Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.mft
File:                     uCLebF2ewIbZ0gGrbaVr08_v8kM.mft (raw, json)
Hash identifier:          9geQllV5TntJW7ggynBH7p1fAI+jUV0gO9A55QAjpVk=
Subject key identifier:   BF:78:9D:DB:11:62:17:7A:1F:C9:11:6E:F4:69:92:35:81:C7:A5:EB
Authority key identifier: B8:22:DE:6C:5D:9E:C0:86:D9:D2:01:AB:6D:A5:6B:D3:CF:EF:F2:43
Certificate issuer:       /CN=b822de6c5d9ec086d9d201ab6da56bd3cfeff243
Certificate serial:       01A0D7CBEDD2EE69C8849337F2D0EB709FE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uCLebF2ewIbZ0gGrbaVr08_v8kM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.mft
Manifest number:          0287
Signing time:             Fri 25 Sep 2026 09:01:00 +0000
Manifest this update:     Fri 25 Sep 2026 09:01:00 +0000
Manifest next update:     Sat 26 Sep 2026 09:01:00 +0000
Files and hashes:         1: fJN7PYZX9Sr-HX_3erhR56oW5z4.roa (hash: 62V7rj0IiHO0OW2XHO1iINDHqaR8ItLLbYMYozGGFjw=)
                          2: uCLebF2ewIbZ0gGrbaVr08_v8kM.crl (hash: ekVxIhS8C6ZA7A/D4sk87aLF3UKvjj96n3s/Eje1uB0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uCLebF2ewIbZ0gGrbaVr08_v8kM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:cb:ed:d2:ee:69:c8:84:93:37:f2:d0:eb:70:9f:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b822de6c5d9ec086d9d201ab6da56bd3cfeff243
        Validity
            Not Before: Sep 25 09:01:00 2026 GMT
            Not After : Sep 26 09:01:00 2026 GMT
        Subject: CN=bf789ddb1162177a1fc9116ef469923581c7a5eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ee:e6:04:4f:70:0e:53:3f:39:ad:4f:cf:6d:
                    a7:8f:3c:4a:f4:62:23:5a:fb:c7:f1:59:09:e9:28:
                    b2:20:35:fc:29:66:11:ca:3e:74:f1:85:46:4e:df:
                    bc:be:3f:94:cf:7a:cc:be:81:7f:58:62:b4:1e:69:
                    8b:f2:5c:0b:f8:86:8c:ad:72:13:50:b9:da:09:97:
                    77:a9:de:58:53:43:3f:38:bb:dd:53:ef:65:49:0a:
                    f1:8a:eb:51:e5:68:a5:fd:60:14:2c:77:81:66:3f:
                    77:97:d8:ea:33:9c:03:37:21:90:32:3e:e2:b2:cf:
                    48:34:01:46:fb:4b:2b:5e:f5:d2:b7:cf:32:58:7c:
                    ff:ad:88:44:ca:26:04:2e:0b:d5:63:df:47:ae:88:
                    84:1b:91:48:76:cd:6e:fe:f3:98:bc:c2:2f:41:76:
                    5d:b6:cc:4e:d8:7d:c4:98:83:cd:cd:ed:68:c3:76:
                    cd:9f:65:ec:0b:1d:1e:b4:1c:6b:4e:16:a4:28:96:
                    73:3a:5e:87:bf:92:f6:d6:2d:98:56:b2:f8:d2:19:
                    29:f4:eb:b7:47:0f:fa:79:e4:77:dc:20:b5:42:77:
                    ec:ac:67:c0:b9:cb:34:10:bf:f1:de:7e:76:12:d2:
                    9a:ac:6e:a5:c4:51:fe:28:a1:b7:77:18:aa:96:01:
                    a6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:78:9D:DB:11:62:17:7A:1F:C9:11:6E:F4:69:92:35:81:C7:A5:EB
            X509v3 Authority Key Identifier:
                keyid:B8:22:DE:6C:5D:9E:C0:86:D9:D2:01:AB:6D:A5:6B:D3:CF:EF:F2:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCLebF2ewIbZ0gGrbaVr08_v8kM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:cf:c7:b9:31:20:71:c8:bf:e9:4a:13:96:51:e4:7c:a4:ad:
         e8:ad:a4:e9:79:15:2e:80:9c:71:cc:92:54:74:81:d0:c1:bb:
         67:a3:4c:f3:36:64:9b:95:71:e3:83:57:e8:2b:00:53:97:23:
         46:23:0b:ca:6e:d3:09:62:33:6c:e2:d1:94:21:24:16:fd:5e:
         07:56:7e:0c:71:ad:37:45:7e:e2:6d:4e:9d:5e:41:a0:8d:c2:
         7c:d3:82:00:4c:bc:79:ec:4e:e6:78:ed:e7:dd:f8:e7:c7:8a:
         e3:f7:fa:1d:db:e5:92:57:ed:da:68:e6:59:8f:fd:ea:80:dc:
         ac:19:ee:7c:fe:bf:5d:35:95:c7:ce:07:32:33:9d:60:9a:e1:
         f1:63:10:88:9d:77:4e:8e:55:3f:7f:a9:8a:58:0b:77:3b:1e:
         fb:78:0c:01:29:0f:40:a6:c6:66:cd:5d:bc:ce:7d:f6:ef:2c:
         da:1d:61:e5:28:df:d3:1f:34:67:16:22:25:fe:22:7f:a5:3c:
         f6:44:56:a8:f5:4a:9d:23:0c:4e:b3:12:a9:2f:f6:57:7d:f8:
         ef:d0:97:5e:0e:42:58:0c:f0:c9:96:e8:35:3a:58:8a:5e:39:
         9f:c9:36:94:1d:af:ba:67:eb:0e:bd:de:b6:e5:ae:f7:11:e0:
         29:86:00:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:03:39 2026 by rpki-client