Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
File:                     b8UNDUIGe3arGi6OUz_4SbZdVvU.mft (raw, json)
Hash identifier:          TknYTvbx16WVO6hFO468ACCREQbo1JOkoUY++yJHeDU=
Subject key identifier:   C3:7C:1F:AF:40:FA:34:7F:96:79:05:1E:05:EE:9E:10:5D:09:F4:BE
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Certificate issuer:       /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial:       01A1AB0B91C67B0A28D7F79C0B808CC14F1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
Manifest number:          1B26
Signing time:             Thu 05 Nov 2026 09:30:24 +0000
Manifest this update:     Thu 05 Nov 2026 09:30:24 +0000
Manifest next update:     Fri 06 Nov 2026 09:30:24 +0000
Files and hashes:         1: 0xFWfHW7GY6Nkdg9v8OrIxAGKR0.roa (hash: 3jW2LgWlXGkII3xaJQKFa/dhbFZ5BJ4E9nR+13xQa+M=)
                          2: Dv8Xj573URhelnbmcJLlhmPDGD4.roa (hash: qlnvjr9BaLF0/kBmFp/g12eWnCcKOHwXVrBxaeJlhqI=)
                          3: ErxTNyERBBDMhHQ30nH0srvQHWE.roa (hash: vCvge335d0b4IZOO+kvKrubjYExpx9nKBs7ZlxM4sEY=)
                          4: GokOnLgcwEKBfp_sk2MIuuQ-_TY.roa (hash: zQRRa9NS4gIwYEiBt9K5iRhHmWoyu+BxEByrxS3tpEY=)
                          5: V66mUyeO5X_O6JGUAL_LInwhpW0.roa (hash: WTpJ/+xyEsdWBV9e8DfdpDEOxLLOMxmk9zRPy8of4Nw=)
                          6: WAFGlC69-0ob11MbBQG2gcGKWnk.roa (hash: fs3/LEyDskuqCQv30OKbL6do/sufFAX29xlb3wrGuaA=)
                          7: XDZVE2H-rsPZgQbqZ-ZDnwVCBJE.roa (hash: mmhVNux+nbC3xbiA2Kc+Nt37HPq07j1yfnjM8K5A6t0=)
                          8: b4JEVE3QPzkNygQLlI0iBGroxU0.roa (hash: GbTRuy5jkEUqjUNqE8oi/B2zDg7qLzkinV68BhIMhV0=)
                          9: b8UNDUIGe3arGi6OUz_4SbZdVvU.crl (hash: pqx0xxAf6pWkBB6ZxSouehHdMgdkfgaz06J2iydnLUo=)
                          10: fX3KuGbBaSgozBC8VJSKif-SJWQ.roa (hash: YvJvbJ8D5DpHd4D9ZPHBQEllNbujWBnvbGsXVYfxrbQ=)
                          11: hS05mveN2aMKs32vgPN62OxZyU4.roa (hash: ppIsNge7NuGGbn+pU/a2PkG/ZsHka3x0Ag4o3/gijLY=)
                          12: iLauOm2qK9XnqY9ztUU9moKfnvg.roa (hash: MD/6ZVmSej56cLCXyFeTYzesox6xFljqFiihcyr2blE=)
                          13: mOIM-oZXOhPXcspDNu9QRUce9wI.roa (hash: TX23tkqgD+PXYsu3SvaWNxNHNfg0oQahFUpEkkPiqP0=)
                          14: rKU1mC3UrxRCEsXb-l25oaEBhJw.roa (hash: 4jepadulIWtRtacZBukRLsOXuyzRr5YeactatRKpnlE=)
                          15: rquvuLK-rYGovEC3HmK5u93318g.roa (hash: mwUbj+STMP20PJ2zxgTJv5v0LJixxc8GF7ah0C6+1HQ=)
                          16: tbUnyuDY7UDc9s9Pi2PMZZi8JHs.roa (hash: nJyY8ay9th+CegqldK3i2YFyDGeEiiTQjam/4aSux9E=)
                          17: wCrdreEenBFJr40kfhAiXxXP4VE.roa (hash: 1w9FYdnTnijOy22xqaq4vC9r9i/Zq/2AJnQG0P3/L0g=)
                          18: yX_yhv_jUUfVVPMPnlpzUI5cFxs.roa (hash: bg6ibEfMDVCBPduOQFB/gGWqEjD+qw8SCbixEdu1S7Q=)
                          19: zyjvREkWFF6X7pbwt-H3M-ZqZks.roa (hash: HtAgtb461giJt36H40FvVS9Xbx1kevgnUEyHwD9fYBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 08:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:ab:0b:91:c6:7b:0a:28:d7:f7:9c:0b:80:8c:c1:4f:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
        Validity
            Not Before: Nov  5 09:30:24 2026 GMT
            Not After : Nov  6 09:30:24 2026 GMT
        Subject: CN=c37c1faf40fa347f9679051e05ee9e105d09f4be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8e:63:d8:74:7b:ec:a0:bb:16:9a:91:12:1a:
                    25:0f:55:59:1e:3b:ba:24:43:30:9d:8c:44:56:52:
