Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
File:                     1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft (raw, json)
Hash identifier:          ge0bN3xL1zS5XPPKLpvk3O6MOso2Wp4cSNcl7gKzzXg=
Subject key identifier:   FF:16:12:3A:01:F9:F6:5D:0F:2B:E6:47:05:C0:70:AE:01:EF:40:94
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Certificate issuer:       /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial:       01A1A9A73F980D250AF38E4413C2CD51FF6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
Manifest number:          1B22
Signing time:             Thu 05 Nov 2026 03:01:12 +0000
Manifest this update:     Thu 05 Nov 2026 03:01:12 +0000
Manifest next update:     Fri 06 Nov 2026 03:01:12 +0000
Files and hashes:         1: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl (hash: sCmSNc1AP2poP9afi29VYHbMiZLRubdvQN6aetejuCs=)
                          2: 1-n7EdeFX20C6cFMyJ6Y5HWVMQU4.roa (hash: suKN0U6xP/FTkPKNJxFCA4VBUPU7v0a/LfB27Kibl1k=)
                          3: 5Ai_sIZQJB8aFtzqYvSr9B7GuOU.roa (hash: 6wnMllVhpaDtM68Ah+lycy0EGi1lfhyp8UE1fOfc3rk=)
                          4: 5Ha6MbyvDRVWuZ4qUrOsdBkSIFs.roa (hash: UIor+BCs9mrPP+0b8Lrn7HV4ATlK3jTAi1j4A256yaM=)
                          5: 6nafakW_FoiGF0x1s1VoLFJqiuw.roa (hash: tSlSVShZ1Ws+SLODMKOJpPu4G+R5CcazLAH7YNSqZ2c=)
                          6: 7Dwg5wFGQqErSuNtav6wSEytWn0.roa (hash: KeyWkMo6tHKMd0UPR13FjorhMTn+dRjqc0BqAQPkOvs=)
                          7: 8KG06O_ShOw-fAgF9hGpdzf3xEY.roa (hash: DVd/NvS4nhNxcSUkNJDTh5SmK4Clg69CxGJbu7seCkM=)
                          8: 9wtyd_oclLUMViGWblNWlEAAOPQ.roa (hash: K2AWf+HALDuM6Uz23jlAWhflFeUexuIRM5RCtHWCEPc=)
                          9: C0VnbFyJGyh-3dXIXN-FVbbzva4.roa (hash: nupbKfiMh1Vbm5eU6VpPOjsRTYtweNUnX1ebsHaK4hQ=)
                          10: CT3vMjevN0fYRTlNcJsck0hB60Y.roa (hash: 85AL/YEBSQNN6+KYNgUrlSLsBbfZxOy5uaLrLJGec+M=)
                          11: GnQ9nonV43lnZNoCG-ecdWqOLDk.roa (hash: 5lmMKt+idSdfaSrOW6fzEjOhALbxhOPcgnKdUuSF0JY=)
                          12: HtH0MnipsTVE3F-9FNtiu_2LNwQ.roa (hash: BGn13AFdqwObLZ5mjHyJ0u9f6CC1n+u2Nsk2L6TLrao=)
                          13: MaRo3qPa_AXa-98seLnNkzlSlLM.roa (hash: ji8JHlcGAHWKEBT5OFXPF3gvRuoRQByWZBo69DobjWw=)
                          14: W-cWYMFcdHDS1yv5jkAVjyp5ho4.asa (hash: QdAC+W0wfurd2BssKpz9U5P9YKTKUM6ZjHzLGg+JdOA=)
                          15: cQJLykBOqMGgV5KV9rcPZr-_U1Y.roa (hash: aOQV+i/NapnfOnLvAQ3Zr9czxxA22kZuub947U3fZRw=)
                          16: cRp-cVmkypbBe3-5hQ3MERFfdvI.roa (hash: af21yk690TVm1yoO9i+WiH3Y6Q+lKgW5WAHD9V6wAgo=)
                          17: fyxZLGtBW9e59RZ3aEwSKlhWT4w.roa (hash: itxLmMXkodUFbwqD5SmQmqHBd8MyF3lpLKdM1WEIZu0=)
                          18: ipuMNUIFJfwrG69f0t1BcA9T-lo.roa (hash: E/49CgkatlS4HbWzI9f4jj29KOBht+FWKi5pYDsrCiU=)
                          19: oOmWYS79EfLZM1YUVX02Dm8sbCI.roa (hash: UMtyOefWK95ZFcwkFudLsDtrliJckAkSIFBXdWfp+zQ=)
                          20: odS4gJ1H-haIP2hfRvP__EIClnA.roa (hash: frbBPZZ05GoX1i3mLnaN+IdXbfyMrpl7+ZrlTRvKVwQ=)
                          21: pHgh0geILg2H9c8tNXl-coocbok.roa (hash: MiAWsYu39mO81MmSrazkuF8uttZJWXsnb0YqEMhZmqc=)
