Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft
File:                     UuAiJP-5cRcuSTXtfdll0RVQibY.mft (raw, json)
Hash identifier:          FIbq3TmxNAi/6EkR2SQ7Bhln/mM/KT7XmOsqdxJMlZk=
Subject key identifier:   BB:6D:3F:9A:21:65:A4:02:5D:56:6C:A8:9D:85:14:01:4E:E6:2E:7F
Authority key identifier: 52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6
Certificate issuer:       /CN=52e02224ffb971172e4935ed7dd965d1155089b6
Certificate serial:       01A0C4E9AE5D88C06382B8689395DD7FF8F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft
Manifest number:          13F2
Signing time:             Mon 21 Sep 2026 17:00:43 +0000
Manifest this update:     Mon 21 Sep 2026 17:00:43 +0000
Manifest next update:     Tue 22 Sep 2026 17:00:43 +0000
Files and hashes:         1: Ej04tqIea-55QGqR9P8U_IWSz5E.roa (hash: 56Ay1dz7+2/hrBe1gefM4Z9MpRY5OP2aiLGQZC5nqmk=)
                          2: UuAiJP-5cRcuSTXtfdll0RVQibY.crl (hash: ZGu3yK6Aw5WBgZ7cDI6dCTt9/CuOUJ9bmXyf06naKBM=)
                          3: bKZux_GRyhQisliOyg0o3pomUGE.roa (hash: UT5otdZIy6+fjq+k6mHMr69f+BiRVOr2Dbn8liI5eMU=)
                          4: eed8-v0DQQsIlGh_LdKlEMEvsTw.roa (hash: ryiQISgXOOgfkizItwqCf8st8jseYCZTQbYCWpyKpsM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:e9:ae:5d:88:c0:63:82:b8:68:93:95:dd:7f:f8:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e02224ffb971172e4935ed7dd965d1155089b6
        Validity
            Not Before: Sep 21 17:00:43 2026 GMT
            Not After : Sep 22 17:00:43 2026 GMT
        Subject: CN=bb6d3f9a2165a4025d566ca89d8514014ee62e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ad:8e:c4:16:09:d3:ea:da:2c:88:60:cf:5a:
                    68:1f:29:a6:34:c2:45:30:4e:66:66:b6:f4:6d:27:
                    18:17:3e:a1:a8:2b:77:4a:4c:0b:dd:66:66:1d:d3:
                    45:d8:18:70:fe:89:57:6e:56:44:29:41:0b:33:a8:
                    16:e6:dc:51:52:07:f7:87:42:8c:89:62:24:58:d5:
                    eb:23:5b:c5:5a:85:8e:9c:ec:b2:74:52:57:f1:dd:
                    cc:70:b3:7e:fe:29:76:cb:f9:f0:4b:4b:ab:db:3f:
                    09:98:1d:6f:be:a0:26:c3:75:0d:80:84:80:f8:a6:
                    00:fc:8a:19:8d:ad:3e:ee:c2:24:65:af:c5:7c:f1:
                    04:e3:34:38:42:14:1c:08:ee:5a:6f:43:9c:4b:70:
                    3e:b6:d5:ca:90:01:c3:3b:bd:b4:ff:76:3c:cd:e7:
                    53:61:ab:61:92:3e:4d:80:12:6d:44:e1:61:ae:b0:
                    d3:10:9d:8d:d9:5b:cc:4d:a4:d6:7d:d6:89:3a:f0:
                    1f:1b:70:0c:91:12:93:9f:dd:75:e8:fd:1e:ad:6f:
                    7c:4f:d8:bc:bc:cf:c7:ae:db:8a:ab:4c:c3:94:c0:
                    99:6f:47:5c:96:1a:77:cf:01:f9:82:5e:73:f9:44:
                    eb:b5:75:83:89:14:e2:7d:c2:7d:89:24:d8:96:6c:
                    c5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:6D:3F:9A:21:65:A4:02:5D:56:6C:A8:9D:85:14:01:4E:E6:2E:7F
            X509v3 Authority Key Identifier:
                keyid:52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:e0:e6:c6:7c:a0:9e:15:86:67:1b:12:d6:c3:f5:0f:0c:9c:
         cd:fc:78:b2:90:07:0e:c6:29:72:da:06:41:d5:d1:cc:b8:f4:
         37:d0:0a:6e:d9:56:c7:05:e1:4d:75:49:df:e2:34:74:82:56:
         93:9d:df:a2:6e:7f:f3:ef:87:5d:4b:67:c1:84:b0:a8:07:5a:
         fe:a4:54:08:8f:30:9c:e0:db:65:49:1c:ff:8b:a1:4d:ed:23:
         f5:17:90:d9:0c:d9:83:de:09:d5:6f:c4:3b:c7:24:05:87:4f:
         e0:33:d2:cc:48:31:53:cb:77:ce:78:d4:9f:6a:b6:da:fe:ff:
         47:a2:f2:44:6c:42:ab:fe:e0:27:77:e6:7e:91:58:5d:ed:4f:
         e6:6f:55:46:0e:f8:1c:24:85:7e:19:76:09:92:cf:62:97:ae:
         67:b2:5a:22:e4:6a:5d:9f:63:ca:e2:ab:ca:11:1d:ce:be:3a:
         df:42:72:c0:e9:10:9c:e8:57:d7:0e:93:25:c2:66:6d:38:af:
         4d:e3:e1:ae:1d:c4:9f:35:24:e9:26:2b:90:07:a2:c9:80:38:
         ea:39:35:b5:10:c5:f5:93:a9:1e:f2:a0:dc:62:ff:fd:cf:f0:
         cd:12:df:45:f3:8c:13:79:32:40:ea:15:0f:5a:7e:5f:6a:d3:
         ed:66:0b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:30:24 2026 by rpki-client