Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.mft
File:                     UWGN8AbVSNHYftZBlVBmLbb8BgY.mft (raw, json)
Hash identifier:          fZUNuUNIvaddqOXNu2cS7oSOSiSwA1xJ+hCaF4CUevQ=
Subject key identifier:   A0:3E:16:40:DB:65:7C:A6:EA:49:43:6A:85:DE:C2:A5:5D:5F:29:BE
Authority key identifier: 51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06
Certificate issuer:       /CN=51618df006d548d1d87ed6419550662db6fc0606
Certificate serial:       01A1AB27C1302E020FA0DFE7E8BB3DDC9EC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.mft
Manifest number:          1AE6
Signing time:             Thu 05 Nov 2026 10:01:11 +0000
Manifest this update:     Thu 05 Nov 2026 10:01:11 +0000
Manifest next update:     Fri 06 Nov 2026 10:01:11 +0000
Files and hashes:         1: DeVxF-ajyv69tQ1jWZaFly-h3_M.asa (hash: s3uI2uzcUVAP2Ke0qq2OsJ0Qz8VUvl1F8D3nklCzw3w=)
                          2: Nr34upPMc1itfVkdnNNT1AsCW_w.roa (hash: FFJtZD22Fu2rvHlrFEbupNfTchtF8nOl9Mph7JlreGw=)
                          3: UWGN8AbVSNHYftZBlVBmLbb8BgY.crl (hash: dQ7du2Usdudy7Zcop7h3qM8tvzeBzSyKn2mBmMoW/vw=)
                          4: YbuC1bNZXVvgL4FjcHE-Hxau0bI.roa (hash: VMAWXxm8m+lr90Os4J8wdRHpKQb82mpCrK1hI4HDfj4=)
                          5: jR6smR259DLDFgyK1zIk0sEQi6M.roa (hash: e6/RLtoVyyyv2YlCw0lcJ5Nkg+16H+58XOUnr+NRnzU=)
                          6: p4lMHdo4l30tBAk1ODxehJl7wWg.roa (hash: GFcdFC6qL34sruvTk9IJu2tkqlWw6IlfX6Zy2WNxmQU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 08:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:ab:27:c1:30:2e:02:0f:a0:df:e7:e8:bb:3d:dc:9e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51618df006d548d1d87ed6419550662db6fc0606
        Validity
            Not Before: Nov  5 10:01:11 2026 GMT
            Not After : Nov  6 10:01:11 2026 GMT
        Subject: CN=a03e1640db657ca6ea49436a85dec2a55d5f29be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:dd:69:8d:75:c3:2f:28:4c:b4:0f:2c:c8:8f:
                    e4:86:be:fe:8a:61:29:a2:4f:b1:7a:43:45:4b:39:
                    3f:0e:6a:6d:cc:52:66:50:55:6b:19:84:a1:8d:ac:
                    d9:05:9c:cd:2d:8f:8c:2f:01:3f:f9:2f:2d:f9:68:
                    4b:0c:4e:ce:85:97:7c:c1:99:a6:d0:13:f8:be:e2:
                    48:72:3f:09:28:d4:33:ee:c2:c5:69:38:11:d7:48:
                    65:6d:b4:a0:19:05:48:e3:db:b1:c7:2b:fd:d9:72:
                    53:2c:3a:3b:01:b7:92:9c:02:20:65:54:b7:60:4f:
                    84:68:d7:ad:97:03:5e:44:f5:be:a2:57:4f:f6:36:
                    13:b8:7d:74:73:c5:8b:ca:84:c5:2e:dc:ff:71:ca:
                    30:6a:87:5b:d1:a4:06:da:37:41:07:2d:38:f3:7e:
                    a8:70:b0:c5:f2:9b:0a:5b:f2:8f:b0:17:77:0b:07:
                    6d:72:a3:1e:c8:3d:f0:ff:d1:49:09:a2:30:0c:cb:
                    54:22:97:b4:03:19:8e:18:09:ec:a7:23:e1:10:54:
                    82:f7:bb:4a:f4:6d:19:a4:f6:b7:2f:31:de:fa:2e:
                    93:2c:7a:aa:d3:f7:f8:b0:de:c7:fe:e2:77:8a:1a:
                    fa:8c:ae:80:12:96:19:b0:d3:da:19:0f:54:99:21:
                    38:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:3E:16:40:DB:65:7C:A6:EA:49:43:6A:85:DE:C2:A5:5D:5F:29:BE
            X509v3 Authority Key Identifier:
                keyid:51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:6a:92:84:28:52:e4:48:54:9c:c6:34:1a:d6:68:c6:32:6c:
         8a:a1:eb:ab:5e:1e:23:83:60:ba:4d:04:ee:a8:e0:d0:9a:74:
         47:24:4a:18:a0:6e:81:a1:69:a9:de:91:6a:da:64:c4:d5:5f:
         32:28:0c:1c:a7:6e:41:7c:6d:e2:a0:da:f2:0c:2b:3b:da:86:
         4a:2a:bd:59:57:36:20:85:0f:6d:8f:94:ea:f9:61:1e:b9:7d:
         1d:ad:ab:75:20:b5:fb:a0:28:2b:a7:a6:52:a9:4e:13:d0:26:
         59:c7:db:12:31:6b:d8:34:7f:30:6a:46:77:bd:e2:bc:d1:8a:
         3d:39:a4:eb:1e:ba:71:ca:08:c9:07:6b:b5:50:a0:3c:5d:15:
         34:93:39:2c:37:dd:e1:50:d2:1d:36:2c:af:04:05:55:5b:fd:
         8e:af:d1:10:13:12:7c:3e:d6:d1:d2:ac:13:63:8c:d8:3e:ba:
         0b:01:42:53:ab:70:a0:62:f7:4e:9f:cf:03:70:2e:e2:d2:e2:
         c0:2b:76:15:2e:bd:d0:8b:b7:71:48:78:70:00:3c:d6:fc:e8:
         38:bb:d2:06:45:20:70:29:3f:0a:64:97:65:3b:f2:a7:bb:8f:
         e0:45:d2:13:fe:a1:46:60:6f:43:d9:92:e2:cd:35:b6:e5:62:
         95:82:13:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:09:25 2026 by rpki-client