                          22: sE7fbSG0iBstRHmKf0OX8szEgWs.roa (hash: gYIE1s4jYsTjZWWhfuLuqn/b/Fx6ztxELcEP+vhMzWw=)
                          23: xLvL2DDHdDsFuu0LWe_ArfxkZOU.roa (hash: jEvpZaWRUr0vww6k+sw/ZzVTbY8rHX3wan18IH9TsyY=)
                          24: yUTvxSoxh0P1X3qi3W3GEmQmupg.roa (hash: YggGVCBvHEr/or8wxjiqlTzxSxsrR2x9hxdT1duIBFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 03:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:a9:a7:3f:98:0d:25:0a:f3:8e:44:13:c2:cd:51:ff:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
        Validity
            Not Before: Nov  5 03:01:12 2026 GMT
            Not After : Nov  6 03:01:12 2026 GMT
        Subject: CN=ff16123a01f9f65d0f2be64705c070ae01ef4094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:84:13:1b:b3:28:4b:ed:04:2c:c4:25:3b:bf:
                    46:12:18:e7:3f:47:57:b9:5b:af:49:1b:0f:2c:90:
                    be:d5:6f:07:65:2a:57:63:79:f5:74:fe:b5:72:b3:
                    73:d5:4d:30:ff:fd:09:ef:f7:dd:1c:34:61:7b:6d:
                    c4:8b:fe:1b:1c:23:7a:0b:86:94:26:26:1f:27:f9:
                    47:ae:ab:ad:15:68:f4:c6:67:ca:34:7c:a2:a6:9b:
                    ca:aa:bf:8d:0f:53:72:bf:d8:93:24:d6:5b:a7:02:
                    51:0b:0b:ab:d2:fb:56:05:b9:ae:d1:98:b3:2c:42:
                    1d:25:ec:41:cc:89:10:df:72:4b:5d:0f:38:d6:56:
                    6d:63:fd:a8:ca:5f:d0:f9:4c:3b:24:e2:d6:eb:12:
                    c1:1b:dd:c9:8b:06:ae:15:7a:59:85:ba:14:14:a9:
                    a0:93:40:bc:9c:70:51:c0:55:fd:8e:d6:17:3f:db:
                    b5:f4:d5:37:9c:01:39:dc:c4:92:f7:d3:3d:51:32:
                    4a:c0:e8:cb:69:bd:3a:7a:a9:f9:7c:93:fb:de:05:
                    d1:38:b0:d8:fd:0b:dd:cb:c8:9a:9c:7d:c7:8b:a8:
                    e4:86:30:f8:5a:31:3b:dd:5d:a4:d7:d7:03:74:a4:
                    40:d4:e7:14:cb:0f:d1:46:cd:ce:d3:99:2f:af:3e:
                    5a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:16:12:3A:01:F9:F6:5D:0F:2B:E6:47:05:C0:70:AE:01:EF:40:94
            X509v3 Authority Key Identifier:
                keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:ac:f5:b9:c1:e4:26:3e:28:27:d5:2c:95:45:fe:0d:20:14:
         e2:1b:f1:33:f3:ac:cf:2d:55:d3:b1:4a:32:2b:3a:1d:5e:a1:
         b0:0e:9f:b4:01:4c:37:2f:1c:f6:79:30:04:59:dc:15:05:b8:
         56:85:74:5a:66:86:15:5a:64:02:20:26:2a:16:5e:12:dc:12:
         91:c5:79:46:47:c0:c9:2d:f4:32:3b:52:2c:9c:16:50:f7:ee:
         dc:fe:0c:b9:26:69:2b:b2:2c:14:fb:8b:dd:8f:eb:73:e9:9d:
         a8:bc:a0:d6:1e:ea:5f:7d:11:de:27:88:39:aa:d8:7d:94:82:
         7d:ac:93:4c:11:17:f4:13:5b:6f:34:40:3f:1b:a9:1e:6c:1a:
         10:cd:24:b3:ba:6f:53:64:85:36:5c:2e:78:a2:ec:34:f4:1f:
         ec:41:27:b7:85:0d:c9:b2:82:52:3a:ff:19:b1:51:8b:59:f4:
         69:22:fd:9b:f6:f1:68:2b:cb:b3:25:d9:33:e6:f5:4a:db:c7:
         21:2b:d4:17:9f:82:af:1d:3c:92:28:47:cd:60:4b:f8:ff:48:
         dc:52:42:47:23:51:a1:e4:44:7f:d3:dd:fd:6a:44:c5:71:21:
         26:a5:03:55:6f:82:e5:95:d5:d9:b5:1a:2a:b8:6f:5f:ce:bc:
         6b:3f:b5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 15:17:00 2026 by rpki-client