Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
File:                     uNWz03nSEWLitSLEOAH7lgOYgkU.mft (raw, json)
Hash identifier:          N8X235IkwHiA9O+uddyPyFbNfuhSbuu8p4Xr0/kr8bA=
Subject key identifier:   0B:14:10:95:24:22:04:14:2C:BD:07:20:E6:69:12:80:7D:8C:73:49
Authority key identifier: B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45
Certificate issuer:       /CN=b8d5b3d379d21162e2b522c43801fb9603988245
Certificate serial:       01A1DF15A32935B193A70BFE4258B813B321
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
Manifest number:          122E
Signing time:             Sun 15 Nov 2026 12:01:39 +0000
Manifest this update:     Sun 15 Nov 2026 12:01:39 +0000
Manifest next update:     Mon 16 Nov 2026 12:01:39 +0000
Files and hashes:         1: 1-f_gAb-UQuyps_IPI3M8vQhRtGo.roa (hash: NsL25xCV1UtSE0/W9VwZvUIiaucE1NUxNcTSiDnaYao=)
                          2: ditshtsYxKYvOT3dCWLRDUMEGJ0.roa (hash: o6hcseRZVR0gI7jc0jlgzutuSsEvFXNX+MVW1GVHnBQ=)
                          3: eS8NOcR5VsM5X-FoIr-qZi-nfSQ.roa (hash: oTJIYUc5ybeC7DTGSDxwOuEroX+3xhqZe6zX/QEBvRI=)
                          4: uNWz03nSEWLitSLEOAH7lgOYgkU.crl (hash: hfM4+mBwwsDcsBi/eUIwmtS2cl2MJCSfAALAJ7de2TA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:15:a3:29:35:b1:93:a7:0b:fe:42:58:b8:13:b3:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8d5b3d379d21162e2b522c43801fb9603988245
        Validity
            Not Before: Nov 15 12:01:39 2026 GMT
            Not After : Nov 16 12:01:39 2026 GMT
        Subject: CN=0b141095242204142cbd0720e66912807d8c7349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:58:65:93:21:df:25:0a:8a:cb:d4:6e:b4:5b:
                    35:e0:ea:7c:22:95:52:4a:7d:7f:33:ec:06:b6:f1:
                    af:32:2b:3f:3c:1a:39:e1:78:9c:50:d5:1d:f7:df:
                    57:c7:7e:2f:e3:13:57:7d:cb:a5:1e:0d:79:2a:ce:
                    b2:17:8e:d5:c0:7b:fb:0f:01:15:f7:3b:f7:ef:98:
                    6e:7f:d8:b4:f8:48:e7:75:3d:89:70:c9:fd:66:45:
                    08:f9:cc:d4:36:e8:8c:f4:13:bb:93:f2:74:f4:74:
                    64:73:26:6f:d2:62:a3:83:ac:2f:4e:f7:21:9c:5b:
                    82:e8:7e:6a:af:82:c6:1a:57:9d:7e:1b:c7:d2:df:
                    ef:ee:f9:2f:b4:e7:b4:b1:a0:87:38:65:c1:d0:61:
                    8c:33:d7:61:21:b7:8b:8d:c2:51:d6:a0:f7:5a:13:
                    53:08:df:17:1c:a1:e4:f9:40:3f:8e:a6:1b:f1:f8:
                    f1:6c:a7:26:30:9b:1c:f6:7f:a9:dd:9d:74:0e:ec:
                    b1:06:cb:0f:6b:46:50:75:42:ff:9d:f9:3f:35:b5:
                    69:c5:22:99:58:a4:4a:89:37:18:f5:37:81:77:f8:
                    c3:05:b3:71:94:59:63:86:9d:b3:5d:0e:fc:65:35:
                    65:e4:13:58:18:11:7c:75:e5:6b:65:86:2d:56:b7:
                    47:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:14:10:95:24:22:04:14:2C:BD:07:20:E6:69:12:80:7D:8C:73:49
            X509v3 Authority Key Identifier:
                keyid:B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:8b:74:ae:d7:07:df:a5:a8:9a:7c:ec:1e:d6:41:b5:2e:32:
         8d:94:69:71:ba:47:fe:73:22:e9:46:ce:6b:cd:d5:f2:3d:78:
         71:ca:26:ee:12:25:30:5d:2a:da:29:c6:14:cd:62:ea:52:2b:
         5b:78:f4:e6:7e:d5:41:24:99:5f:44:b5:43:16:8b:f1:08:ee:
         55:0c:b8:15:96:50:30:68:1b:cd:ac:ad:26:25:00:e1:ec:26:
         f9:8d:95:07:17:28:12:e8:2c:67:7f:26:51:7c:bf:8c:97:08:
         a4:ae:22:9d:e1:57:58:3b:10:a1:9e:2d:91:09:3b:2b:c7:34:
         cc:47:2f:f7:d0:40:0e:1e:59:b3:d3:91:b2:51:ad:eb:d2:3b:
         4b:08:50:7c:32:29:2c:2a:87:01:ef:dc:a0:47:b1:cc:fb:c8:
         33:f8:a0:e7:62:04:4f:99:6c:5b:e3:c7:24:48:51:25:3d:c6:
         76:d2:98:d8:2a:8f:21:75:f8:30:de:c3:33:f4:ca:fa:69:90:
         4d:72:56:be:0e:b9:27:aa:b5:81:2a:13:95:9c:51:e4:ed:51:
         f0:52:e7:0d:be:a0:ff:0c:a7:b5:ed:cb:bf:74:ad:b1:5b:b4:
         79:f8:49:b1:6f:c1:9f:8b:1b:de:de:c0:bc:b1:43:cc:27:63:
         38:20:97:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:54:54 2026 by rpki-client