Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
File:                     UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft (raw, json)
Hash identifier:          /oLbo8q1qEmQfEYQ0RDiG1GuqOB5SY3UWwcxIcxEyxQ=
Subject key identifier:   DD:D0:A8:B5:A3:7C:CA:62:D0:C7:71:BA:A8:23:92:C1:1D:09:FC:4F
Authority key identifier: 50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
Certificate issuer:       /CN=509df728d1b46634054972d2945fda58073b5762
Certificate serial:       01A0C47B48B9FAEF6C87D908812C6632E7C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
Manifest number:          1A6B
Signing time:             Mon 21 Sep 2026 15:00:08 +0000
Manifest this update:     Mon 21 Sep 2026 15:00:08 +0000
Manifest next update:     Tue 22 Sep 2026 15:00:08 +0000
Files and hashes:         1: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl (hash: j+TEvqgUuJ4KUgNsRmwGGk4uCDEwf0uy2LsY7jo6DAE=)
                          2: YiTZyM0LJDlibzSScA19n-r_1NA.roa (hash: xUwCbyrQAmjQ9KEmQXtJqtnkqDlVNHnF+1vzDoqaWUE=)
                          3: iLi7f9ZUhRFIePAx_CbpyKFYVLY.roa (hash: +jK5YhwAWuiSD7jiuyksRnOSQ26Q7wRKEX5irQTiJO4=)
                          4: jaFu9pBfM8muxEa6Z1M7bqPV5TY.roa (hash: D7hQEIQMJfA1ZdopDczTPfE2hg2zaIc0IFSTi8hUD0k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:7b:48:b9:fa:ef:6c:87:d9:08:81:2c:66:32:e7:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509df728d1b46634054972d2945fda58073b5762
        Validity
            Not Before: Sep 21 15:00:08 2026 GMT
            Not After : Sep 22 15:00:08 2026 GMT
        Subject: CN=ddd0a8b5a37cca62d0c771baa82392c11d09fc4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:12:ff:d5:28:d0:6a:94:5a:16:27:7b:3d:32:
                    95:c8:fc:3d:da:23:c0:66:62:5c:ed:94:29:74:36:
                    2d:18:1f:c4:ff:04:a3:a1:af:76:77:fa:0b:a8:2b:
                    ff:7b:9e:39:bb:2f:35:b4:fe:75:fd:73:b5:aa:16:
                    a6:17:a7:5d:4c:92:9e:7e:fb:ac:39:5b:32:4d:af:
                    57:61:4f:63:78:77:8b:56:5f:27:3f:41:62:07:eb:
                    fa:6c:e7:26:4e:9c:13:91:44:78:77:79:97:72:55:
                    3c:7a:c8:ef:13:2a:71:39:a3:02:4c:e1:23:8e:51:
                    15:72:4a:05:bf:28:bb:93:2c:1a:8f:c2:17:7e:af:
                    88:12:9a:d6:d2:95:73:83:f0:7c:07:98:5c:57:0d:
                    ec:1a:84:34:99:1a:3f:02:f9:17:d7:fb:fd:03:64:
                    4f:69:8c:0d:0e:db:c3:3e:70:ac:a7:0f:47:e2:b8:
                    6a:74:8e:fa:2c:cb:9a:9c:13:c4:5d:79:d5:4d:5c:
                    ee:d8:84:4c:5d:f2:c8:43:34:53:1d:d5:fe:60:50:
                    db:fa:03:a0:e1:11:25:a3:55:e0:93:85:1b:c1:23:
                    b7:7d:e8:15:43:3e:d8:83:51:c9:94:33:ab:fd:a3:
                    ee:f4:29:09:18:9d:b2:88:05:59:42:46:1e:7e:9f:
