Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
File:                     1SrUBolIgw2enlis5eHxcDSOQCQ.mft (raw, json)
Hash identifier:          NrGiiQleyoaQ5NfyacDSPzGiJ4UXY9sa+EZGSLsD3qQ=
Subject key identifier:   C4:10:B4:9B:96:39:14:E6:D2:8A:6E:88:F6:8C:63:99:B4:0C:B7:00
Authority key identifier: D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24
Certificate issuer:       /CN=d52ad4068948830d9e9e58ace5e1f170348e4024
Certificate serial:       01A0CF6D172DD1F761E0503F371002A8C2E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
Manifest number:          12F2
Signing time:             Wed 23 Sep 2026 18:00:27 +0000
Manifest this update:     Wed 23 Sep 2026 18:00:27 +0000
Manifest next update:     Thu 24 Sep 2026 18:00:27 +0000
Files and hashes:         1: 1SrUBolIgw2enlis5eHxcDSOQCQ.crl (hash: 5xXAWQMAL2kEJXxbDasV6xcrfS0ayTIHD8yhjaI28rQ=)
                          2: ubq_xBKrBDVmoRiicjeCjxM9yfM.roa (hash: 0xkkVTV2725zH3I8++A4kA66tUTB4Kd5cJoEJ4T50Pg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:6d:17:2d:d1:f7:61:e0:50:3f:37:10:02:a8:c2:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d52ad4068948830d9e9e58ace5e1f170348e4024
        Validity
            Not Before: Sep 23 18:00:27 2026 GMT
            Not After : Sep 24 18:00:27 2026 GMT
        Subject: CN=c410b49b963914e6d28a6e88f68c6399b40cb700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8a:15:dd:37:1d:b6:76:95:e8:d5:ff:94:26:
                    79:21:68:44:9b:0c:72:21:eb:19:e3:9b:7c:a6:d4:
                    c6:6f:79:58:59:1f:a9:49:a5:77:0f:c5:75:bb:b1:
                    a2:72:a7:97:bd:4a:0e:c9:1c:01:9c:36:3d:dc:ef:
                    0e:ff:3c:2f:a3:a2:56:91:0a:62:ac:56:7c:87:1a:
                    da:bb:c9:8b:d4:37:02:3d:4c:57:56:67:7c:86:ed:
                    fd:f4:b2:6d:8c:88:d9:67:80:bf:2c:36:45:77:5d:
                    68:42:b9:7a:c2:82:94:45:92:0e:66:8a:c6:93:2f:
                    d1:42:d7:9e:ac:74:be:c6:4a:e7:0b:4a:67:c4:c0:
                    46:05:ea:74:24:0d:aa:0f:fe:3a:bd:77:6b:50:4f:
                    93:68:b9:cf:94:38:d2:30:6c:f7:36:e8:eb:c1:f8:
                    b4:37:b2:45:7f:4c:97:f8:03:00:72:94:c6:28:89:
                    5f:7f:1f:83:98:79:6a:c6:a1:84:23:c4:b0:62:34:
                    14:e1:d3:0e:25:1f:27:c7:a3:8d:61:b6:db:b6:ad:
                    74:ad:57:d8:27:bb:92:27:43:25:cd:13:e9:9a:d8:
                    d8:09:dc:14:27:4b:c4:09:bb:08:7e:08:a6:be:e5:
                    bd:b2:83:37:72:f8:70:89:2b:19:16:c1:80:36:5e:
                    b8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:10:B4:9B:96:39:14:E6:D2:8A:6E:88:F6:8C:63:99:B4:0C:B7:00
            X509v3 Authority Key Identifier:
                keyid:D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:c0:45:0c:c6:3e:bf:42:52:57:c5:a7:3c:2e:61:66:0a:ce:
         cc:2b:b9:1d:e9:e8:10:7a:dd:20:04:2a:03:0d:a8:cc:7e:85:
         2a:91:79:58:2f:e5:0b:a6:82:af:e0:21:c8:a3:f0:d3:de:9d:
         8d:c5:d3:66:b8:4a:85:1f:a9:86:e5:74:60:e2:11:20:da:65:
         e0:27:f8:c9:6e:15:79:df:49:00:a3:d3:45:95:49:e6:f6:b6:
         49:05:0c:d6:cb:23:90:7b:ad:bd:90:6c:1b:39:2b:bb:c0:bc:
         49:c6:38:cd:f3:6e:a6:c5:ed:47:2d:1c:25:4d:17:b8:8f:99:
         21:3a:7d:aa:ca:b7:be:a1:a7:d2:87:93:8a:7a:13:f6:8d:6d:
         8d:3f:d7:cf:9e:d3:ed:04:c1:72:f0:27:2f:8f:c0:53:de:b1:
         ca:ea:32:bc:90:6a:80:e3:fb:44:9d:72:29:54:1a:21:8a:a9:
         6d:2f:ed:19:16:8f:db:97:8d:30:92:33:d1:62:3b:9a:f0:b7:
         ed:3a:d5:80:12:12:45:d4:12:37:6d:ff:4c:42:e2:5a:be:6d:
         3c:9c:f6:cb:a3:3a:cb:d1:5c:08:72:19:7b:d8:6f:d7:34:84:
         c0:78:94:10:95:85:0d:9d:24:a7:e8:9c:2d:7a:89:de:e9:ef:
         a1:78:ba:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:33:47 2026 by rpki-client