Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft
File:                     UAqdaSWQfcZs55keuULmgLE5E6k.mft (raw, json)
Hash identifier:          o2e8y1O1NNye85WgS5N2Q1tKXzaxypZ2fHGaqOGT/X4=
Subject key identifier:   8E:FB:35:0A:1C:F6:85:5A:E8:9B:55:4A:48:98:CD:C4:56:77:CD:34
Authority key identifier: 50:0A:9D:69:25:90:7D:C6:6C:E7:99:1E:B9:42:E6:80:B1:39:13:A9
Certificate issuer:       /CN=500a9d6925907dc66ce7991eb942e680b13913a9
Certificate serial:       01A0D1C93141818C31204DF763D69A6E3F29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UAqdaSWQfcZs55keuULmgLE5E6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft
Manifest number:          01B2
Signing time:             Thu 24 Sep 2026 05:00:18 +0000
Manifest this update:     Thu 24 Sep 2026 05:00:18 +0000
Manifest next update:     Fri 25 Sep 2026 05:00:18 +0000
Files and hashes:         1: UAqdaSWQfcZs55keuULmgLE5E6k.crl (hash: meK3ezlXG+4ymc5zjn9LIhRGJSIGXEGYh0+hfTrPK9A=)
                          2: XTRFNK15Srj4Dxkx9BJpGhvon9c.roa (hash: 2JtlFPv4dLd8U4gLpBv5lJb7jlDjsUb3MwUWDpaLfmA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UAqdaSWQfcZs55keuULmgLE5E6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 05:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:c9:31:41:81:8c:31:20:4d:f7:63:d6:9a:6e:3f:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500a9d6925907dc66ce7991eb942e680b13913a9
        Validity
            Not Before: Sep 24 05:00:18 2026 GMT
            Not After : Sep 25 05:00:18 2026 GMT
        Subject: CN=8efb350a1cf6855ae89b554a4898cdc45677cd34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a9:52:3e:0f:d6:cd:31:ab:fe:b5:b6:5c:31:
                    ff:45:c8:a8:9c:20:37:0f:c5:91:c7:be:da:b9:50:
                    30:68:3a:e8:cb:d9:ea:09:a5:c5:9a:0b:87:73:4e:
                    fc:96:eb:dc:3f:d6:60:90:2b:0a:aa:7f:d4:6b:44:
                    8d:42:6f:42:00:9a:84:81:78:f3:d8:8d:5a:57:f3:
                    a4:65:8d:94:fc:0d:ab:90:6c:52:74:6b:b1:2f:47:
                    c7:12:52:2c:db:93:6e:81:8b:af:28:c0:61:33:cc:
                    1a:11:b8:ba:56:08:28:aa:bc:4b:3d:39:70:18:79:
                    22:4f:0b:04:5f:6b:64:b5:f7:09:11:3d:f8:40:96:
                    da:6e:85:2d:33:df:d8:ad:90:cc:ce:21:4c:16:3d:
                    b2:46:cb:93:88:89:c5:23:bf:4c:d6:4d:1b:92:e2:
                    61:dd:ca:3a:fc:f9:c1:06:df:8e:06:cc:1e:72:d6:
                    2f:59:c4:5f:bf:9f:71:40:51:48:dd:5f:de:67:cb:
                    bb:be:50:b4:61:be:1c:d9:27:00:25:35:68:85:df:
                    0b:4c:12:75:8b:3b:5c:84:ae:cb:97:6f:77:6b:24:
                    d1:79:0f:2c:89:0b:e9:81:bc:1b:d7:16:6e:4a:50:
                    d0:ce:74:fc:3e:7b:c1:fa:c4:d5:96:0a:c1:7e:70:
                    41:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:FB:35:0A:1C:F6:85:5A:E8:9B:55:4A:48:98:CD:C4:56:77:CD:34
            X509v3 Authority Key Identifier:
                keyid:50:0A:9D:69:25:90:7D:C6:6C:E7:99:1E:B9:42:E6:80:B1:39:13:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAqdaSWQfcZs55keuULmgLE5E6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:cb:0a:32:97:66:ed:b5:a3:1f:76:66:b2:fd:2d:4d:f7:0a:
         fc:ef:98:b6:76:0a:e2:94:bb:76:45:c7:e6:0e:07:c9:d1:6c:
         d3:e5:d8:21:68:89:88:cc:f0:83:2f:87:4d:6d:25:59:a4:d2:
         a6:5a:b6:e0:da:8e:cc:54:15:1d:48:e5:dc:8c:8a:39:b6:6e:
         9e:f5:9e:db:c4:0a:f1:73:45:02:19:c1:21:fa:0a:ed:01:2b:
         53:4f:c6:7f:a4:86:b1:ba:d7:60:19:0f:e3:bc:9f:d2:3b:32:
         87:07:bd:68:cb:62:d9:c2:35:57:ce:39:eb:6c:e7:e0:71:d8:
         61:04:b7:5b:d7:15:bc:d0:a9:aa:be:bd:cc:59:f5:27:d6:0a:
         e2:a5:3a:60:e4:7a:95:63:4d:06:c8:69:4e:9e:ae:bc:ff:dd:
         3c:a5:91:bb:8d:97:d6:b4:42:af:3c:fd:50:60:51:c0:44:bf:
         94:36:c1:6f:44:8f:8d:30:17:6e:f5:fa:82:5f:e3:98:c2:38:
         56:e3:8f:34:66:15:21:7e:f6:99:6d:73:eb:87:43:5a:8c:d1:
         59:2d:ed:08:26:e4:c5:0e:59:79:f8:30:49:b0:f9:08:8f:7d:
         3a:7f:11:86:bf:da:38:50:9e:23:3c:ae:fb:7e:2c:f9:3a:69:
         a8:32:ce:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:05:43 2026 by rpki-client