:0d:c8:b5:71:c2:28:08:63:47:e8:8e:8b:6b:10:54:0d:89:
         66:74:a9:90:00:93:44:9a:f7:7a:f0:25:da:2f:ae:21:36:57:
         b3:26:77:51:31:a0:df:9a:05:cc:7e:39:6f:16:3f:8a:4b:60:
         02:e5:a8:85:30:1e:3f:c2:5c:23:dc:e9:a4:96:cc:71:fb:5c:
         ac:c0:81:c8:30:76:06:59:26:2a:25:77:d1:78:d9:6f:b9:f3:
         2b:82:66:e4:b6:c7:3d:23:39:99:c7:d8:ef:bb:8a:f8:f7:61:
         ff:ea:a1:b3:6f:b6:d7:be:c2:8e:16:2e:65:54:19:44:ff:68:
         8f:7a:a8:92:fb:e2:ec:38:36:72:22:4e:02:07:18:0f:32:6e:
         4f:4d:6d:a5:5d:81:54:01:4d:52:db:43:f5:f1:86:e7:bd:a4:
         16:99:9e:ab:94:9a:62:7f:cc:e4:94:8c:51:19:79:8a:63:b9:
         c0:e0:25:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:46:37 2026 by rpki-client