Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
File:                     UEUj-IEevlqjWYURpI87rwABqOg.mft (raw, json)
Hash identifier:          z6iAYgShsx4eL5xpDtZOnofKuw+vR8CAoTPkEVsaCpU=
Subject key identifier:   B2:13:D6:EB:EC:B7:7C:0B:03:3A:A4:E4:D7:38:6A:9D:AE:0A:65:CF
Authority key identifier: 50:45:23:F8:81:1E:BE:5A:A3:59:85:11:A4:8F:3B:AF:00:01:A8:E8
Certificate issuer:       /CN=504523f8811ebe5aa3598511a48f3baf0001a8e8
Certificate serial:       01A11B9A2409F96DFD7BE317F94BDFC79578
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
Manifest number:          1532
Signing time:             Thu 08 Oct 2026 13:00:48 +0000
Manifest this update:     Thu 08 Oct 2026 13:00:48 +0000
Manifest next update:     Fri 09 Oct 2026 13:00:48 +0000
Files and hashes:         1: 610lUfbKAqkAzAw_mgQVL_MvKpw.roa (hash: Y6vB30I7ZhO4cnzek1W0dylwKGe+/gVJf/gvXQMZtgs=)
                          2: UEUj-IEevlqjWYURpI87rwABqOg.crl (hash: rNEtI0YuSKXJRwYwEFOp0KmUwElSlLvsnd76buqh8KI=)
                          3: zLRh9u6xLJnwtdY0ORDwft0JoyA.roa (hash: +NvH+iEfI87IdOFqZwYbFUot/dODFAweRpk/UBNPhTc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1b:9a:24:09:f9:6d:fd:7b:e3:17:f9:4b:df:c7:95:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=504523f8811ebe5aa3598511a48f3baf0001a8e8
        Validity
            Not Before: Oct  8 13:00:48 2026 GMT
            Not After : Oct  9 13:00:48 2026 GMT
        Subject: CN=b213d6ebecb77c0b033aa4e4d7386a9dae0a65cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:42:63:d3:a1:c6:3a:df:17:a2:39:2f:84:88:
                    b0:32:2c:de:5f:86:10:6b:6e:ee:df:12:47:7e:91:
                    a3:05:a9:51:2a:00:08:d1:ad:53:e3:6b:51:94:f4:
                    c3:81:81:2e:12:28:5a:c7:d1:0d:59:ed:13:a2:88:
                    03:35:80:9d:80:14:83:f4:20:6c:e4:95:f8:cf:4b:
                    fb:d6:c5:f1:f4:8d:d4:a6:73:d7:96:b8:d7:d7:55:
                    40:16:8a:0c:a4:57:20:c7:da:f6:1b:22:84:3d:89:
                    a4:85:e7:57:60:29:52:90:7d:50:80:13:58:53:40:
                    d9:ee:32:99:74:d9:a5:f7:3f:84:2b:ef:db:70:c5:
                    17:14:7c:aa:66:18:8e:a0:06:07:a4:22:fc:eb:99:
                    e4:f3:b9:2e:1e:ed:68:54:af:fe:fa:5d:b6:bb:24:
                    f7:5a:8f:b6:bc:d6:f3:49:7b:97:cb:0e:43:70:4b:
                    47:70:84:7b:61:55:c3:85:5b:ee:6b:5c:ea:48:8c:
                    54:b9:42:63:67:53:6e:7e:7a:6e:c3:70:87:9d:e2:
                    21:1a:e9:e7:59:7e:3d:29:e7:02:3b:6e:60:78:75:
                    ec:7b:4a:76:8e:9c:78:d8:81:23:fe:be:41:87:57:
                    73:f4:62:9f:ad:fd:d4:fb:7b:c3:76:98:14:31:1d:
                    9d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:13:D6:EB:EC:B7:7C:0B:03:3A:A4:E4:D7:38:6A:9D:AE:0A:65:CF
            X509v3 Authority Key Identifier:
                keyid:50:45:23:F8:81:1E:BE:5A:A3:59:85:11:A4:8F:3B:AF:00:01:A8:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:e4:e2:77:57:47:35:58:0a:0a:6a:6f:65:a8:0e:44:4c:65:
         72:35:87:48:8f:7e:12:c2:f2:ad:a2:16:9d:49:3b:71:80:f4:
         60:42:ef:48:a2:18:86:36:ed:39:c8:d9:60:9e:28:37:b5:1a:
         19:50:77:da:79:d1:c4:10:b8:9e:bd:3a:bd:12:85:ac:85:66:
         65:23:bb:51:5b:c2:e8:e8:2b:4e:23:77:60:fd:b1:16:27:96:
         96:8d:fb:77:ad:ac:f8:4d:02:3c:f4:7e:11:69:9f:a3:f7:42:
         76:7a:93:01:af:1e:06:f2:c6:1c:86:8c:77:20:e1:11:ee:f9:
         d9:e9:f4:1c:31:21:6b:95:7d:09:c9:62:c8:44:35:41:53:a9:
         17:53:0c:e0:cc:af:d5:a9:07:d0:49:a7:e0:dd:1c:3b:0c:ce:
         d9:f7:76:b5:c2:07:1a:66:47:ba:e9:0e:36:50:50:13:b0:24:
         94:75:cb:36:ed:11:7f:68:1e:ea:d6:6a:93:f9:fe:e5:83:85:
         3d:ef:e1:01:6b:95:78:3e:9e:4a:5a:7f:2f:c8:c1:08:a1:b7:
         06:29:e3:38:07:b8:22:b8:d5:e9:1d:ec:37:6e:93:ba:e8:51:
         d4:63:71:62:bd:b8:53:8c:96:15:e3:79:9d:05:58:0a:2e:63:
         e2:27:18:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:28:24 2026 by rpki-client