Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
File:                     ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft (raw, json)
Hash identifier:          isNFdILUPshGT6RL1ZP07vtyqJsJ820tFEd6tZa+z6o=
Subject key identifier:   6F:30:14:79:04:81:AA:F4:6E:52:61:A9:8A:B5:76:8C:D4:CB:10:1D
Authority key identifier: BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94
Certificate issuer:       /CN=ba515836af300f7c71f71dd18b9c3f51c252bb94
Certificate serial:       01A0E02A9FBFD3B494F19524FAB49662539C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
Manifest number:          1137
Signing time:             Sun 27 Sep 2026 00:01:24 +0000
Manifest this update:     Sun 27 Sep 2026 00:01:24 +0000
Manifest next update:     Mon 28 Sep 2026 00:01:24 +0000
Files and hashes:         1: DhAYsKxO8WwtTQM9qN9EaLihdkc.roa (hash: ITzy4zYg5ewXMnbWQKg/M27oXczLD0pz5gjZoCMokoc=)
                          2: ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl (hash: eqvVWHe3SfEqBb6XZb7j1keK3QSbTJW2XUC4S+J9dGU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e0:2a:9f:bf:d3:b4:94:f1:95:24:fa:b4:96:62:53:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba515836af300f7c71f71dd18b9c3f51c252bb94
        Validity
            Not Before: Sep 27 00:01:24 2026 GMT
            Not After : Sep 28 00:01:24 2026 GMT
        Subject: CN=6f3014790481aaf46e5261a98ab5768cd4cb101d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e4:87:64:79:a6:b6:ba:18:13:d4:41:27:7f:
                    36:cb:33:90:35:04:08:b7:ba:4e:a1:59:ad:db:b5:
                    83:1d:3f:f1:78:0a:16:69:d9:76:70:3f:13:f6:28:
                    88:60:68:b4:d6:7e:29:1b:dd:8e:d3:d6:d4:f8:d8:
                    30:e0:ab:36:cd:96:2b:01:60:03:f9:79:08:8d:f6:
                    8e:1b:2f:11:93:74:0a:af:ef:1b:15:fd:8a:71:69:
                    bb:9e:94:84:32:19:3c:4d:a6:45:06:00:e0:6a:c6:
                    f3:ad:57:1e:58:6f:79:c8:b6:38:f2:b4:00:9a:26:
                    b5:05:be:6f:be:0d:7e:36:70:c4:75:30:90:60:c5:
                    e1:f6:5a:00:89:8e:e1:be:45:e0:8c:bf:7c:4c:06:
                    c3:f5:7c:a1:de:95:94:36:7c:94:c7:5e:04:c8:41:
                    ab:95:e0:b8:ac:59:d8:58:9d:73:35:16:d6:87:70:
                    93:c0:eb:2a:6f:9e:3c:f9:48:05:1b:e8:a5:59:a6:
                    cc:ca:6c:04:69:30:87:7a:28:73:6f:39:2f:fd:a4:
                    8b:35:64:c9:7e:0b:e7:20:4f:93:c9:62:21:eb:68:
                    38:8e:dc:8e:1f:7c:64:c1:05:eb:cd:b9:16:e3:74:
                    33:16:40:23:16:e7:8b:47:9b:31:fc:b9:60:40:a8:
                    c3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:30:14:79:04:81:AA:F4:6E:52:61:A9:8A:B5:76:8C:D4:CB:10:1D
            X509v3 Authority Key Identifier:
                keyid:BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:b8:04:80:43:e6:7a:2f:3b:64:59:4e:1f:cc:0a:e8:23:25:
         db:97:0c:6b:7c:44:f7:dc:87:45:12:b7:36:63:bf:01:64:1f:
         3c:7b:67:12:be:c1:69:d6:3b:3f:df:04:f9:6f:6b:eb:5b:20:
         b1:72:a5:d3:bf:01:59:e3:c4:33:d2:08:d1:ea:a2:b5:b2:1f:
         9f:32:e3:3d:71:86:e5:a3:43:6e:fc:7f:92:68:32:a1:1c:07:
         09:d8:45:ae:84:40:35:d1:0d:75:1c:ca:bb:f2:3e:cb:47:7e:
         54:0d:d2:cd:3f:e3:ae:6a:13:93:e2:d3:3f:14:e0:50:f2:77:
         41:d6:bc:fe:f4:8c:16:2e:33:2a:95:fc:93:cc:d3:34:fc:fe:
         fd:5b:ca:9d:84:dc:c4:12:95:e5:e7:81:d4:57:76:f3:fc:0c:
         d2:ef:0f:d9:c9:ea:81:38:39:0d:cc:e8:47:eb:cc:f7:21:42:
         0b:09:a3:8d:20:eb:fc:b1:2d:0d:fe:4a:39:f0:e9:32:c4:20:
         e3:15:70:96:85:64:f4:45:b2:be:ad:31:91:8a:e5:b2:52:6e:
         73:2f:46:d2:1f:16:6a:6b:05:39:9a:92:db:fd:97:21:59:7c:
         a6:e5:10:a0:38:51:5a:3c:e0:74:56:79:52:b8:d2:ee:f0:df:
         d1:68:58:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:54:19 2026 by rpki-client