Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
File:                     ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft (raw, json)
Hash identifier:          frOEw2ygvFFY9rCR5nOeKPegEMa5O6PobQg2RUaB2z8=
Subject key identifier:   B4:69:C3:B6:D4:BC:73:20:B4:BC:46:06:22:A8:11:74:28:3E:13:59
Authority key identifier: B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
Certificate issuer:       /CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Certificate serial:       01A11A198A1B7D1003725A2DDD293B52666C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
Manifest number:          1AA2
Signing time:             Thu 08 Oct 2026 06:00:43 +0000
Manifest this update:     Thu 08 Oct 2026 06:00:43 +0000
Manifest next update:     Fri 09 Oct 2026 06:00:43 +0000
Files and hashes:         1: JxSMfmZSqI3JsHq7y-Q3lsW7V_k.roa (hash: LqYFlCxZmCemaTuAC/WiD/gTuuU0Q9CM+YPDQviSwnI=)
                          2: ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl (hash: c00IBYqqfPqPOcFfB4SyN5ZDZRn1ZM0oB/zffUnsj1Y=)
                          3: zEeP9jNbHcrziM4NoTdt_uL6054.roa (hash: ub4Z+QcgKEhR/M0Z+CEOAnRu0nqsZI8hpuezxPH15Vo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 06:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1a:19:8a:1b:7d:10:03:72:5a:2d:dd:29:3b:52:66:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
        Validity
            Not Before: Oct  8 06:00:43 2026 GMT
            Not After : Oct  9 06:00:43 2026 GMT
        Subject: CN=b469c3b6d4bc7320b4bc460622a81174283e1359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:85:42:cb:f4:8b:70:ec:81:b0:f1:c2:18:a2:
                    4c:44:68:2b:8a:2f:b7:0c:b6:47:78:74:cc:82:58:
                    69:87:d2:a4:7b:30:81:fa:7f:bc:78:fc:f8:69:ec:
                    8c:8f:c1:9f:fb:c4:44:f8:44:30:32:29:fd:c0:c4:
                    11:27:49:c4:fa:a8:44:84:1d:3e:c9:49:c6:99:8c:
                    bd:3b:2a:76:da:e5:5f:33:a9:50:4a:ae:35:f4:62:
                    a8:63:53:90:b1:6f:cb:04:dd:48:be:8e:94:16:75:
                    9e:09:bb:d0:33:cf:98:3e:fd:d9:a2:97:06:63:b8:
                    e4:f2:9a:d8:f9:ee:56:1b:75:8b:d8:e0:61:16:3d:
                    6e:db:1e:95:c8:e5:3c:5c:d8:f0:56:7b:26:c7:33:
                    da:a9:33:08:4d:08:19:03:77:f4:9a:d8:6d:1e:1b:
                    82:2b:26:74:74:ce:f6:3d:e2:ef:be:af:2d:d3:04:
                    e0:77:e3:3d:e3:d6:c1:d6:d4:ee:95:6e:75:31:cd:
                    60:5c:b3:be:86:ad:de:50:43:5d:48:c7:fe:ac:fe:
                    42:d1:74:ac:f4:cd:b2:bf:f7:fe:95:5f:2b:03:31:
                    63:b3:65:39:02:0b:8f:93:21:cc:1d:24:c0:05:81:
                    e7:af:66:1f:c8:91:21:6c:43:b9:f0:8c:bd:4a:0f:
                    d2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:69:C3:B6:D4:BC:73:20:B4:BC:46:06:22:A8:11:74:28:3E:13:59
            X509v3 Authority Key Identifier:
                keyid:B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:4a:c7:ae:3b:2d:1a:4d:c3:c4:c6:4b:f9:be:a8:a6:c7:47:
         f3:98:95:97:68:d8:3c:d3:51:0a:af:08:0d:39:71:75:ed:8f:
         31:2e:fa:19:41:15:c1:01:9a:b9:c5:7a:17:a9:d2:11:d4:b5:
         f1:f7:29:2a:31:fd:da:7c:da:6b:0e:fb:d2:8f:b8:58:24:c3:
         65:4f:c5:b6:57:d6:34:55:b4:e7:63:02:41:4c:9e:f7:4c:b2:
         87:9d:eb:40:b1:cc:19:07:d6:ee:5a:e1:67:a1:48:c0:12:c0:
         4b:79:de:71:28:26:9b:c7:67:a0:2d:0a:1c:63:b4:70:f4:69:
         18:53:db:08:c1:8c:d0:01:32:7c:ff:bd:8a:e5:10:a0:f2:30:
         38:c0:31:9f:77:e3:ea:95:3c:07:e7:71:a4:ac:f3:8a:c2:10:
         20:d6:1b:02:d0:64:8a:8c:9d:cf:98:2e:c7:5d:96:53:bd:76:
         6c:a9:a8:f5:66:d2:cd:eb:5e:55:c5:87:cb:d1:aa:52:c6:f0:
         ad:aa:8b:9f:da:7c:d6:cb:2a:a8:05:f5:8f:04:f9:24:bb:49:
         7b:58:1c:30:dc:18:51:a0:a6:fd:5b:cc:aa:a3:f6:bc:48:cc:
         e1:c7:32:24:fa:a4:41:b8:be:97:ae:bc:62:61:f4:4a:7a:b5:
         cf:1b:16:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:47:33 2026 by rpki-client