Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
File:                     ud8VbuGLaVjUMGtjEbSghnY-_2I.mft (raw, json)
Hash identifier:          ZJ9J5SoPy3QjRiaFrKCkZ+D3fw+Aetn6YwgizH5topQ=
Subject key identifier:   50:E7:DF:F0:3C:A6:C3:4C:97:D0:9D:DB:96:E8:EC:8D:42:1B:B8:91
Authority key identifier: B9:DF:15:6E:E1:8B:69:58:D4:30:6B:63:11:B4:A0:86:76:3E:FF:62
Certificate issuer:       /CN=b9df156ee18b6958d4306b6311b4a086763eff62
Certificate serial:       01A0C40E3D8DFA682A9E7C03ED97A4B6A909
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
Manifest number:          1673
Signing time:             Mon 21 Sep 2026 13:01:02 +0000
Manifest this update:     Mon 21 Sep 2026 13:01:02 +0000
Manifest next update:     Tue 22 Sep 2026 13:01:02 +0000
Files and hashes:         1: 189oV8GncXIuUHjeoI_E8INYiQs.roa (hash: 0A49Lxa8+HmOmnCCbU77IrfpJ/mis7ETSIxuX6hEu0Q=)
                          2: T_XFNeZT8y3cvlmC-FDGyTbQPEQ.roa (hash: yPf4MjNnJsPVmh5cf0exZFQpxpGLZw774YP/hVrhXHU=)
                          3: ud8VbuGLaVjUMGtjEbSghnY-_2I.crl (hash: S6VhliJfwRvUUwp/ucS+wfzoqPCSCKKDwhfpeRoiqfA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 13:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:0e:3d:8d:fa:68:2a:9e:7c:03:ed:97:a4:b6:a9:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9df156ee18b6958d4306b6311b4a086763eff62
        Validity
            Not Before: Sep 21 13:01:02 2026 GMT
            Not After : Sep 22 13:01:02 2026 GMT
        Subject: CN=50e7dff03ca6c34c97d09ddb96e8ec8d421bb891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d1:99:44:c0:8c:db:dd:cf:87:d5:07:86:f0:
                    80:2f:85:2e:88:24:3b:ed:ba:ce:37:4b:29:d9:92:
                    c3:e4:b8:ca:ee:41:5e:56:8e:cb:fe:1f:03:46:6a:
                    40:7c:00:c4:03:ea:e7:1b:37:cd:7e:0c:71:bd:f7:
                    86:0b:33:8d:3d:ce:63:fb:5b:05:a0:a8:6a:37:0c:
                    e5:36:18:3d:2a:df:55:04:06:78:49:9e:ef:fd:03:
                    48:27:ef:b9:43:f7:d7:28:33:b9:d6:fe:f6:bc:6b:
                    17:d1:cb:66:8e:00:7b:62:f3:f7:95:94:6d:f2:4e:
                    83:26:c7:32:4e:e5:66:d5:37:4b:16:e0:0b:10:2e:
                    b5:8a:46:33:cb:01:55:eb:02:b4:d1:18:d4:cc:16:
                    a8:af:96:5c:0a:b3:6f:73:3e:92:a4:91:d8:c0:1c:
                    cf:f6:dc:56:bc:d0:e4:65:67:88:59:06:4b:9a:b8:
                    2a:bf:b6:f3:d2:11:33:5f:12:93:21:f4:9b:16:cd:
                    e6:d8:3d:66:b0:98:a5:a5:10:0e:60:00:0f:72:f3:
                    e5:58:55:6c:2c:82:33:b6:d7:c4:90:9c:ce:b6:bb:
                    1c:25:6e:50:6a:8e:5e:47:2b:20:dc:29:ea:bc:dd:
                    4c:ad:b1:66:95:c5:c6:d3:2d:09:73:c7:4a:01:34:
                    51:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E7:DF:F0:3C:A6:C3:4C:97:D0:9D:DB:96:E8:EC:8D:42:1B:B8:91
            X509v3 Authority Key Identifier:
                keyid:B9:DF:15:6E:E1:8B:69:58:D4:30:6B:63:11:B4:A0:86:76:3E:FF:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:57:da:8c:e2:40:f5:6c:f6:99:0d:cd:fe:3a:13:fd:5f:ba:
         36:7b:9a:31:7c:9f:9a:b8:81:93:ea:26:c9:50:83:dc:91:1e:
         31:99:64:43:5c:cb:7c:5d:18:95:d3:fb:9f:10:06:ba:af:57:
         a6:3c:6d:75:42:b9:1b:46:23:4c:dc:12:23:23:ae:19:a6:ef:
         50:bb:40:61:24:ca:ce:29:a7:f4:4a:85:24:9f:c7:2a:6c:fa:
         c7:5f:55:9a:19:9c:f0:bb:ab:a8:cb:ff:c7:0d:28:49:09:a6:
         eb:c2:f4:ed:27:4c:65:af:85:b1:ff:50:32:2f:f0:18:1a:11:
         eb:ca:2b:c5:2a:a7:b4:17:63:fa:9a:7b:8a:88:73:f1:5a:92:
         e4:40:d5:c1:01:10:46:ab:45:86:d9:b2:28:0f:55:7b:54:11:
         7b:04:39:ec:30:c0:da:f7:d8:4a:5c:80:b3:0b:68:b5:3e:01:
         30:c9:ab:34:fe:e8:38:de:a4:fd:c3:7d:69:74:93:7f:37:28:
         28:5d:03:26:a1:ac:eb:ec:67:89:6a:46:4e:1e:19:19:82:6c:
         3d:d6:d7:af:23:ac:77:81:87:ff:d2:90:a9:76:a0:d1:a6:76:
         59:10:fe:33:97:b4:d3:31:27:35:65:cd:5a:6c:30:b8:a4:ae:
         66:1c:9f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:19:43 2026 by rpki-client