Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
File:                     UhowB3IjwlxvN9z1lIB3jAtbEGg.mft (raw, json)
Hash identifier:          M4q9m1eVKD5ezSetjI5PFASkMmt5APU2yLOtHVgxkAw=
Subject key identifier:   C7:81:8D:A6:C6:3A:2A:4C:A5:AE:11:85:D1:BF:C6:DB:CE:0F:0B:97
Authority key identifier: 52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
Certificate issuer:       /CN=521a30077223c25c6f37dcf59480778c0b5b1068
Certificate serial:       01A0C520BFBA7D09F42FF5B398310B4660FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
Manifest number:          080B
Signing time:             Mon 21 Sep 2026 18:00:52 +0000
Manifest this update:     Mon 21 Sep 2026 18:00:52 +0000
Manifest next update:     Tue 22 Sep 2026 18:00:52 +0000
Files and hashes:         1: 84SPRa3_ewxAnHZXEwBV1kLi3VM.roa (hash: xgIumFcFLchK1z/1Csr0/oD3z8aKLtyk1tFqPTQqxyc=)
                          2: B27nWL7f9vpF233InTtbaWdT1gY.roa (hash: K0asGHISIlJb0z9vg2XL1HxPcsZDl9Isvqzrusz0DAM=)
                          3: HdV5DSl350h-lbh-TN4zh4FfqZg.roa (hash: Tf/ZSSv57NTvJyODzYy+ZLfHUFt2upVkz6yStWywhz8=)
                          4: UhowB3IjwlxvN9z1lIB3jAtbEGg.crl (hash: Y+JW3Vd7by9V/GAgCGRTbSAb3U245DGc2L/lrlYBP68=)
                          5: _pMAzQKRKR13xl3uGDGCl2hCPIo.roa (hash: 5qQNZWBbvk2jxeJhrao+q24FJuEwboPGan3bLmujgOM=)
                          6: hCxkK3tHuqUrY0c51_Pu1X-lD1E.roa (hash: 2q6gI5yUFT+GtMB/2xyZdJMaVjKX7qKHcOOGGZrqRFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 18:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:20:bf:ba:7d:09:f4:2f:f5:b3:98:31:0b:46:60:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521a30077223c25c6f37dcf59480778c0b5b1068
        Validity
            Not Before: Sep 21 18:00:52 2026 GMT
            Not After : Sep 22 18:00:52 2026 GMT
        Subject: CN=c7818da6c63a2a4ca5ae1185d1bfc6dbce0f0b97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:62:55:ec:eb:dd:d2:a0:4d:92:f9:46:2c:59:
                    22:4c:1e:5e:60:b8:0c:8f:dc:65:40:ed:3b:29:00:
                    84:ff:31:42:f6:8b:e0:ce:d6:aa:cc:6b:7b:5c:9e:
                    94:61:9d:2e:35:ea:91:22:31:a1:ac:2d:7f:9c:78:
                    8d:29:86:6b:22:40:ce:c5:a6:52:9a:d0:ad:dd:a7:
                    09:70:f7:fd:ad:9b:6f:98:fd:d5:91:8e:fc:cf:52:
                    68:42:95:51:72:f5:81:8d:a4:f2:ae:e1:4d:d9:52:
                    7a:1b:04:ed:d3:d9:af:4f:5d:4c:49:93:b3:32:19:
                    68:7c:90:24:a9:95:48:54:5b:d8:9a:53:7b:30:3b:
                    b4:f7:ce:54:da:d9:a0:9f:ed:7b:7d:b6:12:73:97:
                    72:35:64:7a:61:53:2c:43:29:37:44:6b:15:c6:aa:
                    50:70:91:4e:1b:67:a0:f3:5d:fb:77:9d:b3:a4:6a:
                    18:02:32:6b:6a:61:d5:68:2c:f1:47:a9:03:b9:b5:
                    5e:c0:96:98:ef:0f:0c:e3:9c:44:4f:92:fd:a8:ea:
                    2b:d3:bf:e5:45:10:6a:df:06:45:9c:0b:00:77:b8:
                    55:57:63:fe:3a:16:79:31:4b:3f:03:c7:8e:08:75:
                    95:e9:0c:74:b0:ea:ca:64:4a:15:03:54:28:52:d0:
                    ab:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:81:8D:A6:C6:3A:2A:4C:A5:AE:11:85:D1:BF:C6:DB:CE:0F:0B:97
            X509v3 Authority Key Identifier:
                keyid:52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:57:c1:1a:76:04:65:96:0f:4a:24:f8:a8:b2:88:2c:87:9f:
         33:f4:3f:a4:3f:04:50:c9:96:e1:e1:cb:ce:52:7e:b5:5b:9a:
         87:1b:ed:e4:65:08:e1:11:a5:aa:ba:10:d6:4d:96:9d:21:06:
         79:c3:12:d1:90:2a:f6:e1:b5:89:1f:c6:f5:d8:9f:f0:7f:e0:
         79:10:19:dc:50:a6:e6:f5:db:7d:f7:39:9c:38:11:37:90:28:
         e7:83:c1:7e:5d:74:e3:45:08:cf:3c:63:16:f6:9e:93:eb:e7:
         12:fb:87:ca:18:6f:2c:4d:1f:0e:28:19:44:df:19:72:fd:68:
         6c:4c:00:79:a8:0a:dc:9f:fb:cf:b5:8e:57:ff:8b:da:e0:41:
         3b:2e:a4:d6:b3:e7:e6:2d:7e:5b:05:22:cd:87:d6:c0:f7:09:
         66:4a:76:7d:1f:3d:c3:12:94:59:d2:20:2b:d0:74:6a:6c:42:
         e0:7f:ed:7e:98:17:cd:91:8f:ff:62:f7:67:3d:e1:05:7b:12:
         7f:04:00:bb:87:fc:25:8b:f0:c1:08:2e:d9:4e:ce:29:db:f6:
         df:fa:42:b3:81:ba:73:e5:59:d4:35:22:c4:a1:89:e5:36:ac:
         3b:35:51:c6:92:3b:93:ba:13:25:26:bc:df:35:b7:89:47:c3:
         5a:4d:11:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:06:48 2026 by rpki-client