Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
File:                     U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft (raw, json)
Hash identifier:          G36ftUYzHX98ErUBMGthxUl57MP8UQ+6oOwBSAJS05o=
Subject key identifier:   58:C7:ED:63:45:D1:D1:E2:FD:A4:C8:77:81:E9:7C:19:D7:21:4A:C2
Authority key identifier: 53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61
Certificate issuer:       /CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61
Certificate serial:       01A0EA0A2DC6E6B2F80476E4074B30AD7448
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
Manifest number:          12AD
Signing time:             Mon 28 Sep 2026 22:02:10 +0000
Manifest this update:     Mon 28 Sep 2026 22:02:10 +0000
Manifest next update:     Tue 29 Sep 2026 22:02:10 +0000
Files and hashes:         1: 9f-8muSj0lPpqv2C-uJT8RSg4Wk.roa (hash: SrfNBs8fLNs8CyzsQB76S5MYdUrN0e+cR0WQ3SPKGe4=)
                          2: MB6VGwOGXL__4GDkn2ifKfMOL5o.roa (hash: tgzruOGhqB7Wz++Uyka8T5HxSlsKFcquj+FXoKwEcRM=)
                          3: ORixJag7nGsUVhn_7z-jWKPNs6c.roa (hash: 5T3+aTdZe3zV/H6LETA51CJXrWU4B9XcKgVJJWWibzo=)
                          4: U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl (hash: VLSny74ff5GYF/lzWdWG0N1UljlsGe2zc0zj6wFtH8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ea:0a:2d:c6:e6:b2:f8:04:76:e4:07:4b:30:ad:74:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61
        Validity
            Not Before: Sep 28 22:02:10 2026 GMT
            Not After : Sep 29 22:02:10 2026 GMT
        Subject: CN=58c7ed6345d1d1e2fda4c87781e97c19d7214ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:e5:68:c7:9f:08:f7:85:80:9e:98:7f:8f:50:
                    73:b3:f9:31:e6:c7:8c:1a:45:12:aa:fc:68:4e:45:
                    62:e1:5c:d8:50:fa:41:24:9a:77:46:ee:b7:00:03:
                    b1:49:d1:8e:44:19:24:38:e0:e1:3d:4d:12:62:ef:
                    6d:40:bf:66:84:74:7f:b5:c6:c0:46:be:fa:93:fb:
                    89:3b:cb:32:a4:07:b0:a2:76:af:20:ee:38:8c:88:
                    10:77:04:3f:b7:01:0d:25:cb:48:77:7d:ba:bc:ae:
                    0c:fb:ce:37:1d:27:41:10:cf:00:fa:f4:d8:26:96:
                    e9:6e:9e:10:67:e7:8d:e4:ef:63:68:b1:df:6a:70:
                    f1:eb:89:84:84:ae:a7:54:f7:01:c0:80:f2:6b:15:
                    2e:79:a6:78:d0:ba:ce:c8:91:41:ec:6b:51:5a:11:
                    a3:98:44:86:4b:dc:05:c2:97:8f:8d:e1:ea:e2:15:
                    5c:e7:e2:e7:d8:80:17:b6:ba:8b:d4:23:46:ef:1e:
                    87:28:b9:ff:20:e3:ed:95:ca:a4:03:b0:64:12:41:
                    d3:40:80:72:3e:c2:53:2e:e1:2f:43:5e:d9:0c:63:
                    22:6d:14:1c:b2:90:ef:ac:64:11:3a:91:81:90:1d:
                    2b:5f:9d:2c:70:54:2d:ed:a9:55:ee:0f:25:c4:8f:
                    c0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C7:ED:63:45:D1:D1:E2:FD:A4:C8:77:81:E9:7C:19:D7:21:4A:C2
            X509v3 Authority Key Identifier:
                keyid:53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:f9:e0:8d:aa:c6:0a:66:54:8d:f9:b9:48:58:0a:2f:68:92:
         4d:07:89:09:aa:65:d8:49:5e:25:fa:72:c8:91:d2:14:d2:85:
         3b:4b:d1:af:a6:e6:de:e6:1b:b1:0f:51:ee:0e:34:7f:08:bb:
         29:dc:1a:77:62:75:1a:9d:03:72:bd:fc:77:7b:ec:db:bb:bd:
         06:4d:5e:09:07:34:aa:42:80:71:08:b7:b8:32:0f:ec:29:3c:
         49:ed:17:4b:93:e2:f8:9e:1b:44:6b:2a:dd:14:ae:f7:b3:c8:
         d6:ae:c1:36:96:6c:1f:de:ad:fa:6b:d7:9e:34:48:8d:06:74:
         5c:b5:5c:0b:35:73:49:59:3b:52:08:3f:18:c9:a7:68:d6:eb:
         3a:a1:72:56:ee:9b:c8:d3:b9:d6:e4:81:b8:a9:32:f2:a3:f8:
         19:20:d2:e1:5a:4b:38:ba:83:e7:a1:4c:62:8f:e8:20:01:e1:
         83:25:95:fd:25:93:c8:26:c0:d9:89:e4:1f:65:4f:39:cc:44:
         df:75:83:26:e2:bb:dd:37:ea:fb:01:b9:dd:87:9b:cf:08:86:
         ba:1a:ea:4b:e6:16:90:f6:9d:da:61:47:0f:dd:52:9f:19:aa:
         f8:2e:f2:99:48:43:5f:a0:7a:ec:1b:4f:d7:ce:52:f3:0e:95:
         e5:c1:ea:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:50:06 2026 by rpki-client