Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
File:                     uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft (raw, json)
Hash identifier:          ZhHNmSdTysYNU4hr0ylPrBjKZGowp2RHd5+EyCJsZEU=
Subject key identifier:   44:2C:38:52:F9:44:7A:63:E2:4B:9A:EB:05:A2:DC:F9:35:60:21:28
Authority key identifier: B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0
Certificate issuer:       /CN=b8b8da567492dcbf59f98a6bf1d1974ab42bc7d0
Certificate serial:       01A12EEA6777CDE9E125E228FEFA071FB118
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
Manifest number:          1577
Signing time:             Mon 12 Oct 2026 07:01:16 +0000
Manifest this update:     Mon 12 Oct 2026 07:01:16 +0000
Manifest next update:     Tue 13 Oct 2026 07:01:16 +0000
Files and hashes:         1: dsdqBIAnrCJg5gWYaMbCM3qAMWs.roa (hash: /P+LPCXiDZwClBrS2PGojc/QqZ2hX7FiQfLqx4lq3iA=)
                          2: uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl (hash: ZMWe95mi6Hjfj/egMXiXkMqlRNGwimG5YCbGe90hMRg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 23:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2e:ea:67:77:cd:e9:e1:25:e2:28:fe:fa:07:1f:b1:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8b8da567492dcbf59f98a6bf1d1974ab42bc7d0
        Validity
            Not Before: Oct 12 07:01:16 2026 GMT
            Not After : Oct 13 07:01:16 2026 GMT
        Subject: CN=442c3852f9447a63e24b9aeb05a2dcf935602128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:41:6e:fb:78:25:33:8e:8a:c7:40:24:b6:23:
                    71:26:97:15:47:cd:40:10:28:68:f4:a6:c5:c9:3e:
                    6e:bd:d2:ad:65:5e:14:11:88:49:0a:80:8c:12:ab:
                    fe:04:49:c6:98:b0:5e:61:9d:ac:44:b5:79:38:13:
                    c4:91:c0:0e:1b:ce:76:11:5e:4e:40:a9:0c:14:cc:
                    98:0e:cb:a7:5f:0f:a6:86:af:3e:12:6d:fe:08:48:
                    e6:a7:71:e8:0c:23:bc:1c:ee:ef:bc:c1:1c:3a:47:
                    ae:64:1f:c9:95:06:83:dc:3c:a9:a2:89:21:8b:23:
                    f1:13:fd:84:ff:50:54:95:8d:91:e1:7e:20:e7:5f:
                    5f:6d:b7:ad:8c:60:35:4c:38:1a:b8:e7:ff:65:01:
                    e3:03:4d:51:07:03:2f:40:89:ff:e4:a1:f7:3a:3c:
                    45:3d:e5:f6:7e:5c:ed:49:cc:c7:59:79:8d:e3:b9:
                    7f:9a:bb:e2:65:2b:2c:9e:32:c9:fc:47:d1:d0:69:
                    e1:fd:68:99:10:1b:8c:6b:0e:88:c1:b6:8c:e6:23:
                    f1:1f:7f:1f:29:70:c1:df:0c:73:c2:75:52:dd:9b:
                    07:82:05:04:55:a7:07:2c:eb:22:0c:93:d2:43:73:
                    d8:a5:03:b6:a1:e4:e7:0a:50:17:76:b5:ee:5a:07:
                    22:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:2C:38:52:F9:44:7A:63:E2:4B:9A:EB:05:A2:DC:F9:35:60:21:28
            X509v3 Authority Key Identifier:
                keyid:B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:03:1a:34:3d:1c:03:49:5c:43:d5:0e:1a:d2:3c:12:b3:c5:
         64:17:cd:ed:ef:67:99:45:27:4a:85:57:84:76:4d:b6:60:0f:
         5d:bb:be:81:c9:7a:c0:75:e3:88:15:f0:aa:76:d4:57:c5:50:
         98:51:02:c5:08:40:ad:08:5c:ea:55:f1:e9:d5:1d:a7:f8:07:
         bf:c2:5f:2e:22:7a:46:1c:9a:05:ad:94:cd:95:52:3b:47:33:
         49:73:a3:9f:06:0f:91:cf:44:2c:e2:37:26:33:80:52:94:d8:
         62:74:20:3a:46:55:a8:08:24:bb:2a:e9:9b:9a:15:b8:0a:86:
         75:b2:9b:09:9e:43:96:6d:b2:8d:29:0e:db:e5:8d:87:4f:b3:
         8c:24:f7:bd:0a:08:b9:92:d5:a0:44:d5:38:61:36:d6:30:f4:
         6f:34:17:6e:aa:4d:61:36:43:e2:60:08:44:db:1e:02:a9:2d:
         13:8d:16:d3:5f:4d:53:30:ab:45:13:86:c8:af:49:6d:7d:6d:
         06:9f:d8:04:84:c1:41:27:32:6a:7f:67:4a:6e:ec:65:1c:19:
         0b:76:1c:dd:f2:5b:5a:1c:61:25:d7:e8:e9:64:d3:67:8b:c9:
         fb:b2:1b:1e:c6:f2:c4:d9:8f:52:19:dd:d3:fb:36:40:23:88:
         b1:af:c6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 09:56:25 2026 by rpki-client