Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
File:                     u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft (raw, json)
Hash identifier:          BTH2wjOdmRkPvHlRH8lnHjKlQw9bB2hXX0BaxUuru/o=
Subject key identifier:   49:9C:06:93:BE:A1:86:EF:C5:D7:B8:86:49:25:9F:19:62:C1:6C:0B
Authority key identifier: BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49
Certificate issuer:       /CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249
Certificate serial:       01A12F5814BF38DE3DED0C481404FEA041D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
Manifest number:          0831
Signing time:             Mon 12 Oct 2026 09:01:03 +0000
Manifest this update:     Mon 12 Oct 2026 09:01:03 +0000
Manifest next update:     Tue 13 Oct 2026 09:01:03 +0000
Files and hashes:         1: MC5MG-Z6VtT9_YIrjUXUEcfUGlw.roa (hash: gMM1r77gBOSVZXRH+MUIS9ejwECkB+oIOrPuTalHxFg=)
                          2: U749CR9_WlAi1xJYGuyn6GjT2NU.roa (hash: 6G+ZaRLJOfKdFp5MjptlVjWRCyME9VMpUPPRnUdd/ms=)
                          3: u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl (hash: oU3xx2pQ2kFB5YBgpiWP/OYxuxSGBfbh0yv/pDrrDp8=)
                          4: ye9CJv-gRnNlmaYw7SD_tgaq9eI.roa (hash: joTKLvlxOsVk56Ag3bqf527kK8bL1jJHNadx5Q0xskM=)
                          5: ymAj9efrc4iFY_0So-yc0MrAp7E.roa (hash: 0RVzMDPDhXTkKrBe4COdDJUwa/RLXdTmgG4ILjY2Rgg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 08:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2f:58:14:bf:38:de:3d:ed:0c:48:14:04:fe:a0:41:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249
        Validity
            Not Before: Oct 12 09:01:03 2026 GMT
            Not After : Oct 13 09:01:03 2026 GMT
        Subject: CN=499c0693bea186efc5d7b88649259f1962c16c0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a2:1a:2a:42:61:f1:10:46:f9:d2:4a:2a:c6:
                    cf:6b:e9:c0:a2:19:89:a2:51:6d:6e:46:70:08:34:
                    b5:a6:bd:50:44:bf:0a:db:b4:b7:cc:d3:f2:4a:de:
                    63:25:57:25:07:a2:f0:ba:12:37:21:43:13:41:2a:
                    96:8f:a5:28:53:8b:2e:78:b6:d5:0c:f6:86:93:06:
                    dd:1f:e4:6a:94:96:b8:dc:68:79:29:cd:71:1f:2d:
                    f6:40:dd:2a:66:52:e0:13:ae:ed:b6:c5:ec:08:65:
                    7b:39:98:f6:f5:88:d3:94:ba:bb:d4:32:c0:1a:cd:
                    73:53:86:60:ab:bd:e5:db:fb:c7:46:45:f8:ff:da:
                    70:8a:f6:24:cd:8b:30:e4:44:ed:6c:39:13:66:8c:
                    97:48:bf:df:da:a3:51:89:1e:43:34:1b:7d:58:92:
                    6f:5e:18:1f:9b:e1:52:6c:78:65:6f:f9:c8:89:35:
                    42:00:c8:0f:35:4c:59:e1:ba:50:df:3a:ec:ec:d4:
                    e8:2f:7e:16:d6:ca:32:ef:1c:11:8e:26:b1:b9:38:
                    b6:18:80:22:1b:43:ba:d3:29:c8:8e:9d:05:b2:6f:
                    c6:0f:0d:76:5a:f7:2c:71:02:84:8c:3f:e4:7d:4b:
                    62:95:05:a7:23:82:34:b1:25:44:3c:2e:f3:f7:f1:
                    38:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:9C:06:93:BE:A1:86:EF:C5:D7:B8:86:49:25:9F:19:62:C1:6C:0B
            X509v3 Authority Key Identifier:
                keyid:BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:59:f8:34:47:92:07:61:70:4b:73:10:90:2e:75:2a:77:18:
         55:3b:cf:2a:24:d4:21:ad:aa:7c:e2:7a:0e:af:62:58:b8:21:
         b8:83:86:59:5b:01:66:49:e8:0e:21:d9:a4:fb:8b:1b:0c:31:
         b4:a4:cf:70:1e:4c:6c:52:87:87:7a:75:41:5f:bb:1b:25:f7:
         d2:9d:df:af:35:6f:5e:ce:de:7f:d7:a5:8c:2e:3e:17:70:dd:
         b1:97:44:bd:73:b3:bc:af:59:f6:08:e8:7c:c7:91:d8:9e:08:
         5b:98:e0:82:5a:5d:27:58:aa:f0:ca:e6:c6:e2:cf:49:63:1d:
         14:b9:1e:a8:0f:68:40:28:f4:0e:1d:bc:8f:1f:07:18:71:d2:
         58:8d:62:11:73:72:80:03:7c:97:ee:ef:4f:c7:10:5d:b0:9f:
         cf:c7:43:85:7d:a2:37:08:57:2c:36:c5:75:a4:02:bf:23:8f:
         aa:3d:3e:12:d6:8b:14:df:f4:67:72:06:0b:49:e5:b5:fb:be:
         05:bb:4b:e9:0f:af:3c:d8:b0:91:48:0b:0b:9a:81:2f:45:fb:
         eb:34:48:51:38:8e:90:a8:d5:46:bd:d4:b9:c8:c5:02:a8:04:
         31:69:90:4b:5b:8b:a6:95:a4:4a:4a:ec:8e:4b:3f:e4:23:ca:
         f3:19:01:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 12:37:35 2026 by rpki-client