Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft
File:                     uaxJ0czcrt2aE_SAPfGu3ObcERI.mft (raw, json)
Hash identifier:          /4nE3jaoQk9eS8XFG+uWvWwRss4k0o8cTaOHfAW1xqg=
Subject key identifier:   4A:85:17:A3:8F:C4:48:8D:FB:ED:34:0E:8D:54:FF:A8:57:9A:43:81
Authority key identifier: B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
Certificate issuer:       /CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Certificate serial:       01A08CE8FD237E33629D092DFB96DF6A7337
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft
Manifest number:          117D
Signing time:             Thu 10 Sep 2026 20:01:14 +0000
Manifest this update:     Thu 10 Sep 2026 20:01:14 +0000
Manifest next update:     Fri 11 Sep 2026 20:01:14 +0000
Files and hashes:         1: 9C4UVhetymj_o9_0fthWslxme_k.roa (hash: eyldnpoei6ydFrc8FHeRLIEUORDlSxUUouGHL///KPo=)
                          2: AJ6V8jm2bzR7l9LijJnNAo2C1So.roa (hash: JLik9PNu5MZ/DV5ew3sUl3oRvlGdo1/prN1/f8zb8rc=)
                          3: AfH1FsJhmlZzLVv0joRFh8JXKtI.roa (hash: C/QZLCrVXN00Tj2Qh4p+y2MkOW5TtBVj68fBG3TFoNA=)
                          4: DKgccFMMgkvXxZPzFyE3jSvly6U.roa (hash: wKYRpl41eTA9ujV+fUMhtA8JIP0ecSyGtcqw+jTJ19I=)
                          5: cujgOoD9oOnPnWNHQ2oaYF56LYE.roa (hash: NshN4mSKtv5QhJOcEymdQSgMRdJApXgkLCaqG2CcUaU=)
                          6: uaxJ0czcrt2aE_SAPfGu3ObcERI.crl (hash: lGKIkrkdhjvprmTsjAOWBEUTEZr5xEl4h54Rk5n33YM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:e8:fd:23:7e:33:62:9d:09:2d:fb:96:df:6a:73:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
        Validity
            Not Before: Sep 10 20:01:14 2026 GMT
            Not After : Sep 11 20:01:14 2026 GMT
        Subject: CN=4a8517a38fc4488dfbed340e8d54ffa8579a4381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:be:62:92:60:a7:35:28:44:97:31:29:31:7d:
                    72:1f:ce:2d:f6:77:8a:7b:a2:0e:e1:ac:2d:4c:10:
                    2f:0d:b7:00:2a:18:22:7d:3d:29:59:94:6a:3e:4a:
                    3a:cd:fc:13:92:8a:e8:7a:ea:0a:c5:7c:c0:a9:c3:
                    7d:67:6b:53:10:74:ac:af:79:f1:c7:e1:7b:38:69:
                    bc:a6:4a:e3:11:85:77:bf:33:ce:ab:19:9d:f4:5c:
                    de:14:b6:a0:cc:fa:aa:4b:67:59:d1:54:e5:45:91:
                    3e:7c:1f:f0:c4:78:df:9f:b0:d6:6a:4e:cd:31:5d:
                    ea:17:23:7f:35:27:59:bf:6a:1d:fb:15:4b:bf:cb:
                    4b:43:61:fa:e0:75:3c:14:7e:c6:ee:11:ef:f5:d8:
                    bc:48:47:d6:88:44:bd:86:59:c2:23:28:59:29:81:
                    36:1c:14:0c:92:6f:3f:5f:be:3e:45:74:d6:b8:11:
                    48:c4:75:a7:d7:e6:dd:4f:dc:d1:6e:0a:84:e2:92:
                    df:52:91:59:f9:26:10:56:c2:db:1b:ab:b9:cb:65:
                    e9:62:87:15:79:64:18:72:74:d8:27:66:9f:4e:61:
                    0d:8f:50:7a:f3:cb:a7:ed:b9:b1:a4:48:0f:07:16:
                    aa:79:3b:39:1a:bd:e4:ad:93:f5:3c:2c:bb:29:83:
                    56:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:85:17:A3:8F:C4:48:8D:FB:ED:34:0E:8D:54:FF:A8:57:9A:43:81
            X509v3 Authority Key Identifier:
                keyid:B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:cc:96:82:19:db:c6:98:dd:a7:34:0d:37:49:39:48:71:f7:
         de:be:66:20:83:97:b0:17:1f:03:73:41:45:90:42:40:52:1c:
         56:85:7d:c1:86:c1:98:b3:15:ef:49:c7:73:70:16:61:39:73:
         2c:f3:57:a7:c5:60:cc:bc:20:fc:a9:31:6c:e5:4d:6b:2d:34:
         90:1b:8a:d4:eb:41:03:63:61:6b:39:4e:1c:fa:25:a6:3b:46:
         e4:8e:17:f0:97:21:5a:05:00:0e:c3:45:92:b3:c1:72:29:80:
         f7:44:17:0b:66:38:4b:45:d6:1f:62:66:cb:39:c5:de:7b:c2:
         29:f0:c0:da:df:44:51:a7:d2:ea:39:25:6a:c9:7c:7b:83:b7:
         95:15:a4:87:02:7d:4e:8b:27:00:e3:bc:ea:19:6d:99:69:14:
         2a:a4:49:21:90:08:8a:7b:48:1b:d9:28:6e:7f:54:35:4f:09:
         33:22:88:1a:f6:3a:ad:d1:74:16:d3:cc:49:b2:69:c8:47:be:
         ad:1c:00:c9:d6:48:e7:ed:db:55:d8:21:01:52:fe:85:1e:6c:
         31:35:d6:f8:26:0f:83:6f:44:b5:61:2b:fa:67:b3:74:e5:26:
         57:5b:03:55:d0:6a:75:6f:83:db:83:9c:18:7a:28:d6:f9:44:
         63:cd:a5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:32:25 2026 by rpki-client