Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft
File:                     sf_ufb9_RWbqnjBUaywqLnM28vQ.mft (raw, json)
Hash identifier:          QRapYcFF5bwO6w6+t7VbNfhECquqZJpLguFlUMJ5DWw=
Subject key identifier:   52:7D:F3:CD:2F:C0:D1:83:A1:4B:A3:62:6B:90:85:F0:4B:74:8D:56
Authority key identifier: B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4
Certificate issuer:       /CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4
Certificate serial:       01A0C66AF08B6CFF931191A25503B5022AA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft
Manifest number:          1A6A
Signing time:             Tue 22 Sep 2026 00:01:32 +0000
Manifest this update:     Tue 22 Sep 2026 00:01:32 +0000
Manifest next update:     Wed 23 Sep 2026 00:01:32 +0000
Files and hashes:         1: P4g9yTAv1bQsEHzbCNOJ067tquU.roa (hash: kouwCvNmAHfMnCaV0S5emEt24x5TunBBSbVBzdGSrqY=)
                          2: Y360lwoG9eyseVvOT5wT1Z7gt7U.roa (hash: U9JtvNrirG87zfze5K4hjslK7QIiDoWF/Ia/56lwbBw=)
                          3: pWNFve3JFzOWEIOafmb-tq3ozgk.roa (hash: J9P5fP20DSym7BQV4ZtLFdmGdvrRCw0F5AUaKX6zn0M=)
                          4: sf_ufb9_RWbqnjBUaywqLnM28vQ.crl (hash: hIXt+7rkk4/OmovsEd083whVwzcQS0m9oHCe/x+q38g=)
                          5: wjwk4znZSgE3afujO_o00KJ1wc4.roa (hash: /EHRjEt0mZL7bm2KcS0WqhNixMXZVUS3aHhSERVsdww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 00:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:6a:f0:8b:6c:ff:93:11:91:a2:55:03:b5:02:2a:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4
        Validity
            Not Before: Sep 22 00:01:32 2026 GMT
            Not After : Sep 23 00:01:32 2026 GMT
        Subject: CN=527df3cd2fc0d183a14ba3626b9085f04b748d56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cf:e0:dd:f2:03:88:dd:52:5e:ad:ef:a5:e2:
                    63:88:49:18:91:71:0f:1b:61:c2:bb:85:f8:80:bd:
                    c5:4f:11:9c:1e:51:b8:a3:17:1c:c3:5b:d9:37:32:
                    0b:7c:ec:ea:08:5b:60:48:75:b0:ed:48:67:72:53:
                    f2:6c:51:05:34:32:42:0d:24:85:c0:ba:7f:b7:df:
                    17:bc:d2:80:d5:cc:97:9f:b3:96:b5:95:f0:dd:77:
                    d9:77:13:22:79:60:37:e2:69:69:4f:57:25:bb:f1:
                    3c:31:96:8a:2a:27:d3:27:01:56:b3:f7:1a:00:ba:
                    ce:c3:bd:4d:f4:61:34:d6:12:14:14:76:29:3b:7c:
                    4d:e9:9c:e5:cb:4d:e2:8c:a8:ca:b4:21:90:70:e0:
                    ed:76:5e:1b:07:b4:3c:77:5e:1b:cb:aa:bc:05:55:
                    be:e8:34:c0:1c:46:a1:01:52:cb:4d:fe:85:fc:c1:
                    7c:6b:c6:01:f3:17:6c:9e:0d:71:e5:5a:1e:29:b2:
                    f6:9a:ea:6c:4c:2b:6c:f4:69:5c:25:ce:27:bc:6e:
                    04:67:bd:c4:9f:6d:f4:06:67:e1:5f:4f:72:24:95:
                    1e:53:c9:18:0b:fc:ec:dc:f2:6f:94:36:6d:e8:e4:
                    70:3e:90:dc:e3:bf:e0:da:1e:0b:b0:8e:ad:ab:5b:
                    23:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7D:F3:CD:2F:C0:D1:83:A1:4B:A3:62:6B:90:85:F0:4B:74:8D:56
            X509v3 Authority Key Identifier:
                keyid:B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:0c:b6:68:e7:37:1f:e5:cb:9f:01:fb:25:c0:3c:bb:e5:0d:
         d6:48:ed:c2:7b:fc:a7:6e:23:bd:b9:56:4a:13:73:cb:59:17:
         10:f6:39:cf:5a:6d:59:af:02:8d:bb:4c:cb:45:cf:07:70:34:
         84:87:f3:a2:0c:20:ae:95:4d:61:b6:3c:ba:08:c8:b9:17:49:
         ec:7c:85:26:77:72:e5:41:cf:b4:fd:ac:71:f5:09:d7:fe:95:
         bc:90:15:e2:6a:40:e4:8b:44:d2:dc:15:de:18:08:45:5f:82:
         21:35:9c:2e:2c:04:6f:59:70:43:16:4b:4f:f3:e3:dc:2e:81:
         69:f4:32:f2:3d:d2:ed:19:ca:78:e8:01:7e:7d:8e:b6:98:69:
         40:4e:be:ce:b8:65:6e:00:4b:c1:f5:23:e6:cd:32:b9:9f:dc:
         27:ad:da:26:f6:d2:83:f3:b9:06:bb:9d:65:aa:ff:84:f0:04:
         12:4a:d2:e3:f5:ff:22:10:09:40:76:1e:9e:18:14:1b:ba:b6:
         76:b2:19:db:cc:8d:14:0a:9a:d1:c4:f8:fb:70:43:2c:af:60:
         97:5d:f4:3f:84:d2:66:4d:92:31:b5:df:4a:a8:57:d4:7b:75:
         15:8d:e2:18:a1:eb:57:ff:66:95:9a:07:10:30:ee:5c:72:3a:
         ff:50:0b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:25:12 2026 by rpki-client