Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
File:                     uncwHhTWWzo9aG2qwW38SaxIx80.mft (raw, json)
Hash identifier:          899XP8mYROCXemXYKOdntfTSurNyzRm6BO0P4MC5PmU=
Subject key identifier:   CC:44:08:BB:2C:BE:D4:1A:B0:17:CC:43:02:01:88:CB:9A:00:3C:A7
Authority key identifier: BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD
Certificate issuer:       /CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd
Certificate serial:       01A0C9340504342CE570F956D944EB540330
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
Manifest number:          1686
Signing time:             Tue 22 Sep 2026 13:00:24 +0000
Manifest this update:     Tue 22 Sep 2026 13:00:24 +0000
Manifest next update:     Wed 23 Sep 2026 13:00:24 +0000
Files and hashes:         1: 1LEFsPM_H8xQ-_ougrkdy_5rKNU.roa (hash: vqS3TtpAElEQP9C4hD+5YU/4Tth0LEZ2oFRo5KORXho=)
                          2: LBsEkxwQTYhHk4PbiWkcMNY_VwM.roa (hash: 3yJGlq/sSfsWxxmZU2mXpZuXHcJRJ3V2hkCfCCtg9JI=)
                          3: uncwHhTWWzo9aG2qwW38SaxIx80.crl (hash: FB0k6cEygjCOss9MBUzEC6tk0rnqGO8QLO8Tp0XmwCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 13:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:34:05:04:34:2c:e5:70:f9:56:d9:44:eb:54:03:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd
        Validity
            Not Before: Sep 22 13:00:24 2026 GMT
            Not After : Sep 23 13:00:24 2026 GMT
        Subject: CN=cc4408bb2cbed41ab017cc43020188cb9a003ca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a1:ec:08:b2:2d:02:db:f8:55:65:a3:f5:f8:
                    75:57:97:7f:90:3f:74:77:a3:5f:b0:2b:3e:4b:fc:
                    64:21:e3:75:a3:db:13:2b:a5:f2:50:b6:d7:30:1a:
                    a0:50:95:5d:3f:a3:a9:f1:59:a3:c1:7d:ee:a7:da:
                    c2:e6:26:32:b4:2d:59:ca:6c:bb:2a:68:9f:cb:c4:
                    2a:c0:9d:8b:5d:8d:42:53:48:57:52:fa:c5:d6:99:
                    8e:26:61:64:45:12:f5:3f:a4:85:d6:d0:82:7d:36:
                    02:08:02:22:5a:b0:55:e4:c7:e5:34:9a:bb:b3:44:
                    ec:3c:4b:22:d6:59:73:9d:99:70:cf:26:76:f8:b3:
                    54:d3:5d:6d:8f:3d:55:e5:93:ee:69:d2:ce:6d:57:
                    ef:81:e7:32:65:3a:c1:99:73:a1:72:90:3f:46:33:
                    ea:cd:b0:b7:5d:89:ce:c9:d2:ff:1d:f7:37:86:5e:
                    4d:a6:db:0c:01:29:d8:5e:5c:e0:a1:37:53:82:f8:
                    4f:56:a3:93:07:9b:e8:96:55:1d:b7:5c:2a:39:02:
                    f1:2c:19:09:41:48:ac:f3:bf:e2:22:de:47:96:55:
                    eb:a3:4e:2d:a7:96:5e:f4:78:66:0f:89:a9:b5:a4:
                    55:5c:dc:7c:f4:8d:40:01:18:95:19:9a:d0:5e:05:
                    3b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:44:08:BB:2C:BE:D4:1A:B0:17:CC:43:02:01:88:CB:9A:00:3C:A7
            X509v3 Authority Key Identifier:
                keyid:BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:de:22:00:df:70:5b:53:28:db:0e:05:df:1f:4e:be:9e:05:
         ba:9b:d2:4a:8e:4d:ac:2c:f4:e0:b9:b5:5e:75:7c:c2:dd:ed:
         2a:98:6d:c0:7a:56:c5:42:c3:0c:f1:f9:5c:13:2d:de:ba:86:
         5f:2c:8c:ce:0d:73:70:c7:cc:4d:88:72:97:56:63:84:c4:70:
         d4:dc:b3:60:5a:d3:59:5d:a6:1b:74:60:f7:ff:45:c1:ee:5d:
         37:01:d9:43:ad:29:87:5f:a3:6d:85:95:b6:7f:de:0f:10:de:
         df:44:a8:26:48:d5:74:ad:49:4c:b0:e8:db:65:11:c3:7f:3b:
         24:62:68:c8:9c:8d:89:8d:7e:c9:8a:52:0b:84:eb:31:bc:e5:
         6f:a0:3a:a5:48:3a:57:6b:86:82:0d:4a:7f:6a:77:21:6f:1d:
         92:33:a1:5f:81:a1:b9:8a:a0:53:9a:d3:4a:bd:4c:16:d9:d1:
         ae:06:9b:f6:a4:78:5b:61:7b:fb:de:0e:4a:12:b6:17:d9:72:
         d8:a2:b3:f5:8d:a2:ea:35:19:dc:e2:0a:71:f0:77:91:77:23:
         8f:c1:95:f6:6e:8c:62:6c:cc:1d:04:08:d0:e6:3a:09:35:fa:
         97:bb:f6:9e:46:e1:05:c5:7d:be:1b:f9:a9:be:ea:19:3f:64:
         58:63:e4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:26:29 2026 by rpki-client