Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
File:                     UbLEAc5cnogc2aO-jv7GACLaDrY.mft (raw, json)
Hash identifier:          Pfj8cHv+EJ1QBCARMx7Qyx3mfHtIAhr6EL6UGUqA+fg=
Subject key identifier:   7E:53:3A:1B:8A:43:23:4F:65:B5:8E:21:1C:B7:38:7A:93:35:F9:7B
Authority key identifier: 51:B2:C4:01:CE:5C:9E:88:1C:D9:A3:BE:8E:FE:C6:00:22:DA:0E:B6
Certificate issuer:       /CN=51b2c401ce5c9e881cd9a3be8efec60022da0eb6
Certificate serial:       01A1A9DE3A459C869CF1195F656A10D17B03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
Manifest number:          0582
Signing time:             Thu 05 Nov 2026 04:01:15 +0000
Manifest this update:     Thu 05 Nov 2026 04:01:15 +0000
Manifest next update:     Fri 06 Nov 2026 04:01:15 +0000
Files and hashes:         1: 7nfjUKMCV_0dkRD9QIxhQ1BPufY.roa (hash: gulW2Fam69TrlFiG88xoJ7S5EpFW5hwd8HZdAINgZRw=)
                          2: 8EkWCJKlGUuYCmtpF6giWaBabGQ.roa (hash: Sqr1KDT12n1Gb1flLKRN7KU4X7Bc8YqBHnVl5nyK2K4=)
                          3: MxZUaOK8Ovtd2YeXUj-uaE88_eQ.roa (hash: Fko89UG8aEMvOTWbfyMIqaGd+GLcrLD58QG0NMQTI3w=)
                          4: UbLEAc5cnogc2aO-jv7GACLaDrY.crl (hash: wA+16tlJ+NR0qrNmRi6Yu+8DCarT5qNlxNAEgMD+hXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 04:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:a9:de:3a:45:9c:86:9c:f1:19:5f:65:6a:10:d1:7b:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b2c401ce5c9e881cd9a3be8efec60022da0eb6
        Validity
            Not Before: Nov  5 04:01:15 2026 GMT
            Not After : Nov  6 04:01:15 2026 GMT
        Subject: CN=7e533a1b8a43234f65b58e211cb7387a9335f97b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:54:de:e3:8b:fc:9f:56:43:7e:88:3b:82:9a:
                    20:12:21:78:13:a0:2a:47:03:ac:b5:25:1f:5c:20:
                    67:a3:a5:66:28:e3:28:8d:b5:2c:07:21:c9:54:3a:
                    be:02:6c:03:44:3d:4d:b6:26:4f:53:14:39:2e:e0:
                    63:65:f6:24:78:3d:31:cb:8f:2a:27:c0:b0:8a:3e:
                    13:b7:86:29:f6:ca:01:57:68:a9:69:fc:36:d6:4a:
                    74:55:4c:f0:85:ff:b9:40:83:6b:31:ea:b7:87:95:
                    fa:0d:31:e6:22:95:c2:fd:7e:17:dc:01:98:8f:e5:
                    57:91:88:76:4c:69:f3:94:2b:ee:03:9c:61:35:de:
                    10:1c:c9:87:8a:86:19:a5:cd:c7:cb:95:8e:3d:d1:
                    73:87:80:64:f8:bb:c6:f9:2c:24:37:b1:5c:44:5d:
                    84:74:b6:47:40:8f:45:52:ab:2a:f2:57:b5:2a:4d:
                    cc:a3:83:13:90:80:d2:ba:38:50:cc:71:d4:02:d9:
                    84:d8:84:e6:ad:28:c9:20:8f:39:6f:94:b0:da:ad:
                    d5:29:d6:7f:50:bf:73:17:ba:07:65:4a:d9:c8:fc:
                    94:4b:9c:cd:bc:57:b4:ef:2c:84:e1:e0:cd:f2:7d:
                    e1:f9:1c:2c:b8:58:0d:21:97:17:28:9c:52:dc:5f:
                    ae:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:53:3A:1B:8A:43:23:4F:65:B5:8E:21:1C:B7:38:7A:93:35:F9:7B
            X509v3 Authority Key Identifier:
                keyid:51:B2:C4:01:CE:5C:9E:88:1C:D9:A3:BE:8E:FE:C6:00:22:DA:0E:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:a2:1f:0b:32:eb:02:9d:75:a7:12:56:40:87:57:43:22:a2:
         6b:eb:c1:78:61:21:54:3b:ca:d7:36:07:aa:25:57:2c:23:97:
         88:79:5a:45:ed:6e:88:db:a2:bf:39:2b:16:2b:46:3d:7d:13:
         5c:69:70:63:8a:6e:9a:60:30:8c:46:85:3a:68:cb:88:f0:2a:
         6a:be:01:d8:41:28:15:b2:38:8a:fd:30:c5:8e:3e:46:8a:4f:
         fc:3f:28:f9:78:69:07:f3:f6:10:55:73:65:79:28:17:85:c7:
         65:ea:2e:4e:00:9f:ac:49:a4:ef:e8:41:7e:95:82:a6:28:46:
         4b:63:f3:9b:64:74:cd:e1:f8:5f:81:52:53:b9:9f:c2:55:45:
         19:b2:85:d0:be:4c:a8:56:2a:83:97:07:b7:44:8c:cd:de:9e:
         a5:03:07:5f:c1:91:ea:26:a8:54:5f:76:d9:95:be:35:43:63:
         5b:4e:08:d2:cf:26:03:0e:80:30:18:4d:cb:24:d4:b9:9c:00:
         c3:c7:5d:1f:bd:15:44:30:48:fd:13:9e:cc:2b:17:a7:99:bb:
         fd:13:22:85:d4:0a:c8:39:e6:09:d9:19:25:2b:cd:d7:e2:3c:
         11:73:d1:e9:86:4c:3f:1d:e4:0b:f7:14:dc:03:73:d0:d9:89:
         40:cd:68:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:01:41 2026 by rpki-client