Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
File:                     UOaW5uJbSSu34HyzKbtDVLERpoE.mft (raw, json)
Hash identifier:          0uuhUFh8wtStfn2PkBW0aPKshuYl34emzm3Y38PLdeI=
Subject key identifier:   8E:FF:71:98:96:65:9C:A5:92:10:16:B4:FE:72:95:20:F6:87:15:DF
Authority key identifier: 50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
Certificate issuer:       /CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Certificate serial:       01A1250BEDDE3F66FF68F79D529299681FE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
Manifest number:          0D78
Signing time:             Sat 10 Oct 2026 09:01:40 +0000
Manifest this update:     Sat 10 Oct 2026 09:01:40 +0000
Manifest next update:     Sun 11 Oct 2026 09:01:40 +0000
Files and hashes:         1: UOaW5uJbSSu34HyzKbtDVLERpoE.crl (hash: UtGf3ri3BboXDUwMfUr/sAj2anWC9DOBomVlR2E2n+E=)
                          2: ud-rlEsNj2HyrWtwR6QbOfrF-vY.roa (hash: uWoRD0bpqfoPSwtBo6lWNrXknFwbcuRdkomzveOU4Qk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 09:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:25:0b:ed:de:3f:66:ff:68:f7:9d:52:92:99:68:1f:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50e696e6e25b492bb7e07cb329bb4354b111a681
        Validity
            Not Before: Oct 10 09:01:40 2026 GMT
            Not After : Oct 11 09:01:40 2026 GMT
        Subject: CN=8eff719896659ca5921016b4fe729520f68715df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:81:55:76:35:28:90:81:8f:6b:ad:e8:7e:fa:
                    85:dc:d1:8b:d9:3d:0f:30:aa:e9:e4:d1:f2:ae:d5:
                    67:e2:3e:9c:64:20:41:d9:ff:ef:0f:c7:6b:1b:3c:
                    65:7f:79:b8:4b:1f:95:c4:76:75:b5:a2:fe:ea:31:
                    ef:72:56:51:71:34:cc:58:09:91:f7:a3:83:2b:f1:
                    30:4e:4d:c9:7b:d8:7b:ef:d2:32:64:f2:50:b0:04:
                    f1:74:db:d6:be:7a:07:3e:d3:64:51:ca:41:cf:69:
                    57:28:be:75:62:3f:d1:06:28:89:2a:69:24:91:63:
                    1e:ea:2a:f0:c7:a2:f1:b4:28:60:77:3c:32:c7:50:
                    b6:31:77:95:6f:a0:3b:05:6e:05:18:ac:72:4b:2e:
                    b2:42:ac:c8:61:f0:04:20:de:2e:f0:c2:64:bb:eb:
                    d6:76:44:01:6d:3a:52:85:42:28:df:cb:d8:5a:b0:
                    1d:ba:fa:f6:60:01:a3:58:85:ea:00:a7:44:0a:59:
                    bb:7f:b0:e9:52:41:cc:3a:45:8f:51:bd:28:4f:53:
                    e0:7d:7d:92:80:06:9d:8a:8a:79:32:92:93:2e:d6:
                    7c:54:6b:f4:63:e7:e2:e9:fe:9b:6d:dc:eb:71:9e:
                    1a:5a:32:b3:95:44:b3:73:15:2a:32:b8:29:31:23:
                    e2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:FF:71:98:96:65:9C:A5:92:10:16:B4:FE:72:95:20:F6:87:15:DF
