Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
File:                     uC57gGjErprkykw6ayCWGZp0H_I.mft (raw, json)
Hash identifier:          55GvdEaqLCT1NYyM8pjkZqABYtmrLLopwNrQmWCa33E=
Subject key identifier:   1E:3E:77:40:10:06:5D:54:31:3D:DA:BE:DD:27:04:74:12:8E:BF:32
Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
Certificate issuer:       /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Certificate serial:       01A12B44B4E33EAE1C4489C0A7C3A0B446E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
Manifest number:          1736
Signing time:             Sun 11 Oct 2026 14:01:25 +0000
Manifest this update:     Sun 11 Oct 2026 14:01:25 +0000
Manifest next update:     Mon 12 Oct 2026 14:01:25 +0000
Files and hashes:         1: D9vGSctTQ6G39-Tj1KvzWEev7A0.roa (hash: dCtLdzE8AAyiXqvWxFMu+nXlWgdt/7ZcgVwWdiQ4TE4=)
                          2: J85fjuSQxz3wg1fx9HApSpky-cc.roa (hash: UxFrHM/u1QxNZlVa/F5dPFto/GBnUH2xgwkXvxIONS8=)
                          3: JSRjHuE9Dlxbd6kNUCmCyuTjzi8.roa (hash: zf3sZG8UyEv9zaK8C2m/Vb5bOTa/zuVQAu3HlY+cXHI=)
                          4: PGDw99LFu8cUJWnydQ7BWcOhXTI.roa (hash: x69/sh35YI+yTa5z+lbFr8Vns/76h1dYMvcCscIlmMQ=)
                          5: uC57gGjErprkykw6ayCWGZp0H_I.crl (hash: 1yZj0FTkKGJp3dSrrNQ2c0ccswYtAJU/5u0i3KaIIbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2b:44:b4:e3:3e:ae:1c:44:89:c0:a7:c3:a0:b4:46:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
        Validity
            Not Before: Oct 11 14:01:25 2026 GMT
            Not After : Oct 12 14:01:25 2026 GMT
        Subject: CN=1e3e774010065d54313ddabedd270474128ebf32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7f:c8:72:79:c3:6b:1d:9a:47:95:e3:80:b5:
                    60:17:21:5c:b0:9e:69:b9:fd:5a:22:f2:d1:4b:96:
                    14:a3:a8:b7:c4:01:a3:ed:f0:a8:e0:e3:e6:71:72:
                    70:02:9c:b1:9b:7e:d3:45:be:81:f2:cc:14:6a:f2:
                    65:db:c8:c2:72:37:81:d4:aa:4b:e7:8a:05:3a:b9:
                    42:ad:ce:52:c7:6a:db:52:81:89:bc:8e:9b:10:b2:
                    67:f1:17:78:d1:86:88:b5:4b:64:e6:04:65:0c:fa:
                    c1:57:ea:64:4a:a9:e7:3c:06:74:5c:2b:aa:d5:7e:
                    2e:ef:e2:22:2e:23:a4:e7:fd:5b:d0:23:c1:11:d1:
                    2a:44:7c:bc:71:be:8f:95:29:86:d8:f4:f1:10:ef:
                    12:fc:27:05:bf:8a:0a:7f:57:b8:36:45:34:32:ba:
                    ea:3a:3c:96:0e:63:ab:66:18:52:80:50:af:01:e3:
                    fc:4c:e7:63:d0:17:0b:e0:e7:6e:c1:62:09:b4:73:
                    09:28:85:dd:8b:4a:a0:04:8c:23:fa:05:c0:29:0d:
                    b9:1a:a0:38:c9:e2:b6:3d:7d:df:00:4d:2f:ba:99:
                    ff:50:63:8f:12:4d:b3:11:c6:64:3c:8b:59:40:a9:
                    09:b6:e9:3b:11:6e:7c:ac:ab:37:ea:b2:4a:f5:fe:
                    2b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:3E:77:40:10:06:5D:54:31:3D:DA:BE:DD:27:04:74:12:8E:BF:32
            X509v3 Authority Key Identifier:
                keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:2f:f7:d9:b8:6b:01:7a:1b:5c:21:52:e8:d0:82:45:4d:fc:
         40:c1:06:82:f7:fd:cd:7d:b0:fb:01:38:d2:61:16:47:9e:f1:
         35:7b:80:5e:73:4b:f5:92:29:b5:c0:ca:f7:97:32:73:32:9a:
         8e:ff:37:bf:d8:ee:6d:5b:7a:a5:ce:63:59:69:e4:4e:6c:44:
         90:4f:21:9d:dc:bc:f7:f0:97:c3:42:3d:87:96:0d:50:3c:d2:
         21:06:bf:9f:b7:a2:5a:e9:af:da:21:92:29:d0:2c:0e:c7:44:
         5e:28:f7:51:07:f8:66:3b:f3:3b:7d:e4:f2:6b:e0:38:54:82:
         50:bb:10:fb:b0:3a:12:af:d5:3d:e0:db:90:4e:65:fb:b9:7f:
         45:07:72:91:94:de:87:c3:53:73:9c:3d:a5:15:8b:72:49:c9:
         d7:a9:d5:e1:b1:af:37:69:99:68:83:0a:82:11:53:c7:04:a8:
         6a:f0:bb:e3:ed:00:23:09:89:f7:ce:80:bb:81:79:36:90:9e:
         96:da:32:31:c8:f0:ee:dd:29:e4:a1:48:19:90:c8:3b:45:4e:
         da:97:9b:f8:bf:1c:c5:d7:72:7f:98:0d:88:ee:70:86:c2:46:
         90:99:30:18:f2:84:ef:74:cc:ae:0e:1a:c9:50:07:c8:22:cc:
         3b:2d:d8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:51:18 2026 by rpki-client