Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
File:                     uiOwejwKyeMz9S6LXUGnaKPTkCU.mft (raw, json)
Hash identifier:          LBFT5PIw2GyKbmp4M39hCZOOLFuhzgwsbwgcU2C0Doc=
Subject key identifier:   2E:78:9F:29:F2:AC:95:82:63:5F:C1:95:55:26:60:BF:AF:BE:7E:42
Authority key identifier: BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25
Certificate issuer:       /CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025
Certificate serial:       01A06EA797950A2FEFB9BA8F23779E95F418
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
Manifest number:          09EC
Signing time:             Fri 04 Sep 2026 23:01:12 +0000
Manifest this update:     Fri 04 Sep 2026 23:01:12 +0000
Manifest next update:     Sat 05 Sep 2026 23:01:12 +0000
Files and hashes:         1: X01ZcYFwf7_4PflWuYe0HSJ1B7E.asa (hash: /ioRvSO/smZJePMAdHqGPLRi3QTdChFlRiDXfhCxQIQ=)
                          2: cYSlOixvw1IRH_A6U1PmGBfOnLc.roa (hash: ObOoQktNn2mk1CLRsAqDNu4BrgB8VABVPaTI7wXzkNQ=)
                          3: cfljug29MBdwZ2IRskxqcwdwGN0.roa (hash: RSO1UVd7bjnpUDUf4c2ob5lCf11GhEF8w59+h0O9Z8s=)
                          4: sPDYGaB0jdjNmv_RI00LaumXHZM.roa (hash: cR+r+JhOtPPtk4/8vr8rgMsCxMQVubUz6os2NddknO4=)
                          5: uiOwejwKyeMz9S6LXUGnaKPTkCU.crl (hash: bsU4gen/Gt6Opa2y7GK/niFp9W4AoDtXQF/ciR6OhBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:a7:97:95:0a:2f:ef:b9:ba:8f:23:77:9e:95:f4:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025
        Validity
            Not Before: Sep  4 23:01:12 2026 GMT
            Not After : Sep  5 23:01:12 2026 GMT
        Subject: CN=2e789f29f2ac9582635fc195552660bfafbe7e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:33:5c:8d:10:28:4d:54:a4:1a:db:ee:e3:8f:
                    b8:05:10:d0:80:e7:cf:88:c5:98:44:ec:3e:92:4d:
                    c4:d3:dd:1c:7a:ac:ec:fa:93:b7:c3:7f:2a:9f:74:
                    00:5c:02:85:b3:a9:33:c0:7f:ac:e1:c2:74:91:00:
                    31:39:47:dd:37:a7:73:24:27:84:3b:02:be:79:89:
                    fb:92:03:73:82:30:d8:de:4a:6a:1d:32:06:05:7a:
                    28:26:39:e6:55:3c:92:06:37:c5:66:79:b9:7b:f5:
                    e8:8b:76:68:4a:2a:4e:0b:80:07:b7:93:f9:d5:ba:
                    cc:88:39:8d:1e:df:e9:b6:97:9a:78:e7:3b:0d:d0:
                    0d:84:4d:19:fd:5e:a2:07:e4:95:d1:56:60:85:2c:
                    fa:f1:3a:1c:c7:96:5c:77:19:94:a4:27:9c:36:0f:
                    35:28:a7:d9:99:8c:21:89:5e:90:5c:3f:59:d7:83:
                    0b:ea:3b:9d:fd:f2:2b:e8:52:58:64:85:02:e5:02:
                    ac:76:81:ff:7f:d8:6f:a6:82:c0:03:42:e3:9f:b3:
                    ea:14:b4:97:ac:cc:a2:79:a0:20:b9:4f:77:0a:7b:
                    a1:5d:21:29:61:82:f9:ec:fc:8c:c3:d1:b8:27:c9:
                    db:f7:13:23:74:25:6d:24:79:05:fb:b1:24:84:93:
                    5d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:78:9F:29:F2:AC:95:82:63:5F:C1:95:55:26:60:BF:AF:BE:7E:42
            X509v3 Authority Key Identifier:
                keyid:BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:15:f6:3d:5b:ad:fb:92:81:cd:db:31:32:69:27:a2:57:e4:
         0e:23:a4:65:7f:9a:91:fd:50:61:81:0b:77:ae:12:5e:af:1c:
         0e:a4:9d:10:96:4b:af:46:3e:57:a5:05:09:d8:b7:da:72:e8:
         9e:fb:5b:08:3b:8e:28:2a:74:b7:ce:97:3a:7d:e4:a8:b1:a1:
         b3:16:1b:fe:31:fb:df:0c:d8:03:84:f8:f1:a9:3b:3f:82:f8:
         63:d3:9b:a7:4f:e4:f1:16:c7:8d:ae:94:06:3b:86:09:a1:78:
         ca:b3:1f:b9:63:45:e8:5b:a8:05:ba:74:c1:3e:99:30:cc:33:
         57:b1:f4:e0:ab:25:60:51:98:49:35:cb:b8:9a:d5:58:5f:1e:
         36:a0:8a:e9:c0:c4:ae:a8:53:2e:29:b3:3c:e3:e3:ab:2b:39:
         43:49:b7:ad:5d:de:35:70:f2:41:ff:57:03:bd:a2:1d:74:89:
         0c:5b:d8:8a:84:a9:3a:2c:eb:e1:18:a7:f2:4f:19:61:a8:45:
         41:29:4b:09:a6:e1:24:7c:75:57:bd:10:23:89:e3:66:f7:1c:
         28:9b:4d:3c:c1:fb:77:dc:07:e5:ec:86:be:ae:f3:97:41:46:
         cd:9f:df:91:de:a9:91:56:fa:3b:c6:c3:8a:f6:cc:16:69:c3:
         e8:9b:ba:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:29:03 2026 by rpki-client