Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
File:                     uGWF0IuX5nnwgovxAr6rUdza-oc.mft (raw, json)
Hash identifier:          cx6wWi41f0hbBzf2KZMYQLFsVCjr/Urjb1qdK+FQGDM=
Subject key identifier:   90:E7:D7:43:71:A3:9B:8F:15:21:CB:21:D4:BD:13:7C:2A:EE:B3:0F
Authority key identifier: B8:65:85:D0:8B:97:E6:79:F0:82:8B:F1:02:BE:AB:51:DC:DA:FA:87
Certificate issuer:       /CN=b86585d08b97e679f0828bf102beab51dcdafa87
Certificate serial:       01A0EB1C838715B57BB38278ADA3C9C92E80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
Manifest number:          0434
Signing time:             Tue 29 Sep 2026 03:01:49 +0000
Manifest this update:     Tue 29 Sep 2026 03:01:49 +0000
Manifest next update:     Wed 30 Sep 2026 03:01:49 +0000
Files and hashes:         1: Ga14DKlkNtPaU4_WDklMXTBEZd0.roa (hash: 51BV+zXQbnh+NfWZphUfXu97WrA83bdxjQhGkdY1730=)
                          2: uGWF0IuX5nnwgovxAr6rUdza-oc.crl (hash: jnhEDoEbVGZWsT0JHx8DV/Z+LYf0i3Glf8H3/mtEfE4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 03:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:eb:1c:83:87:15:b5:7b:b3:82:78:ad:a3:c9:c9:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b86585d08b97e679f0828bf102beab51dcdafa87
        Validity
            Not Before: Sep 29 03:01:49 2026 GMT
            Not After : Sep 30 03:01:49 2026 GMT
        Subject: CN=90e7d74371a39b8f1521cb21d4bd137c2aeeb30f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f9:a2:04:e9:ad:f1:e8:3a:91:0c:d5:9d:a2:
                    3e:89:40:f5:54:14:37:e5:0c:ad:7f:86:45:f0:69:
                    75:0f:6b:63:0e:d5:ca:6f:5c:fe:ba:fb:04:06:a8:
                    60:ed:d7:b4:c5:4b:26:53:68:e5:2f:fe:5f:25:3b:
                    27:db:f9:1f:37:c4:72:e5:15:fb:45:5a:13:f9:a6:
                    dc:27:93:97:64:2f:82:87:1a:dc:ab:ea:44:94:b9:
                    b6:53:48:d3:6a:bf:17:79:14:9e:43:96:bc:98:c3:
                    2e:19:28:a3:57:a0:4e:c7:e2:71:b0:a5:a7:fb:10:
                    99:36:13:60:a9:db:52:51:7b:38:0a:44:0c:f1:46:
                    f9:2d:61:18:00:86:48:c3:72:13:2e:e6:69:f7:ad:
                    3d:2d:92:db:2a:ab:a0:7f:64:35:ba:61:84:a1:96:
                    1c:fa:ce:2a:f8:db:5a:3c:90:76:06:00:8a:f7:c6:
                    11:f8:3b:a0:37:df:26:05:13:98:e3:49:13:8f:02:
                    14:7d:b8:ec:ca:03:9a:8a:ec:be:95:34:af:eb:36:
                    d3:d3:b2:47:df:fb:48:33:5d:07:9e:a0:57:1d:cf:
                    c9:5e:47:d0:f3:24:4b:61:f5:35:1a:d8:1a:b9:39:
                    e7:52:e0:f5:8d:dc:45:20:22:9e:09:1f:7f:a3:36:
                    79:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E7:D7:43:71:A3:9B:8F:15:21:CB:21:D4:BD:13:7C:2A:EE:B3:0F
            X509v3 Authority Key Identifier:
                keyid:B8:65:85:D0:8B:97:E6:79:F0:82:8B:F1:02:BE:AB:51:DC:DA:FA:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:14:b0:d5:35:a3:2d:f5:ea:9f:eb:e0:7b:bd:24:6a:3e:d5:
         43:42:b0:88:59:25:02:29:20:da:25:3a:13:82:0d:2b:4b:dd:
         cc:64:f9:4a:99:b9:70:ce:56:7b:59:cb:ad:a7:f2:5b:01:fa:
         38:4a:2b:fa:31:a7:bb:72:45:0a:cc:33:97:fd:3a:8e:d7:47:
         69:a4:2e:57:09:f1:66:73:b8:49:ab:61:d2:b7:e1:5f:47:0e:
         e9:d8:b4:9b:f6:09:cc:29:2e:7c:31:31:2a:e9:33:56:5a:e0:
         59:4b:e7:26:ec:45:e4:ed:b3:8d:8f:67:80:e9:35:d3:10:01:
         4c:c4:db:04:2c:b7:4f:f8:e8:72:20:dc:94:4f:59:7a:70:fc:
         c5:b8:d9:eb:71:f3:8a:51:3c:13:02:e0:5c:fc:ee:f0:50:e0:
         cd:9f:04:d0:be:fe:ec:c9:c3:4c:9e:8a:b7:35:51:b1:09:b5:
         c4:04:65:64:31:69:f8:36:20:2f:e1:30:01:09:d9:1e:01:e0:
         0c:55:47:35:79:ac:55:2a:93:c7:44:7d:ee:62:cd:c2:5f:39:
         4b:e5:82:45:b1:63:25:43:3d:39:3a:07:d5:e3:96:b1:cd:18:
         82:97:eb:91:7a:3f:a2:a1:bb:ec:87:6d:dc:59:e5:fd:4c:f3:
         82:07:8b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:04:18 2026 by rpki-client