Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
File:                     uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft (raw, json)
Hash identifier:          rEmJ9+hq6cgEBm0yV423q90ksz/h8Kuxq7Vb+0suY0s=
Subject key identifier:   F1:B5:78:9D:58:68:C8:09:C4:DC:31:34:29:0E:1B:34:FF:BE:E6:10
Authority key identifier: B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
Certificate issuer:       /CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Certificate serial:       01A1DBA6A58A905DB81B544610E23444A808
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
Manifest number:          141C
Signing time:             Sat 14 Nov 2026 20:01:33 +0000
Manifest this update:     Sat 14 Nov 2026 20:01:33 +0000
Manifest next update:     Sun 15 Nov 2026 20:01:33 +0000
Files and hashes:         1: 8B0Xvmidug3oJBFQNiVZ03LjllY.roa (hash: P1kj5JyGbpjO7k/9XiZFP26S2h0cS9e/Ah5VKAIZkgI=)
                          2: AwKBOhlF9uaXHOgDwaWxiRTycC8.roa (hash: ulOM++8A5dnNmN9Kuzc/O4/HWsO5q48Fbn6dGRtakzw=)
                          3: lkqdEp6LwoeInW4-nbYEOMBruSw.roa (hash: LFD9MHEpAP74xMJWDo+tJr71CtFOG7i1RauaAjnGFMU=)
                          4: pSuYpl6WxbthlcwSwOwfJ2eEOEM.roa (hash: 0ZM4/++BdSQLGaayny50tbB3TCayRFezzAq6CjxEPBs=)
                          5: uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl (hash: YxUG+9mGYnYmv55irvFjiuQtbZRCMpQVxA3RcV050Qk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:a6:a5:8a:90:5d:b8:1b:54:46:10:e2:34:44:a8:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
        Validity
            Not Before: Nov 14 20:01:33 2026 GMT
            Not After : Nov 15 20:01:33 2026 GMT
        Subject: CN=f1b5789d5868c809c4dc3134290e1b34ffbee610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:68:54:a3:f3:bd:e8:5e:d8:19:a6:f8:88:b3:
                    8f:1d:7e:19:4f:d1:00:15:87:81:bf:2b:92:45:9b:
                    f8:71:7b:03:3c:dc:c8:a3:3f:62:3b:5e:f0:c4:0f:
                    18:02:eb:a6:af:3d:bb:fd:ac:c1:f9:90:67:89:c6:
                    e6:62:6d:ff:da:e4:8e:dd:62:59:b2:86:ef:e9:22:
                    b6:56:d4:52:57:82:c4:e7:6c:22:6c:35:7c:ca:f1:
                    ae:09:92:eb:c1:db:4f:01:57:47:5a:bb:6f:ac:29:
                    7d:7f:41:df:e5:5a:74:28:d9:bd:e6:66:b2:67:d2:
                    49:81:ab:4f:c7:1b:ba:b3:47:50:e1:fa:ef:e3:28:
                    e6:ed:87:f4:18:77:d6:95:9d:de:55:a7:25:3e:ce:
                    cc:95:1c:da:14:24:31:c4:6c:b0:15:bd:dc:0e:f8:
                    27:ea:5b:b6:6d:38:d4:ee:cb:ed:1f:1e:2b:b0:d0:
                    c2:ed:22:81:45:bd:92:22:14:8d:30:b3:fa:09:42:
                    93:f1:07:ed:c4:68:2b:29:10:a4:72:7a:35:e3:08:
                    ac:73:35:4f:6b:a4:71:6c:87:e8:26:a1:72:4f:a5:
                    91:a7:02:4f:de:a8:fb:53:b7:32:24:d7:a5:1a:fa:
                    22:b5:3c:bd:c7:b6:61:af:f1:e5:bf:b5:3a:d7:bb:
                    99:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B5:78:9D:58:68:C8:09:C4:DC:31:34:29:0E:1B:34:FF:BE:E6:10
            X509v3 Authority Key Identifier:
                keyid:B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:86:3a:a9:62:25:52:65:b9:09:13:d6:7b:77:ba:aa:04:9a:
         d9:29:b1:6d:fe:7e:69:91:84:88:6c:05:b3:b4:8c:fa:6f:ae:
         3e:16:75:3d:97:77:3e:06:ea:20:29:5b:96:17:78:f6:c7:c3:
         39:0b:d7:fe:e8:82:f5:a2:9e:8a:a5:da:ae:45:02:a5:b5:be:
         a2:2e:ab:46:9b:3f:e9:c3:2b:47:96:1b:b0:c2:43:ed:68:62:
         17:c6:18:ff:9f:dc:38:3d:80:3f:88:b2:71:f9:67:55:ec:24:
         5c:68:6b:76:24:de:b4:b5:71:27:11:e5:eb:dd:da:c2:de:cf:
         26:ba:73:17:23:5b:8a:0f:83:c0:cd:b8:81:8e:9f:90:63:a6:
         78:54:e7:1c:1d:0c:3d:04:57:1d:28:a8:6b:57:e1:44:c3:85:
         28:03:c6:0e:91:3a:9b:76:fb:fa:c5:81:6d:6d:61:84:d0:7d:
         ce:68:bf:54:c6:7d:21:27:22:cc:1a:65:d5:3d:76:28:5a:04:
         b1:fd:5f:b4:ea:06:78:3b:b1:27:3b:d4:97:95:6a:57:43:d6:
         38:c1:3e:a8:a7:f7:10:c8:2a:2a:50:ee:81:78:67:ca:73:22:
         67:39:a4:8a:bf:64:a3:26:c9:d1:47:79:be:1e:00:46:5d:8b:
         00:81:15:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:40:40 2026 by rpki-client