Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
File:                     UxR_m8-R0qz49DW6ULgFBUXNH48.mft (raw, json)
Hash identifier:          om7ffsXHNpFV8QiAkMaRSTb4LsuFRPzx9bUy03JDnMM=
Subject key identifier:   C0:4E:46:C6:F5:E3:AE:69:8C:71:92:87:C5:0F:3D:16:61:F0:FE:40
Authority key identifier: 53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F
Certificate issuer:       /CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f
Certificate serial:       01A0C557338EAAA0DBAE8027724625C72C7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
Manifest number:          0676
Signing time:             Mon 21 Sep 2026 19:00:21 +0000
Manifest this update:     Mon 21 Sep 2026 19:00:21 +0000
Manifest next update:     Tue 22 Sep 2026 19:00:21 +0000
Files and hashes:         1: JG0kWB2lcANSZ4icVMdox6PnmQU.roa (hash: S3i14g9db5TMp6vh+BHfXGO+xfDTvXvHBvOwS1Pp8sE=)
                          2: UxR_m8-R0qz49DW6ULgFBUXNH48.crl (hash: gh2SIk86H3UuuC16Siy7v2xQ1VaaHaEV58eVg/BqOsg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:57:33:8e:aa:a0:db:ae:80:27:72:46:25:c7:2c:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f
        Validity
            Not Before: Sep 21 19:00:21 2026 GMT
            Not After : Sep 22 19:00:21 2026 GMT
        Subject: CN=c04e46c6f5e3ae698c719287c50f3d1661f0fe40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:25:33:52:2d:09:12:f8:96:97:95:53:f3:9d:
                    70:44:35:14:34:ae:1f:76:38:3d:bb:e0:e3:a2:ea:
                    04:d0:c6:2b:ff:4d:fa:b4:32:b3:04:98:1d:dd:7e:
                    81:d9:69:b1:b3:a0:0d:a2:9c:75:29:7f:3e:f3:0d:
                    09:02:39:a2:5f:73:90:ce:af:15:42:e2:14:d8:ac:
                    a6:30:15:6f:72:61:62:55:0f:46:50:eb:e5:c9:74:
                    0f:31:6c:13:a0:4d:09:d6:52:e4:c0:0f:0e:60:5a:
                    8f:fb:a9:a7:79:21:75:4a:6c:ad:40:94:4e:e6:ad:
                    14:35:ed:c3:4b:a6:b3:3c:ea:cc:44:a3:d7:c7:63:
                    88:12:e5:e7:6a:24:f2:e7:c7:3c:ae:43:45:56:18:
                    40:ec:cc:41:e3:c3:98:05:00:30:46:1f:3d:ff:2b:
                    45:39:e5:94:fa:0a:47:6c:fc:dd:69:b6:6c:db:8c:
                    8b:1c:24:61:1c:f5:18:df:7d:7a:f9:1e:a7:56:fa:
                    d7:69:f8:87:de:34:1a:81:72:71:fa:0e:cb:ea:c9:
                    a0:0a:7d:3b:99:d1:1c:2f:4d:95:37:75:c9:f0:2b:
                    c0:14:fb:b1:c9:3d:f1:ee:f3:59:cd:5a:f5:3b:03:
                    50:8b:81:3e:2d:eb:28:1c:e9:c2:88:72:36:ed:3a:
                    c2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:4E:46:C6:F5:E3:AE:69:8C:71:92:87:C5:0F:3D:16:61:F0:FE:40
            X509v3 Authority Key Identifier:
                keyid:53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:a9:61:b4:00:9d:f1:23:2d:69:6c:d1:bd:10:26:d4:7f:08:
         be:fe:b8:43:61:0f:7f:55:eb:61:17:0a:28:ad:fe:f2:5b:27:
         b5:76:2b:29:e4:73:cb:a2:e2:26:bf:b5:7b:11:6e:a3:15:ec:
         36:d5:b7:7f:13:87:4e:2a:d1:27:04:95:60:2f:69:9d:92:38:
         d3:65:a1:88:a7:35:58:6c:be:3b:73:1e:8a:3e:75:a0:28:9f:
         69:87:8e:74:58:c3:f4:bf:8e:18:aa:64:05:58:0c:9b:c9:d9:
         ab:fd:58:05:42:16:c6:9d:72:20:53:c9:d9:65:7c:a3:03:29:
         95:da:b7:d4:6d:10:db:6d:e3:a2:7a:fb:78:aa:5c:d1:b1:44:
         47:98:8f:06:7b:61:1a:dd:1e:bb:40:5e:0c:28:1f:03:35:6d:
         90:33:06:09:d5:b3:85:a2:e4:68:0b:0c:47:4a:37:af:fc:b7:
         3a:a8:a9:f2:fd:91:1a:0a:49:70:54:4f:81:a1:5c:1a:08:72:
         01:c5:ff:25:f1:61:cd:c1:9a:17:61:43:2e:ee:b1:97:c0:d7:
         a9:a6:7f:e3:a1:67:65:b5:bc:54:f4:00:c1:a8:8c:b9:b4:df:
         00:a3:67:bc:3d:f1:50:a6:fb:ee:c2:19:42:a6:c2:d9:92:8e:
         68:74:60:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:35:20 2026 by rpki-client