Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
File:                     UFkuaIlccGi0ZVUIkXrVu929Cl8.mft (raw, json)
Hash identifier:          w7uJRQ7dk10PUUu9KfoxrioPGmr+lW8nR7pKcKiv0lQ=
Subject key identifier:   AC:A9:F3:48:E9:D7:CA:AC:5C:9A:20:B4:02:A0:AE:0D:A8:7D:FE:C4
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Certificate issuer:       /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial:       01A0C10D5047831EFE94FD9D1A9C3E6426A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
Manifest number:          1AA4
Signing time:             Sun 20 Sep 2026 23:01:10 +0000
Manifest this update:     Sun 20 Sep 2026 23:01:10 +0000
Manifest next update:     Mon 21 Sep 2026 23:01:10 +0000
Files and hashes:         1: 6cPzePL8SbPhYxlEre30SLCYl-Y.roa (hash: bpE4jQ6I0nBPjXRqOCXt82xgQ0N1iRPYG2gk58BlGfE=)
                          2: 7qKC_f93I4x5vZAkFd7YPrFcC7k.roa (hash: Fej8whp10bdKNIubAsMMxHxf8nDoH0W086yoYql/4Y0=)
                          3: AglMX7mwwb3rspJEIopyVPwTx-E.roa (hash: S+AWhAQbQR4GQpkHiPCQOCsaczJj/pHTNHnGM4CmrlA=)
                          4: ItLnYEbliO9uy4pN2f9Nx-cbnMU.roa (hash: SC8dz/gz97zrc/Tqdl9uM99+iCk/s/X41bIC+YpTYTI=)
                          5: MNvipI6k91242S53W3jqVcArQhc.roa (hash: 7sDpPYB99HElo2KA5xuF+lvuTcscLhsFKunpulQrN5o=)
                          6: MiUKM4-anjUIiLLo25o4aW1endE.roa (hash: 8GJk2lpNvqF8G6oHGKOgI8d2pjeWdDUhOm/xZPhFJK8=)
                          7: U2EVUUWlWvbUAILqaxAgK8pY0KE.roa (hash: P61yHP4ZBPMnRJW1hcXnzx/7WhRn7HOpJpj+yy4Yx4A=)
                          8: UFkuaIlccGi0ZVUIkXrVu929Cl8.crl (hash: soJQmEAZlSX/FDGfWjwjdJfuRbRlemEuN8+8N43XP0M=)
                          9: WFdUi3XXatfTABnfBpngGAHzARo.roa (hash: kKjPRwwZCBaY9u1h1EFLYB9g9DPTFuUTOwPzWAxE6M4=)
                          10: bHuZc9mUYBcqpEDyA_8H3U2OWFM.roa (hash: LIqVQ9mxztvdOqUbAJcArQV2MAsX+TwnaJ0MIMH4BK4=)
                          11: dvCXrpuIgKHCZtQqB3diL4N4JNk.roa (hash: fvscbXWy0N/msqi2rtIwXgUHt2kq1AX6g+9LTX7Mfrk=)
                          12: wiv8BGLIxUUMQwOeROx0j4rSHpg.roa (hash: 0dTxqq6Mcxp0f/baeK9P3ozslv5RRG7NpV1hP4JK7gg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:0d:50:47:83:1e:fe:94:fd:9d:1a:9c:3e:64:26:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
        Validity
            Not Before: Sep 20 23:01:10 2026 GMT
            Not After : Sep 21 23:01:10 2026 GMT
        Subject: CN=aca9f348e9d7caac5c9a20b402a0ae0da87dfec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:95:ff:99:18:5a:eb:50:9a:76:2f:d4:38:90:
                    c8:dd:95:bc:21:b5:1b:d5:b5:9c:6e:ea:74:0a:ed:
                    47:43:9f:e5:d0:bd:a3:10:c6:2e:9c:8d:1f:c0:a6:
                    ba:90:a0:56:44:37:d3:8f:1a:76:0b:dd:a0:2a:fa:
                    0c:8c:40:92:ad:12:04:89:b0:07:6b:72:3a:e6:6d:
                    d7:7c:3d:b6:f3:3e:25:be:ff:c7:3f:23:1b:b4:7f:
                    75:c8:d7:c3:7b:bf:fb:82:b5:f5:85:89:5c:4c:e4:
                    e4:c6:34:47:ab:3f:83:e2:7b:7b:f3:ea:85:22:15:
                    13:79:09:1d:5c:a0:78:d2:65:eb:65:93:98:bf:4d:
                    f7:ee:da:97:1a:26:65:79:a7:83:e1:0a:80:91:e4:
                    f7:75:58:5d:9f:e6:83:60:fa:ab:f4:ed:c1:6b:c0:
                    f7:af:10:fb:5f:fb:70:e1:b6:2e:b8:48:70:68:6f:
                    3b:07:70:93:b0:e6:b3:15:0b:a0:29:b3:79:8e:e4:
                    e3:a6:e5:8f:b0:af:f4:7d:4a:f0:46:7a:ac:7e:f1:
                    0e:60:82:60:c3:0e:a4:05:fd:24:fd:01:38:d0:29:
                    92:32:13:46:3c:ed:a0:6d:5c:e2:d9:98:bd:f3:07:
                    81:03:23:c9:e3:05:5b:fa:ad:55:24:56:93:10:0b:
                    ec:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A9:F3:48:E9:D7:CA:AC:5C:9A:20:B4:02:A0:AE:0D:A8:7D:FE:C4
            X509v3 Authority Key Identifier:
                keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:87:1b:1e:2d:3f:b2:bb:fd:cd:f7:ba:49:9f:67:18:e1:2d:
         13:36:d5:37:0e:c9:b0:ce:75:c1:e3:68:c1:ca:bb:55:b7:15:
         b3:cf:1b:70:70:7d:2b:10:1b:ce:df:f9:63:c7:94:7b:55:ef:
         a4:80:0f:18:ba:0f:57:90:da:ac:d8:e7:99:6f:d2:eb:61:b5:
         db:3d:f8:a8:9c:29:d6:10:2d:29:66:28:16:aa:f8:53:94:52:
         b0:ed:8d:bf:bd:6d:02:a9:a1:4d:80:df:d7:00:3f:1a:16:f2:
         bd:5d:8c:57:cf:8b:05:7f:fd:27:b1:ab:cc:c2:d9:de:b8:8f:
         89:c9:2b:91:df:28:16:9e:81:e9:2d:20:ee:10:c7:37:f2:db:
         62:32:76:8e:af:78:e1:60:b9:a2:a7:d6:d6:09:a3:b9:21:23:
         74:26:4c:9b:15:b0:91:a7:06:15:a7:09:1e:ad:c2:32:81:a3:
         29:e7:91:1e:23:f7:36:b3:c9:39:6f:47:f9:90:aa:45:31:1b:
         ed:fb:91:f3:db:72:e7:56:ce:9a:f1:fa:44:87:a9:84:e2:ff:
         82:ff:b3:a2:39:21:81:d5:98:68:a7:73:85:da:af:b9:f7:01:
         10:7a:ac:20:07:36:80:4f:69:24:19:54:ca:fe:4f:d3:a5:19:
         a9:70:7f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:18:33 2026 by rpki-client