                    71:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D0:A8:B5:A3:7C:CA:62:D0:C7:71:BA:A8:23:92:C1:1D:09:FC:4F
            X509v3 Authority Key Identifier:
                keyid:50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:5e:17:4f:7d:2f:30:b6:cf:1c:3c:eb:07:c2:ea:f8:a4:9b:
         8d:03:66:0a:ce:ee:64:a2:5a:b1:74:1a:e2:d8:d2:4e:76:c8:
         7d:e4:44:06:1e:27:7e:30:09:8e:f2:ff:c9:59:6a:5d:1f:5c:
         29:d1:d9:fa:6a:12:80:a7:c8:34:0b:96:84:d3:e7:98:70:77:
         d0:9d:64:12:77:19:ce:86:76:80:fc:27:d4:ba:ce:43:82:26:
         01:79:e2:77:58:87:9f:87:38:37:3f:e8:de:7e:0c:2c:6c:49:
         18:0d:21:25:46:44:b0:c5:44:c1:02:8a:e6:75:34:49:e3:69:
         58:80:be:27:f2:24:c0:d8:db:ac:ce:71:21:56:0c:ec:c4:53:
         14:b7:7b:24:14:7f:17:7c:38:cd:94:70:1d:dc:67:c4:9f:30:
         0e:50:6c:ec:18:ab:02:ef:3d:a6:14:fc:c4:74:b0:8b:d8:da:
         07:47:fe:8f:43:9a:87:a3:c8:ab:18:11:d2:e4:d6:1e:1c:ef:
         c4:d1:24:65:1a:6b:98:05:40:14:f9:ea:b2:c2:48:61:97:3a:
         62:cb:e5:b1:cb:30:3e:7d:1c:0b:9b:27:6f:78:39:d4:3f:50:
         74:a0:d3:4a:65:0b:c9:32:1e:5e:de:94:38:78:9b:f0:aa:01:
         c7:50:ba:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEe0i5+u9sh9kIgSxmMufIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwOWRmNzI4ZDFiNDY2MzQwNTQ5NzJkMjk0NWZkYTU4MDcz
YjU3NjIwHhcNMjYwOTIxMTUwMDA4WhcNMjYwOTIyMTUwMDA4WjAzMTEwLwYDVQQD
EyhkZGQwYThiNWEzN2NjYTYyZDBjNzcxYmFhODIzOTJjMTFkMDlmYzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphL/1SjQapRaFid7PTKVyPw92iPA
ZmJc7ZQpdDYtGB/E/wSjoa92d/oLqCv/e545uy81tP51/XO1qhamF6ddTJKefvus
OVsyTa9XYU9jeHeLVl8nP0FiB+v6bOcmTpwTkUR4d3mXclU8esjvEypxOaMCTOEj
jlEVckoFvyi7kywaj8IXfq+IEprW0pVzg/B8B5hcVw3sGoQ0mRo/AvkX1/v9A2RP
aYwNDtvDPnCspw9H4rhqdI76LMuanBPEXXnVTVzu2IRMXfLIQzRTHdX+YFDb+gOg
4RElo1Xgk4UbwSO3fegVQz7Yg1HJlDOr/aPu9CkJGJ2yiAVZQkYefp9xJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3QqLWjfMpi0MdxuqgjksEdCfxPMB8GA1UdIwQY
MBaAFFCd9yjRtGY0BUly0pRf2lgHO1diMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUozM0tORzBaalFGU1hMU2xGX2FXQWM3VjJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hY2ZjYjYtZDc4YS00NDhhLWE3NjEt
ZGQzYjRmODM4MWM0LzEvVUozM0tORzBaalFGU1hMU2xGX2FXQWM3VjJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hY2ZjYjYtZDc4YS00NDhhLWE3NjEtZGQzYjRmODM4MWM0
LzEvVUozM0tORzBaalFGU1hMU2xGX2FXQWM3VjJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX14XT30v
MLbPHDzrB8Lq+KSbjQNmCs7uZKJasXQa4tjSTnbIfeREBh4nfjAJjvL/yVlqXR9c
KdHZ+moSgKfINAuWhNPnmHB30J1kEncZzoZ2gPwn1LrOQ4ImAXnid1iHn4c4Nz/o
3n4MLGxJGA0hJUZEsMVEwQKK5nU0SeNpWIC+J/IkwNjbrM5xIVYM7MRTFLd7JBR/
F3w4zZRwHdxnxJ8wDlBs7BirAu89phT8xHSwi9jaB0f+j0Oah6PIqxgR0uTWHhzv
xNEkZRprmAVAFPnqssJIYZc6YsvlscswPn0cC5snb3g51D9QdKDTSmULyTIeXt6U
OHib8KoBx1C6Zg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 21:23:21 2026 by rpki-client