                    2f:eb:8f:cc:21:3e:4f:b2:00:2b:42:1a:d6:5f:7e:
                    e4:84:50:81:0a:77:70:d2:ac:b3:74:ef:da:29:9d:
                    da:7a:8f:82:df:9c:07:06:76:21:4f:0d:41:03:cb:
                    d2:06:7e:27:fe:54:e6:75:d5:e1:6e:fd:c7:93:b5:
                    1b:b8:ea:66:89:dc:8d:cf:23:4f:21:18:98:11:cf:
                    41:3b:c9:e8:6b:49:c4:c0:e5:9a:dc:94:18:2f:cc:
                    85:5a:71:93:5a:75:13:0b:d6:9a:b9:39:9e:90:99:
                    10:2f:dc:c1:b5:42:a2:58:c9:52:21:78:92:fb:4a:
                    6e:c9:ed:2b:32:44:7a:87:72:c0:5b:49:73:44:1c:
                    d4:b8:fa:5a:39:7c:bc:ff:d1:fb:9f:d5:0a:8a:75:
                    c3:e6:27:e3:e5:30:98:58:ba:4a:42:ab:00:10:01:
                    65:9c:25:09:56:0f:a7:a3:1c:83:ed:3c:74:16:7b:
                    51:0a:e5:06:d3:59:ec:7e:77:19:ce:12:e6:09:50:
                    cf:16:70:cd:16:42:7b:69:b5:c3:e5:5e:f8:11:25:
                    6d:d6:b3:43:f4:80:17:2c:4b:00:f6:9d:a4:7d:9d:
                    28:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7C:1F:AF:40:FA:34:7F:96:79:05:1E:05:EE:9E:10:5D:09:F4:BE
            X509v3 Authority Key Identifier:
                keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:48:db:1e:c4:89:83:a7:64:63:b2:e0:84:26:b2:1d:d0:33:
         0b:66:4d:5e:b4:fc:d5:3e:6d:db:43:d9:35:90:0b:90:e8:20:
         c9:5d:0e:45:90:e8:0f:82:f0:f4:fd:98:0c:50:ca:32:b5:48:
         93:e7:2c:16:35:a1:11:91:3d:bb:89:7f:c7:f4:b9:0a:a4:5b:
         be:8d:b1:bc:c3:a2:26:52:c6:d0:ac:f2:7f:7e:55:2b:64:f7:
         4f:26:c1:06:24:2e:6c:b8:c5:38:d8:f4:13:b8:f4:c3:21:e3:
         21:a8:58:36:cc:10:96:87:e0:45:f9:6c:2d:63:b2:65:10:f4:
         10:0d:0a:1b:9c:b2:bb:ec:17:44:5c:9e:22:56:dd:16:6b:43:
         f4:8e:93:b9:b8:eb:35:7a:25:08:53:66:65:1e:01:40:b0:2f:
         96:67:46:9a:e1:68:f5:0c:79:0d:64:0d:2d:5c:34:9a:4f:59:
         fe:3f:12:0c:01:60:38:0a:f4:31:55:00:71:51:2c:32:d0:b8:
         a0:e0:aa:fa:f4:e9:67:c0:4d:47:da:d4:3a:4e:08:b6:00:48:
         09:e0:f7:1a:cf:07:ff:b2:0f:e8:b6:ca:3c:11:c4:a8:be:58:
         98:99:8a:a7:9b:88:a9:4b:9e:4e:0b:32:4a:91:6d:51:1c:6e:
         1c:2a:10:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGrC5HGewoo1/ecC4CMwU8bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1
ZDU2ZjUwHhcNMjYxMTA1MDkzMDI0WhcNMjYxMTA2MDkzMDI0WjAzMTEwLwYDVQQD
EyhjMzdjMWZhZjQwZmEzNDdmOTY3OTA1MWUwNWVlOWUxMDVkMDlmNGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI5j2HR77KC7FpqREholD1VZHju6
JEMwnYxEVlIv64/MIT5PsgArQhrWX37khFCBCndw0qyzdO/aKZ3aeo+C35wHBnYh
Tw1BA8vSBn4n/lTmddXhbv3Hk7UbuOpmidyNzyNPIRiYEc9BO8noa0nEwOWa3JQY
L8yFWnGTWnUTC9aauTmekJkQL9zBtUKiWMlSIXiS+0puye0rMkR6h3LAW0lzRBzU
uPpaOXy8/9H7n9UKinXD5ifj5TCYWLpKQqsAEAFlnCUJVg+noxyD7Tx0FntRCuUG
01nsfncZzhLmCVDPFnDNFkJ7abXD5V74ESVt1rND9IAXLEsA9p2kfZ0opwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMN8H69A+jR/lnkFHgXunhBdCfS+MB8GA1UdIwQY
MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt
M2MxNmZmODQxYWIyLzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy
LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt0jbHsSJ
g6dkY7LghCayHdAzC2ZNXrT81T5t20PZNZALkOggyV0ORZDoD4Lw9P2YDFDKMrVI
k+csFjWhEZE9u4l/x/S5CqRbvo2xvMOiJlLG0Kzyf35VK2T3TybBBiQubLjFONj0
E7j0wyHjIahYNswQlofgRflsLWOyZRD0EA0KG5yyu+wXRFyeIlbdFmtD9I6Tubjr
NXolCFNmZR4BQLAvlmdGmuFo9Qx5DWQNLVw0mk9Z/j8SDAFgOAr0MVUAcVEsMtC4
oOCq+vTpZ8BNR9rUOk4ItgBICeD3Gs8H/7IP6LbKPBHEqL5YmJmKp5uIqUueTgsy
SpFtURxuHCoQBg==
-----END CERTIFICATE-----
Generated at Thu Nov 5 19:26:40 2026 by rpki-client