Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
File:                     UbLEAc5cnogc2aO-jv7GACLaDrY.mft (raw, json)
Hash identifier:          b7mh6Xvwq2Gl1rlAY9ql18P7Fr67oaRjti2HYj/wDgU=
Subject key identifier:   3A:C3:BF:E3:0E:AA:6C:B8:77:17:01:97:86:5E:EE:B0:33:2A:1F:E6
Authority key identifier: 51:B2:C4:01:CE:5C:9E:88:1C:D9:A3:BE:8E:FE:C6:00:22:DA:0E:B6
Certificate issuer:       /CN=51b2c401ce5c9e881cd9a3be8efec60022da0eb6
Certificate serial:       01A0BE42B121AACDDF2B471E0233B3F9B708
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
Manifest number:          0508
Signing time:             Sun 20 Sep 2026 10:00:36 +0000
Manifest this update:     Sun 20 Sep 2026 10:00:36 +0000
Manifest next update:     Mon 21 Sep 2026 10:00:36 +0000
Files and hashes:         1: 7nfjUKMCV_0dkRD9QIxhQ1BPufY.roa (hash: gulW2Fam69TrlFiG88xoJ7S5EpFW5hwd8HZdAINgZRw=)
                          2: 8EkWCJKlGUuYCmtpF6giWaBabGQ.roa (hash: Sqr1KDT12n1Gb1flLKRN7KU4X7Bc8YqBHnVl5nyK2K4=)
                          3: MxZUaOK8Ovtd2YeXUj-uaE88_eQ.roa (hash: Fko89UG8aEMvOTWbfyMIqaGd+GLcrLD58QG0NMQTI3w=)
                          4: UbLEAc5cnogc2aO-jv7GACLaDrY.crl (hash: lnL8ZetLyeok5kqRztTwKbL6D6+R99u58aHzSTqrPVM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 10:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:42:b1:21:aa:cd:df:2b:47:1e:02:33:b3:f9:b7:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b2c401ce5c9e881cd9a3be8efec60022da0eb6
        Validity
            Not Before: Sep 20 10:00:36 2026 GMT
            Not After : Sep 21 10:00:36 2026 GMT
        Subject: CN=3ac3bfe30eaa6cb877170197865eeeb0332a1fe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:26:8f:5d:1d:0c:ff:28:9d:b0:92:54:78:d3:
                    a3:33:78:60:aa:43:59:c7:a2:6c:af:75:f5:26:11:
                    74:d5:70:81:ab:34:92:f5:ed:89:53:c5:46:83:ca:
                    e5:0e:dc:2a:f6:18:92:79:aa:dc:10:f4:be:03:a3:
                    ed:7c:44:f8:da:85:a8:af:59:e6:f2:cf:77:54:b7:
                    b7:b8:96:af:d9:40:88:21:1c:8a:c1:cc:b1:be:b4:
                    ce:7a:89:31:66:db:f5:75:50:9a:40:23:f9:05:ef:
                    8c:0e:24:31:a0:ee:b1:1e:76:85:48:72:4a:11:e6:
                    b7:f1:cf:75:69:9a:21:e6:82:10:25:d7:05:24:36:
                    ef:0d:cc:39:ea:4f:7b:43:ba:09:e5:39:dd:d0:5d:
                    6e:88:59:0b:00:dc:eb:44:62:ca:26:1a:23:92:7e:
                    a2:6a:30:4b:1c:a5:d1:d3:ee:74:b4:e1:05:db:e8:
                    59:12:be:4b:02:46:fb:37:e1:0b:bc:03:a8:bf:ca:
                    b4:f5:f1:9b:dc:e3:6b:36:ec:b6:ea:bd:b3:81:75:
                    1e:20:2e:57:8a:cc:f7:e1:cf:76:88:51:53:82:65:
                    9d:bd:fa:42:b3:cc:55:cb:97:e0:99:fc:35:1b:00:
                    9e:98:cd:64:5d:54:b7:de:0e:77:51:06:09:ae:32:
                    72:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C3:BF:E3:0E:AA:6C:B8:77:17:01:97:86:5E:EE:B0:33:2A:1F:E6
            X509v3 Authority Key Identifier:
                keyid:51:B2:C4:01:CE:5C:9E:88:1C:D9:A3:BE:8E:FE:C6:00:22:DA:0E:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:ee:df:e0:65:cd:e6:20:f5:b6:6a:e6:65:45:ce:16:dc:5c:
         66:df:f9:62:b8:eb:d0:3d:a8:e1:e6:da:d5:71:db:1a:21:07:
         d0:e5:d2:6b:36:48:fd:7f:04:69:de:8e:82:94:59:49:56:66:
         9b:ef:f2:b6:2a:5d:a7:43:de:40:73:bd:39:eb:ae:15:1e:8b:
         1a:a7:0b:04:3c:00:88:61:5c:0b:97:7d:f0:e7:4f:1a:e5:90:
         9f:76:82:f0:44:28:3d:2b:20:39:2c:c8:f1:6f:09:b3:2a:dc:
         65:45:f0:5e:f7:c6:7c:0a:eb:55:7a:de:e3:84:a8:06:1e:b4:
         1b:73:a7:b7:18:1a:35:15:3d:76:62:a2:6b:c0:2a:1b:51:99:
         dc:13:ee:e8:e4:92:19:0e:f8:a6:fb:a5:c2:c0:97:9d:a0:25:
         b0:93:c3:8d:2a:4f:d8:3a:6f:19:97:21:85:5a:ef:84:50:99:
         89:ba:26:7d:29:e4:0a:0a:36:47:e3:43:48:a0:30:bf:5b:78:
         34:62:0b:0b:5a:26:7f:07:43:e8:f6:33:74:83:01:23:78:92:
         3e:90:b6:e1:96:63:74:26:19:f7:9b:28:be:fa:db:e2:50:37:
         d8:8f:4a:a8:2d:3c:ac:d2:39:85:78:9f:c1:ba:02:15:05:d5:
         77:93:df:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:24:19 2026 by rpki-client