Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
File:                     UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft (raw, json)
Hash identifier:          EC8GG2Q/G6dfhQT5JNXFZjpih8/QsqFPR5wduUCPeCQ=
Subject key identifier:   8D:9C:A6:EA:15:10:F9:3E:A9:F9:EF:E6:FA:6D:E7:1B:12:6C:CE:07
Authority key identifier: 50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33
Certificate issuer:       /CN=50c9da1483fe3993d1985260619735c4cfd38033
Certificate serial:       01A0C88FC1407346D6DA9B489EDEABFAA688
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
Manifest number:          1A68
Signing time:             Tue 22 Sep 2026 10:00:59 +0000
Manifest this update:     Tue 22 Sep 2026 10:00:59 +0000
Manifest next update:     Wed 23 Sep 2026 10:00:59 +0000
Files and hashes:         1: R5_iJAHMim0AgymJSQ6r4wQbiHw.roa (hash: EQeRHkG43biXk81xozYoB7VEoug0HoUQn327W+HkcVI=)
                          2: UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl (hash: YCi56PwaDmRaVppORFMcHHKNPy9YprihU391pnd8mQs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 10:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:8f:c1:40:73:46:d6:da:9b:48:9e:de:ab:fa:a6:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50c9da1483fe3993d1985260619735c4cfd38033
        Validity
            Not Before: Sep 22 10:00:59 2026 GMT
            Not After : Sep 23 10:00:59 2026 GMT
        Subject: CN=8d9ca6ea1510f93ea9f9efe6fa6de71b126cce07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4c:34:61:21:81:84:2b:5d:2c:6e:bf:96:c0:
                    f8:c5:cb:26:f2:c1:35:bd:55:9c:8a:39:80:70:b1:
                    df:f1:93:98:0a:c1:00:2b:20:de:f8:a6:b9:d4:b1:
                    8f:82:dc:44:51:59:0f:1f:7a:94:95:ca:db:94:cb:
                    08:7b:00:e3:ec:5b:b1:36:f8:3b:4a:b6:77:69:6b:
                    ed:dd:29:7d:73:fe:9a:01:02:43:45:62:f9:95:28:
                    81:8c:73:13:23:4a:61:3b:34:ce:af:0f:bf:2f:79:
                    c1:c1:94:1e:89:72:cf:83:c5:c8:92:b1:ed:96:20:
                    68:38:8b:54:36:82:a7:7d:97:82:5e:7f:b5:14:b0:
                    77:6f:f6:9a:02:f9:47:a6:b2:37:04:f9:d4:53:0c:
                    a2:d2:f9:57:68:b5:ac:50:13:61:7c:3c:62:4c:6e:
                    3b:23:c0:f9:85:9f:7e:ef:12:ac:15:26:26:b0:5c:
                    e7:25:f9:35:47:25:76:3c:3e:6a:e1:bf:ff:58:db:
                    60:44:09:1f:6d:64:f5:1e:9e:7b:d4:64:6e:d8:6d:
                    4c:e6:6f:85:2b:01:b3:bb:9d:45:aa:98:2c:00:3b:
                    27:54:73:af:59:b7:98:87:4e:f6:6b:8c:5a:4b:87:
                    28:87:df:98:27:6f:09:6c:30:86:6b:fc:3f:cf:6f:
                    30:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9C:A6:EA:15:10:F9:3E:A9:F9:EF:E6:FA:6D:E7:1B:12:6C:CE:07
            X509v3 Authority Key Identifier:
                keyid:50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:c9:b0:de:ed:e5:ef:8d:76:c2:01:54:f8:56:35:54:2c:53:
         bd:f8:7f:9f:b9:70:ea:d0:ff:a8:fb:17:ef:0a:9a:cd:c2:2a:
         25:5a:ad:c5:1e:20:3e:43:f0:4f:f6:76:70:ba:c9:6e:1b:5d:
         10:0e:ee:9e:78:a4:10:e3:46:3e:5e:fe:2a:54:9f:c7:59:04:
         7c:ea:ee:8b:de:e4:4a:d7:0c:c0:42:a9:b1:6a:45:2b:21:3b:
         79:b1:da:ea:5e:44:0b:d3:3e:26:44:87:6d:6c:b5:30:b3:84:
         58:cd:f2:7d:74:d2:a8:3a:38:68:bd:41:bb:a0:60:00:64:a0:
         57:c5:7d:73:0d:f8:43:8b:19:14:ab:98:22:3d:85:a9:e4:75:
         eb:d9:74:7c:4d:5b:2c:97:f1:69:42:4e:bb:e9:c9:24:4a:e5:
         d0:f9:2b:6b:2c:98:24:29:35:ba:ac:b8:ed:86:c7:38:5a:0b:
         0e:cf:43:53:e1:a3:3f:bc:bc:55:5b:65:11:0b:65:a5:79:13:
         f6:53:0a:e1:e7:57:1b:6e:88:f7:c2:2f:85:e6:e6:79:6a:c2:
         90:a7:ab:a7:95:a9:84:d4:84:82:f5:47:a6:c3:d3:df:c5:51:
         94:96:08:dd:65:89:de:7b:65:bf:27:00:dd:35:00:18:6f:92:
         ab:cb:71:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:53:03 2026 by rpki-client