Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
File:                     b8UNDUIGe3arGi6OUz_4SbZdVvU.mft (raw, json)
Hash identifier:          15tVgUVeHIMtMbu2S92QryUIc4hLnwS5T1UJnrIFCrQ=
Subject key identifier:   91:73:26:67:61:F5:3A:72:0C:0C:F7:F5:EA:D7:70:89:67:4A:45:0A
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Certificate issuer:       /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial:       01A1DB387098DC801B1461DB9F88671E4383
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
Manifest number:          1B3F
Signing time:             Sat 14 Nov 2026 18:01:11 +0000
Manifest this update:     Sat 14 Nov 2026 18:01:11 +0000
Manifest next update:     Sun 15 Nov 2026 18:01:11 +0000
Files and hashes:         1: 0xFWfHW7GY6Nkdg9v8OrIxAGKR0.roa (hash: 3jW2LgWlXGkII3xaJQKFa/dhbFZ5BJ4E9nR+13xQa+M=)
                          2: Dv8Xj573URhelnbmcJLlhmPDGD4.roa (hash: qlnvjr9BaLF0/kBmFp/g12eWnCcKOHwXVrBxaeJlhqI=)
                          3: ErxTNyERBBDMhHQ30nH0srvQHWE.roa (hash: vCvge335d0b4IZOO+kvKrubjYExpx9nKBs7ZlxM4sEY=)
                          4: GokOnLgcwEKBfp_sk2MIuuQ-_TY.roa (hash: zQRRa9NS4gIwYEiBt9K5iRhHmWoyu+BxEByrxS3tpEY=)
                          5: V66mUyeO5X_O6JGUAL_LInwhpW0.roa (hash: WTpJ/+xyEsdWBV9e8DfdpDEOxLLOMxmk9zRPy8of4Nw=)
                          6: WAFGlC69-0ob11MbBQG2gcGKWnk.roa (hash: fs3/LEyDskuqCQv30OKbL6do/sufFAX29xlb3wrGuaA=)
                          7: XDZVE2H-rsPZgQbqZ-ZDnwVCBJE.roa (hash: mmhVNux+nbC3xbiA2Kc+Nt37HPq07j1yfnjM8K5A6t0=)
                          8: b4JEVE3QPzkNygQLlI0iBGroxU0.roa (hash: GbTRuy5jkEUqjUNqE8oi/B2zDg7qLzkinV68BhIMhV0=)
                          9: b8UNDUIGe3arGi6OUz_4SbZdVvU.crl (hash: QyU7z2sgMVVFjaROYfNL1Sv3z8PNJHYsTBBFEqk3NFI=)
                          10: fX3KuGbBaSgozBC8VJSKif-SJWQ.roa (hash: YvJvbJ8D5DpHd4D9ZPHBQEllNbujWBnvbGsXVYfxrbQ=)
                          11: hS05mveN2aMKs32vgPN62OxZyU4.roa (hash: ppIsNge7NuGGbn+pU/a2PkG/ZsHka3x0Ag4o3/gijLY=)
                          12: iLauOm2qK9XnqY9ztUU9moKfnvg.roa (hash: MD/6ZVmSej56cLCXyFeTYzesox6xFljqFiihcyr2blE=)
                          13: mOIM-oZXOhPXcspDNu9QRUce9wI.roa (hash: TX23tkqgD+PXYsu3SvaWNxNHNfg0oQahFUpEkkPiqP0=)
                          14: rKU1mC3UrxRCEsXb-l25oaEBhJw.roa (hash: 4jepadulIWtRtacZBukRLsOXuyzRr5YeactatRKpnlE=)
                          15: rquvuLK-rYGovEC3HmK5u93318g.roa (hash: mwUbj+STMP20PJ2zxgTJv5v0LJixxc8GF7ah0C6+1HQ=)
                          16: tbUnyuDY7UDc9s9Pi2PMZZi8JHs.roa (hash: nJyY8ay9th+CegqldK3i2YFyDGeEiiTQjam/4aSux9E=)
                          17: wCrdreEenBFJr40kfhAiXxXP4VE.roa (hash: 1w9FYdnTnijOy22xqaq4vC9r9i/Zq/2AJnQG0P3/L0g=)
                          18: yX_yhv_jUUfVVPMPnlpzUI5cFxs.roa (hash: bg6ibEfMDVCBPduOQFB/gGWqEjD+qw8SCbixEdu1S7Q=)
