Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
File:                     uSEnfz55VKSvVSCpkEL7CJOvgE0.mft (raw, json)
Hash identifier:          rRSyeUMGK69KWvTBgTsmvJKthZ9NVdOPcCnvgXKDEyc=
Subject key identifier:   7A:4B:C0:58:D8:0A:3C:DA:EC:20:23:CF:76:D4:A9:F7:3D:C3:02:D5
Authority key identifier: B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D
Certificate issuer:       /CN=b921277f3e7954a4af5520a99042fb0893af804d
Certificate serial:       01A0D94D5D901F5B9B6D06768BE17CCE70EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
Manifest number:          1A71
Signing time:             Fri 25 Sep 2026 16:02:01 +0000
Manifest this update:     Fri 25 Sep 2026 16:02:01 +0000
Manifest next update:     Sat 26 Sep 2026 16:02:01 +0000
Files and hashes:         1: 7XorW7ITUOWgP4pU38fX3RKpcv0.roa (hash: dhKstKlCZm4b7W0PXvIWJClLT8IvcIHMNCKR+Y++DYI=)
                          2: hTUAMk4ivW-zcf6qV0iH6m50Tko.roa (hash: VBCrCjN466HYq/3fbWnNr2nU6AFrUJpSz4d+MsDsH6k=)
                          3: po2AjEIA0cEB2DRz3ItNN0tLtJA.roa (hash: emEIyu5B7Cay8ES1oJZR9gyFPVy8pKl4tqO8qQcgwDQ=)
                          4: uSEnfz55VKSvVSCpkEL7CJOvgE0.crl (hash: qox1dGhWMkKV+2zOMhaLQq4/vDz+dFZS5iOzoarLwkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:4d:5d:90:1f:5b:9b:6d:06:76:8b:e1:7c:ce:70:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b921277f3e7954a4af5520a99042fb0893af804d
        Validity
            Not Before: Sep 25 16:02:01 2026 GMT
            Not After : Sep 26 16:02:01 2026 GMT
        Subject: CN=7a4bc058d80a3cdaec2023cf76d4a9f73dc302d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d3:ea:dd:39:bc:a1:a1:bb:87:c5:14:da:9c:
                    7b:1a:a8:73:ab:db:9c:a1:f3:50:3b:4c:d4:ef:04:
                    da:0f:c3:6d:e1:2b:7c:4e:c5:11:07:7c:35:5f:18:
                    a8:f2:3f:f7:e6:70:d8:9f:6a:e9:72:62:e1:c8:40:
                    4c:95:5a:66:f3:85:e5:70:0f:c1:2a:25:a9:12:41:
                    85:29:1d:d1:42:35:d9:3f:7d:ed:d0:bd:8a:89:34:
                    9f:e3:1c:27:e4:e1:90:1d:8b:c6:68:b5:b0:7f:fc:
                    ab:54:f4:f5:31:fb:52:c2:ec:e1:bb:9e:7d:09:34:
                    cf:38:23:77:e5:0c:50:79:f8:48:f4:20:b8:39:02:
                    e1:a0:07:2c:f0:c4:bd:2b:15:e6:ca:99:21:17:e0:
                    8c:91:42:fe:4f:02:5f:ff:09:7e:6a:ad:78:0e:46:
                    61:f1:8f:f9:c4:28:6c:ea:6c:7e:09:d5:b0:8b:fb:
                    7e:ba:cd:05:49:16:ac:5b:2a:ba:4c:08:29:23:c8:
                    3a:bc:4e:22:3e:a6:30:43:62:64:dd:97:b3:57:2a:
                    ff:e9:00:fb:c5:19:3f:81:23:df:56:13:63:56:6b:
                    6c:a7:20:17:0e:de:91:3f:58:54:c8:ce:bf:5d:9d:
                    ce:4d:1e:74:dc:8b:8b:bd:a8:a8:f3:00:35:97:43:
                    14:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:4B:C0:58:D8:0A:3C:DA:EC:20:23:CF:76:D4:A9:F7:3D:C3:02:D5
            X509v3 Authority Key Identifier:
                keyid:B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:22:b7:c4:d4:b7:47:b9:48:ee:fc:5a:e9:3a:ce:75:d4:7a:
         a7:82:e3:28:8c:e1:1d:73:4d:7f:71:d6:83:d2:d4:d2:fd:24:
         59:48:ac:f9:a3:e6:6c:e7:c1:87:bb:2c:93:d0:0a:6b:cd:53:
         5a:54:8e:ee:ca:04:73:c1:57:8e:cc:1f:e2:30:17:c0:7e:9a:
         05:a7:f9:46:4d:84:63:1d:a9:b9:89:82:93:56:86:a7:07:72:
         98:89:54:15:b9:30:02:0f:76:52:56:9c:76:cb:28:a8:d7:57:
         11:63:56:64:a5:1b:c9:c4:01:71:fa:17:f4:f4:a9:75:ba:14:
         cd:ed:86:b6:8c:ac:e3:30:9b:82:ef:c9:f3:98:59:a6:41:44:
         4b:67:ec:dc:47:37:9e:b3:84:3f:04:3d:89:66:40:87:1b:3e:
         77:16:0f:c4:fd:01:1e:32:82:3d:29:9a:63:df:70:f0:a4:31:
         93:2a:11:4a:82:79:c1:d8:ea:73:36:f8:17:b4:ad:55:72:f6:
         d6:d9:51:bb:2f:f7:85:f5:e8:c5:3a:bb:61:97:d7:8b:b4:01:
         43:4d:fb:56:0b:06:2d:0f:a8:1f:26:3a:88:bd:34:ca:2f:23:
         ca:82:4b:bb:25:56:83:08:fb:6c:9f:06:b9:16:e6:b8:27:e2:
         04:ed:18:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:28:08 2026 by rpki-client