Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
File:                     uiOwejwKyeMz9S6LXUGnaKPTkCU.mft (raw, json)
Hash identifier:          IOnc0fy8HkHVDsiydVM97UQ6njIOPTZjCd3U82l1HU4=
Subject key identifier:   15:CC:FC:40:F8:88:CB:04:19:D3:7F:68:50:80:F9:85:73:71:5B:84
Authority key identifier: BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25
Certificate issuer:       /CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025
Certificate serial:       01A0BDD505CE91D3BE4975730538179DDAB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
Manifest number:          0A15
Signing time:             Sun 20 Sep 2026 08:00:49 +0000
Manifest this update:     Sun 20 Sep 2026 08:00:49 +0000
Manifest next update:     Mon 21 Sep 2026 08:00:49 +0000
Files and hashes:         1: X01ZcYFwf7_4PflWuYe0HSJ1B7E.asa (hash: /ioRvSO/smZJePMAdHqGPLRi3QTdChFlRiDXfhCxQIQ=)
                          2: cYSlOixvw1IRH_A6U1PmGBfOnLc.roa (hash: ObOoQktNn2mk1CLRsAqDNu4BrgB8VABVPaTI7wXzkNQ=)
                          3: cfljug29MBdwZ2IRskxqcwdwGN0.roa (hash: RSO1UVd7bjnpUDUf4c2ob5lCf11GhEF8w59+h0O9Z8s=)
                          4: sPDYGaB0jdjNmv_RI00LaumXHZM.roa (hash: cR+r+JhOtPPtk4/8vr8rgMsCxMQVubUz6os2NddknO4=)
                          5: uiOwejwKyeMz9S6LXUGnaKPTkCU.crl (hash: HhYntlAASKRrEMo3cwEGVrjP9khLZgiz4PzWsLxXbrw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bd:d5:05:ce:91:d3:be:49:75:73:05:38:17:9d:da:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025
        Validity
            Not Before: Sep 20 08:00:49 2026 GMT
            Not After : Sep 21 08:00:49 2026 GMT
        Subject: CN=15ccfc40f888cb0419d37f685080f98573715b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8c:9e:67:6e:62:9a:06:83:0f:8c:f4:94:99:
                    79:e6:fb:11:17:e6:6f:54:6b:eb:96:e5:c5:40:2c:
                    c7:e2:ec:a2:a7:54:47:01:ef:c9:0e:03:ce:80:40:
                    8d:ca:d4:e8:be:8a:08:5e:20:0e:83:4c:bd:71:b4:
                    03:77:5b:f1:ac:69:74:bc:60:04:e7:e6:b9:cd:c7:
                    68:c5:93:23:2d:4f:e5:25:7c:d8:e4:97:2c:26:92:
                    7a:37:c0:fa:8a:d1:af:6b:59:db:98:2c:bd:f8:b6:
                    51:f9:7b:51:fb:8e:ba:85:83:99:95:b4:5f:1c:f0:
                    2c:e7:93:d2:f3:d3:68:c8:72:20:81:b5:31:52:65:
                    a7:2f:89:6c:4b:7c:a8:a8:2b:e2:c9:e7:01:08:3b:
                    95:d9:dc:51:82:77:6f:b2:33:47:02:d8:74:bd:62:
                    9c:87:b5:ab:46:41:15:40:75:1a:99:5c:15:84:55:
                    f4:bb:be:a1:a6:60:1b:0f:1f:fa:6d:5a:68:b9:5b:
                    31:33:e9:63:b0:20:8b:d1:c7:55:d4:72:0e:47:c0:
                    47:93:4a:bf:73:51:08:d1:2f:ad:ab:ab:69:10:91:
                    ae:4c:8c:6d:52:aa:a7:05:ba:8b:7c:ab:2c:4f:e5:
                    67:94:57:04:c9:95:d3:96:6a:9f:13:53:43:a2:56:
                    41:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CC:FC:40:F8:88:CB:04:19:D3:7F:68:50:80:F9:85:73:71:5B:84
            X509v3 Authority Key Identifier:
                keyid:BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:2d:31:e7:53:3e:5e:23:35:60:8c:b8:aa:9a:c0:16:37:50:
         24:5b:35:b7:36:34:2b:8c:6f:d0:33:37:18:f7:66:7b:ff:0e:
         6f:0c:86:3c:5b:7e:77:62:7c:db:ad:28:ee:6d:55:78:3c:02:
         f8:94:5a:d8:fe:03:88:85:25:5e:83:f8:9b:90:83:41:39:d4:
         30:5e:74:d7:f9:5b:c0:53:79:9c:e1:3b:17:0c:88:04:36:22:
         f6:34:81:51:0a:ab:6d:af:7e:8e:9d:01:02:6c:44:49:79:3a:
         be:67:05:ab:6e:69:3f:48:d3:62:49:81:c4:78:42:f4:77:fd:
         cc:9c:85:a1:31:60:0e:b5:4d:be:f0:07:dc:93:80:63:c2:2f:
         dd:3a:b8:97:8d:14:8e:01:fb:0f:d1:f6:1c:9e:f3:e1:5c:e1:
         92:f8:ef:85:d3:be:cd:42:83:13:5b:dc:91:a9:90:e1:6c:22:
         24:55:eb:42:a5:cb:d3:fb:a0:77:68:a1:17:fc:3a:e7:9e:cc:
         98:fe:cd:78:61:b1:8b:bd:ec:ee:a1:1e:2d:39:18:00:95:69:
         ce:db:31:75:43:dc:05:3a:24:a2:b9:df:59:cf:2a:46:9a:59:
         ba:8c:bc:48:e6:af:cb:ae:a5:a9:50:ae:84:24:69:a7:50:80:
         43:72:9b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:36:38 2026 by rpki-client