                          19: zyjvREkWFF6X7pbwt-H3M-ZqZks.roa (hash: HtAgtb461giJt36H40FvVS9Xbx1kevgnUEyHwD9fYBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:38:70:98:dc:80:1b:14:61:db:9f:88:67:1e:43:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
        Validity
            Not Before: Nov 14 18:01:11 2026 GMT
            Not After : Nov 15 18:01:11 2026 GMT
        Subject: CN=9173266761f53a720c0cf7f5ead77089674a450a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5a:1f:06:51:b4:39:6b:da:90:ac:e5:03:48:
                    96:a8:1c:44:98:88:12:db:32:59:de:4c:5c:b8:c6:
                    7b:e0:1a:7b:e8:7a:14:7d:36:eb:6e:c6:c5:43:ba:
                    b7:c1:f8:ab:2b:a9:5a:90:fe:0e:36:df:bb:44:02:
                    ed:c2:1c:2c:8b:0f:6f:39:c7:97:e2:d0:fc:fb:eb:
                    4e:eb:df:e3:fb:65:bf:23:32:5e:b4:5c:76:98:8b:
                    d6:9e:54:12:9d:81:39:da:fe:76:5b:6c:21:8a:89:
                    e7:0e:4e:e4:5b:c7:ed:d0:16:82:d6:93:0b:6b:d0:
                    ca:4c:3c:7a:a1:52:1e:8c:76:11:39:12:f9:ee:3a:
                    86:84:44:ae:f5:8e:1c:6c:c9:dd:af:2e:9e:69:8b:
                    0a:7f:29:15:26:bd:70:76:dc:1a:f9:5f:0b:5c:19:
                    4c:f1:f8:15:53:88:b9:cb:9d:74:e1:13:f0:6c:82:
                    e2:b4:d3:09:a2:31:f1:ef:c2:cf:cb:e3:46:3d:29:
                    45:ab:74:89:b7:67:e3:85:fa:51:ee:d9:e3:02:4d:
                    06:41:8f:7f:ee:6c:58:12:fc:d9:ef:ae:61:ab:61:
                    62:4d:78:b0:46:d9:1c:db:96:f6:10:22:9c:82:79:
                    de:b9:f1:22:44:82:37:63:72:15:31:16:2d:12:fe:
                    53:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:73:26:67:61:F5:3A:72:0C:0C:F7:F5:EA:D7:70:89:67:4A:45:0A
            X509v3 Authority Key Identifier:
                keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:af:a5:5c:54:69:8f:66:fa:3f:22:3b:77:84:50:6a:7f:6b:
         98:e3:8a:d4:d0:60:13:c9:fb:11:85:74:4b:ba:c5:9e:47:d0:
         64:06:88:bf:05:c5:e7:0c:e2:09:8e:9c:5c:f2:25:33:d8:cd:
         e5:50:98:70:45:d7:6f:68:d8:fd:d5:25:81:65:99:c4:32:29:
         12:a8:7b:74:02:1e:56:71:7e:40:c9:8d:50:8a:83:16:a9:e2:
         73:40:e9:25:f9:0f:52:96:c2:21:e2:fd:ae:55:49:22:58:6a:
         af:81:7d:84:03:c8:f1:7a:5c:a5:7f:dd:9c:48:44:10:f5:65:
         02:a1:b3:27:35:2b:11:f8:c5:26:bc:c6:c6:69:e6:4a:a6:90:
         c4:1f:63:38:be:32:73:db:f9:ed:41:50:30:78:5b:61:ed:9b:
         62:7a:25:1d:98:c2:76:11:de:84:0a:fa:a3:13:99:bd:2b:31:
         94:c3:37:d3:a0:7a:0d:fc:62:3f:95:ee:4b:b9:54:59:5a:cb:
         dc:0c:e0:5e:c5:45:fb:87:6d:8e:51:8a:ac:b7:ab:86:7a:d9:
         1e:03:99:39:6f:fa:00:81:0c:52:87:02:9f:98:58:03:8a:9e:
         dc:59:fc:68:16:48:79:23:a6:b3:5b:e7:79:26:66:9f:49:fe:
         16:63:b0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:37:16 2026 by rpki-client