Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
File:                     uNr6fqVTF4Ez5-hP7risOp28-co.mft (raw, json)
Hash identifier:          ILWI/L4uznIAiQfUXuu7DtOQ4Fyn27kR1DIbwcv3uMs=
Subject key identifier:   D6:17:90:BD:B0:F1:26:33:52:CB:7A:B9:A9:E6:D4:1E:04:D1:A5:6C
Authority key identifier: B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA
Certificate issuer:       /CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca
Certificate serial:       01A0D45CEF90F55EA0C31C7EA6F78C928A5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
Manifest number:          0D23
Signing time:             Thu 24 Sep 2026 17:00:55 +0000
Manifest this update:     Thu 24 Sep 2026 17:00:55 +0000
Manifest next update:     Fri 25 Sep 2026 17:00:55 +0000
Files and hashes:         1: 9NcfTMLVoNSYpzrSkWvCRuMOb5Q.roa (hash: mlHMZG1glKs9hrx1o4pEeWTBfTmCOu0t+uHHFDpEA0Y=)
                          2: uNr6fqVTF4Ez5-hP7risOp28-co.crl (hash: BAI5bpvZ3Dcg01tAdnx0gCAj0RLV94Glofw7/80VO0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 17:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:5c:ef:90:f5:5e:a0:c3:1c:7e:a6:f7:8c:92:8a:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca
        Validity
            Not Before: Sep 24 17:00:55 2026 GMT
            Not After : Sep 25 17:00:55 2026 GMT
        Subject: CN=d61790bdb0f1263352cb7ab9a9e6d41e04d1a56c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cb:1d:6c:01:73:24:c9:ac:58:28:1e:7c:58:
                    69:6e:7f:9e:5b:10:13:c7:d3:8c:b8:8a:5d:79:36:
                    2f:57:5d:0e:6b:da:11:eb:b7:a4:a9:00:d4:44:8a:
                    9d:f7:96:1d:87:68:fa:4f:57:7b:cd:25:35:0a:4d:
                    97:df:d4:fd:ba:9e:15:bb:cc:f6:dc:b2:e0:77:a5:
                    50:d3:31:57:c7:bb:56:56:6e:60:5c:9a:1f:9e:2f:
                    9e:00:ce:34:e0:e9:48:e6:b4:c3:81:e7:2f:39:ac:
                    97:17:2b:25:12:73:61:12:d1:a3:58:bc:4f:cd:df:
                    73:db:eb:59:3e:ca:a3:05:32:59:cf:42:a1:f6:e7:
                    41:07:fb:57:22:1e:75:ad:4d:5e:dc:96:80:52:c9:
                    1b:38:a1:2a:5e:0a:97:cd:06:36:d5:90:9a:0b:14:
                    c7:57:f7:ec:54:6b:b5:5f:df:50:32:0a:54:49:0f:
                    bd:c6:b0:0d:4b:65:55:7e:01:33:d2:6a:09:ca:21:
                    91:5f:93:af:2c:73:c1:8f:c3:ab:7f:fe:56:f7:e9:
                    59:5a:ce:0d:c6:a1:12:37:f9:e3:18:85:bc:e0:89:
                    68:35:78:00:24:69:1e:62:54:b3:16:a2:75:97:8d:
                    1f:40:dd:df:f7:4d:ea:5d:e6:50:85:e6:01:5d:e1:
                    7c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:17:90:BD:B0:F1:26:33:52:CB:7A:B9:A9:E6:D4:1E:04:D1:A5:6C
            X509v3 Authority Key Identifier:
                keyid:B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:00:17:7f:d7:26:9f:84:92:f4:5b:03:bc:9b:c8:e8:6d:4a:
         b9:78:2b:e9:be:78:9a:07:c2:07:ff:ec:14:f7:e3:67:23:fa:
         92:0f:63:a7:3a:1b:db:68:14:20:88:f2:01:93:69:51:3c:2a:
         23:72:fe:77:e4:67:07:ca:77:b2:4a:e7:0e:53:0a:77:bd:9a:
         6e:8a:b3:bb:8c:02:7b:1c:cc:a9:0d:5d:43:11:53:67:dd:2a:
         14:41:e7:f6:d3:13:9e:b5:ce:ae:50:cc:d2:94:e4:cf:ef:83:
         4e:ed:7c:30:46:d6:8c:23:3b:20:4d:d9:93:6c:5c:17:d2:08:
         c8:62:a9:ad:10:3e:7c:f3:b2:fe:dd:9b:fd:88:cf:ab:ef:34:
         52:13:74:04:63:de:8b:1f:ec:da:97:8e:71:c7:0f:fd:20:36:
         bd:ee:20:29:f9:98:1b:75:9f:75:0d:ca:ed:e2:75:83:ef:2a:
         f8:e1:fe:f9:7e:a1:7c:a9:59:9c:87:40:6e:01:d9:65:1c:1e:
         d9:c6:ff:dd:18:4a:6d:f6:49:be:5a:96:95:68:b3:d1:80:82:
         3a:19:e6:40:3d:cd:a4:e1:29:f9:37:8a:2e:f8:59:bb:6c:ef:
         f5:2a:6f:95:ee:5f:25:59:bb:d0:61:f1:b2:58:21:f6:f8:be:
         45:d7:4e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:22:38 2026 by rpki-client