Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
File:                     UfKdGEvMUP5lTd70AV3hfSRv0qM.mft (raw, json)
Hash identifier:          xigX3YSIQ6v6QkcwCQMYEUgV1rujIHEf+cKDZaTXMpk=
Subject key identifier:   D3:87:2C:1A:08:F7:4C:EE:23:38:4A:92:1E:EF:2C:F3:B2:97:7D:C1
Authority key identifier: 51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3
Certificate issuer:       /CN=51f29d184bcc50fe654ddef4015de17d246fd2a3
Certificate serial:       01A0C368DF815042306BCD42E0EF0F0B0223
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
Manifest number:          045F
Signing time:             Mon 21 Sep 2026 10:00:25 +0000
Manifest this update:     Mon 21 Sep 2026 10:00:25 +0000
Manifest next update:     Tue 22 Sep 2026 10:00:25 +0000
Files and hashes:         1: Md5gEySjLzH0cjn7UYFWEoKX_oo.asa (hash: l0GilubfWDqDj0QwAujo4MRPBvzm9C+U8ouoOT9mSu4=)
                          2: UfKdGEvMUP5lTd70AV3hfSRv0qM.crl (hash: 5XWWgPY3GNuwk6muC4xQ8IWJr6sYbXXOVey4F7Z3L5E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 10:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:68:df:81:50:42:30:6b:cd:42:e0:ef:0f:0b:02:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51f29d184bcc50fe654ddef4015de17d246fd2a3
        Validity
            Not Before: Sep 21 10:00:25 2026 GMT
            Not After : Sep 22 10:00:25 2026 GMT
        Subject: CN=d3872c1a08f74cee23384a921eef2cf3b2977dc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a5:3f:2d:95:3f:4c:f6:9d:65:96:4e:6e:95:
                    c0:9c:5a:3c:09:2e:67:6b:84:c2:aa:4b:5d:bb:0f:
                    6c:08:31:a4:06:d4:ea:58:db:0c:97:b9:b1:d2:19:
                    17:97:be:e7:54:2a:fb:52:8b:d3:fb:3b:1a:10:40:
                    8b:f9:6f:20:15:26:7d:bb:94:66:98:03:ef:dc:c2:
                    04:34:b6:8a:7a:91:25:bc:6e:36:1f:d2:1e:5b:ee:
                    72:fd:43:5b:b6:39:13:45:5c:b4:01:8d:51:5d:ad:
                    00:0f:59:50:c5:50:c7:ff:2c:e8:a4:d2:eb:d3:e7:
                    a1:93:98:aa:9f:2b:f2:f5:8a:fe:37:9b:39:c7:8f:
                    4c:c2:af:2a:70:fb:cb:7a:83:27:5d:ce:5b:b9:25:
                    4c:ed:40:0c:51:ac:9a:1b:92:5d:2f:3f:78:e7:dd:
                    b4:9d:6f:24:81:89:51:69:28:a1:92:91:f4:96:d6:
                    8a:9b:ed:9e:89:e0:5e:e1:57:db:b8:0f:c0:ef:47:
                    5b:a5:9d:76:50:47:e2:7f:ab:45:59:1e:2c:9f:cf:
                    15:f9:4b:ba:80:5a:cf:98:83:c3:97:c0:6c:7f:73:
                    72:f3:75:b0:15:e1:2e:3d:22:61:66:e1:31:48:a5:
                    e5:cc:e2:22:99:1b:0d:11:b2:01:34:4b:31:e0:61:
                    41:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:87:2C:1A:08:F7:4C:EE:23:38:4A:92:1E:EF:2C:F3:B2:97:7D:C1
            X509v3 Authority Key Identifier:
                keyid:51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:5f:aa:9b:32:f5:79:8d:16:f9:f7:03:df:e9:6f:55:eb:6a:
         c6:58:29:56:c0:42:6e:ce:4e:e8:a4:1f:7c:0b:7b:27:3f:8e:
         af:d9:69:77:e7:90:72:66:2a:5e:e1:bd:6a:5d:9c:fa:1b:ca:
         bb:4c:ac:99:94:93:2a:d0:50:c6:56:8b:a9:c6:58:7f:9c:6b:
         5a:f2:65:1b:ca:7f:e5:87:dd:1c:eb:6b:09:d7:ff:84:f5:d1:
         ad:85:23:0b:aa:c4:9b:4a:71:9f:7a:d8:b2:cf:26:8c:8d:5f:
         56:1b:ac:93:4c:5d:43:37:d0:b5:5b:47:54:0b:a9:57:b9:7e:
         cd:62:e5:00:6d:d5:38:67:a4:b7:6f:ed:ae:62:38:77:71:16:
         28:c3:a3:03:31:98:24:1a:25:90:ea:14:de:fc:27:a0:d5:ef:
         ca:e9:8e:e6:e6:d1:62:4c:b4:3d:ee:46:cf:d9:18:2e:62:58:
         ec:06:4d:17:9e:49:f1:cd:10:3e:81:d3:15:00:bd:12:5f:b2:
         48:44:c5:df:dd:4c:6a:4e:7c:73:b6:7f:cc:aa:f8:12:64:e5:
         e7:b0:a3:2f:f5:41:fe:82:2f:78:3d:ae:54:10:8f:ea:ec:70:
         af:b4:68:ed:cc:a9:f4:af:41:05:07:ac:e4:bb:80:b6:3d:b8:
         d3:7b:02:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:52:08 2026 by rpki-client