Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
File:                     UeFASVvQbC6O-st-0KMVFtsfQF8.mft (raw, json)
Hash identifier:          ICFc7xOHx423SWYMqIafngPpLG/XVU8bCh5oKedWrx0=
Subject key identifier:   A9:55:53:46:64:46:99:50:95:3A:61:C0:89:B0:7E:BA:3A:4D:A4:A1
Authority key identifier: 51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
Certificate issuer:       /CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Certificate serial:       01A0CE5AEDD7BC2D089B6763D94B7C114408
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
Manifest number:          11C5
Signing time:             Wed 23 Sep 2026 13:01:00 +0000
Manifest this update:     Wed 23 Sep 2026 13:01:00 +0000
Manifest next update:     Thu 24 Sep 2026 13:01:00 +0000
Files and hashes:         1: UcC2Y8zHvL_FDSURiolVRBuB8_g.roa (hash: p3IzoT2nzG2oBklzpQ6gR/NCnzvpo3xyP/73GYhUd3g=)
                          2: UeFASVvQbC6O-st-0KMVFtsfQF8.crl (hash: I6+8Mczf6ZaAmyz+MPkBQEoWw1F1HZJLKKatvvsDX7E=)
                          3: vz5RaUGZ5UQMv5HfTK7-xdJaMis.roa (hash: YyzHvgYYzEsZBa9TKZu8r++ne7pY4Yz24jL7ObVc/TI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 13:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:5a:ed:d7:bc:2d:08:9b:67:63:d9:4b:7c:11:44:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
        Validity
            Not Before: Sep 23 13:01:00 2026 GMT
            Not After : Sep 24 13:01:00 2026 GMT
        Subject: CN=a955534664469950953a61c089b07eba3a4da4a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c0:0d:8c:c9:e8:a6:ff:f1:85:f0:a5:cc:41:
                    5f:c9:1e:a5:36:fe:f7:b2:49:70:0c:83:67:85:86:
                    59:b3:05:71:b7:f0:5f:58:2e:23:93:e0:f4:d9:e6:
                    e5:dc:33:4d:e4:5c:0f:33:aa:cc:68:6c:b9:80:62:
                    30:38:c5:0a:46:bc:50:28:d0:f4:bb:b2:14:f2:b4:
                    6c:2b:8f:32:a4:d6:47:24:97:1c:b0:fb:89:f6:a2:
                    ad:8e:24:ae:0d:c2:b2:5c:92:d6:01:d8:d4:f4:fa:
                    06:4e:15:ba:42:d3:0e:3a:68:8f:d9:64:56:1f:50:
                    a4:c4:92:eb:87:64:cd:b5:ba:d8:aa:94:eb:2b:50:
                    2f:07:5f:a5:33:e4:86:26:4b:2b:79:d7:f7:d7:81:
                    33:22:f5:c4:fd:41:ff:68:03:de:12:90:d0:be:b5:
                    4a:3b:7d:f4:70:ac:4a:b5:2e:98:bc:85:0a:4d:e3:
                    b8:70:bd:c8:bc:3d:95:41:c3:df:3d:66:e6:52:aa:
                    0f:f0:e8:fe:44:98:b4:e6:b5:d9:e0:35:08:57:6e:
                    ad:4c:d4:c6:7f:3b:ab:d0:2a:f7:aa:f6:41:73:cc:
                    f6:82:3f:60:e7:79:51:a7:13:21:e2:70:3f:36:d3:
                    92:c6:55:bb:d5:5c:bf:9d:4c:94:dd:2d:32:51:d9:
                    2c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:55:53:46:64:46:99:50:95:3A:61:C0:89:B0:7E:BA:3A:4D:A4:A1
            X509v3 Authority Key Identifier:
                keyid:51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:c4:c3:6f:2e:3d:88:4f:79:61:f6:28:9d:51:93:29:b4:91:
         a5:ea:71:b1:c9:c8:bf:c3:ed:22:f4:d4:f3:13:7b:50:12:fb:
         b8:6a:8b:a7:6b:c8:20:ee:14:94:72:51:90:39:d0:5b:c9:26:
         e2:43:10:94:ef:76:dc:12:f0:8d:2e:66:d4:f9:72:82:9d:e5:
         3d:ae:73:d8:fd:53:c6:b6:15:b7:dc:60:b5:f4:c0:54:41:9d:
         ed:90:1f:bd:83:18:33:5d:3e:d5:e0:8b:39:78:fe:5d:06:06:
         a6:17:01:83:63:17:8b:0d:d9:ca:37:92:2c:3c:30:4c:53:4a:
         2e:de:85:68:5a:6c:49:53:c7:6b:98:14:d0:5b:f7:44:dd:ff:
         d0:4d:be:58:63:5f:e4:8f:32:a2:1e:fd:4d:93:36:d7:d4:3d:
         8c:ea:67:6f:1b:58:5b:27:96:b5:c3:56:d4:42:f9:55:ec:17:
         bc:4d:d3:6a:97:a2:72:b1:e6:cd:c1:f5:39:ef:3c:a9:c5:b8:
         0b:5e:9a:fd:cd:91:fb:31:4a:5f:9a:32:b2:68:08:98:80:e2:
         56:fa:4c:8e:66:77:4f:d5:62:97:63:19:67:63:d8:b1:80:7e:
         9f:82:09:df:2e:de:3b:a5:3b:4a:16:99:7a:bc:1c:cd:aa:6f:
         c1:e4:e6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:25:18 2026 by rpki-client