            X509v3 Authority Key Identifier:
                keyid:50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:d2:68:35:17:97:31:e5:8f:81:4e:73:af:72:56:82:fb:70:
         af:a2:89:1e:12:da:ef:de:da:d6:3e:81:24:53:51:0a:32:1e:
         ad:1f:07:b9:0f:e4:87:ae:bb:ac:7a:0e:b9:ae:3e:4f:61:ad:
         e3:d5:71:2f:69:99:84:04:a9:c4:39:37:b9:99:30:a8:56:6b:
         57:02:9c:e7:cc:e4:4c:06:69:5c:93:f2:fd:6f:60:6a:7d:e7:
         aa:87:86:25:9a:17:57:55:21:73:9e:f1:d9:73:9b:43:46:e1:
         7c:fa:84:af:e4:fa:46:ec:5b:08:50:f5:f3:dd:2e:53:07:74:
         f2:86:75:89:e3:7e:bf:34:f4:af:23:9d:a6:c7:98:76:2c:7b:
         89:d6:6d:84:c3:76:11:e8:e3:88:81:c7:d6:58:04:92:12:c3:
         ce:6b:f1:12:4a:60:39:1c:30:de:a7:c0:e2:2f:bf:12:6b:26:
         b7:74:bd:1a:fc:65:23:12:89:d1:92:46:44:17:3b:e3:80:35:
         a4:c2:65:fd:e8:35:3f:99:5d:4a:ed:8e:5e:1d:03:f5:24:90:
         a6:1e:8f:32:0c:cd:d9:ac:c9:ca:a7:50:35:ca:b2:f4:b4:eb:
         53:22:8a:63:5b:53:aa:93:11:ef:89:d1:9b:e2:41:40:9f:e0:
         9f:b3:8f:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaElC+3eP2b/aPedUpKZaB/pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwZTY5NmU2ZTI1YjQ5MmJiN2UwN2NiMzI5YmI0MzU0YjEx
MWE2ODEwHhcNMjYxMDEwMDkwMTQwWhcNMjYxMDExMDkwMTQwWjAzMTEwLwYDVQQD
Eyg4ZWZmNzE5ODk2NjU5Y2E1OTIxMDE2YjRmZTcyOTUyMGY2ODcxNWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4FVdjUokIGPa63ofvqF3NGL2T0P
MKrp5NHyrtVn4j6cZCBB2f/vD8drGzxlf3m4Sx+VxHZ1taL+6jHvclZRcTTMWAmR
96ODK/EwTk3Je9h779IyZPJQsATxdNvWvnoHPtNkUcpBz2lXKL51Yj/RBiiJKmkk
kWMe6irwx6LxtChgdzwyx1C2MXeVb6A7BW4FGKxySy6yQqzIYfAEIN4u8MJku+vW
dkQBbTpShUIo38vYWrAduvr2YAGjWIXqAKdEClm7f7DpUkHMOkWPUb0oT1PgfX2S
gAadiop5MpKTLtZ8VGv0Y+fi6f6bbdzrcZ4aWjKzlUSzcxUqMrgpMSPiIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7/cZiWZZylkhAWtP5ylSD2hxXfMB8GA1UdIwQY
MBaAFFDmlubiW0krt+B8sym7Q1SxEaaBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU9hVzV1SmJTU3UzNEh5ektidERWTEVScG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kYWRmM2ItYzg2Ny00MTYzLTg3Njgt
NjE0MWQ5OTYzNGI1LzEvVU9hVzV1SmJTU3UzNEh5ektidERWTEVScG9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9kYWRmM2ItYzg2Ny00MTYzLTg3NjgtNjE0MWQ5OTYzNGI1
LzEvVU9hVzV1SmJTU3UzNEh5ektidERWTEVScG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALtJoNReX
MeWPgU5zr3JWgvtwr6KJHhLa797a1j6BJFNRCjIerR8HuQ/kh667rHoOua4+T2Gt
49VxL2mZhASpxDk3uZkwqFZrVwKc58zkTAZpXJPy/W9gan3nqoeGJZoXV1Uhc57x
2XObQ0bhfPqEr+T6RuxbCFD1890uUwd08oZ1ieN+vzT0ryOdpseYdix7idZthMN2
EejjiIHH1lgEkhLDzmvxEkpgORww3qfA4i+/Emsmt3S9GvxlIxKJ0ZJGRBc744A1
pMJl/eg1P5ldSu2OXh0D9SSQph6PMgzN2azJyqdQNcqy9LTrUyKKY1tTqpMR74nR
m+JBQJ/gn7OP0w==
-----END CERTIFICATE-----
Generated at Sat Oct 10 15:50:43 2026 by rpki-client