Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/4320e2-55cc-4e5d-98cb-0912d9a5d947/1/CUe_Bv_WqoNzcWZqxPtIXDMirzA.mft
File:                     CUe_Bv_WqoNzcWZqxPtIXDMirzA.mft (raw, json)
Hash identifier:          NZUWqQnURxjbFkM1O+dA8nHS06vRAIEDIMU0tBewCgg=
Subject key identifier:   F4:FE:5A:A0:80:74:A1:74:95:BF:6B:61:0C:94:AE:BB:97:4B:1A:91
Authority key identifier: 09:47:BF:06:FF:D6:AA:83:73:71:66:6A:C4:FB:48:5C:33:22:AF:30
Certificate issuer:       /CN=0947bf06ffd6aa837371666ac4fb485c3322af30
Certificate serial:       01A131EB65B0BF612E1DF9D9D2DF08AED7B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CUe_Bv_WqoNzcWZqxPtIXDMirzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/4320e2-55cc-4e5d-98cb-0912d9a5d947/1/CUe_Bv_WqoNzcWZqxPtIXDMirzA.mft
Manifest number:          019B
Signing time:             Mon 12 Oct 2026 21:01:12 +0000
Manifest this update:     Mon 12 Oct 2026 21:01:12 +0000
Manifest next update:     Tue 13 Oct 2026 21:01:12 +0000
Files and hashes:         1: 1eP5CXO1PBIl9QsPThVXxpFKkiI.roa (hash: KZ7tVteP3lGVX8UW1l2BZ5G++9dxomswpEwb1weu7Qg=)
                          2: CUe_Bv_WqoNzcWZqxPtIXDMirzA.crl (hash: swaioVQI5s03+wdq8mBPM/rFWCZgfZY6/nvzFtEQLyY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/4320e2-55cc-4e5d-98cb-0912d9a5d947/1/CUe_Bv_WqoNzcWZqxPtIXDMirzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/4320e2-55cc-4e5d-98cb-0912d9a5d947/1/CUe_Bv_WqoNzcWZqxPtIXDMirzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CUe_Bv_WqoNzcWZqxPtIXDMirzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:31:eb:65:b0:bf:61:2e:1d:f9:d9:d2:df:08:ae:d7:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0947bf06ffd6aa837371666ac4fb485c3322af30
        Validity
            Not Before: Oct 12 21:01:12 2026 GMT
            Not After : Oct 13 21:01:12 2026 GMT
        Subject: CN=f4fe5aa08074a17495bf6b610c94aebb974b1a91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:dc:c5:c8:7f:f9:7c:0c:57:2d:5e:7c:7d:55:
                    eb:a8:fc:76:91:de:d0:fc:62:a0:28:ee:4e:b7:9c:
                    a3:2d:90:37:f6:aa:f7:df:74:19:3f:df:00:ee:5a:
                    5f:11:16:d8:e4:1a:66:3b:5c:04:3b:6c:41:cb:54:
                    bf:79:bf:35:dc:8a:8e:db:0a:de:5e:09:a6:24:26:
                    9d:71:f8:b9:ce:ff:e4:65:d6:f2:a2:15:8b:3b:b7:
                    86:66:33:f1:da:a4:95:be:e5:d6:df:94:a7:77:ae:
                    00:59:96:ed:a7:6c:e6:9a:e7:f2:4b:99:ef:fb:91:
                    f0:18:98:33:0d:12:67:e6:6c:b8:69:6b:03:18:9c:
                    ab:9a:2c:b3:43:98:da:21:fd:c9:90:80:51:1c:7d:
                    a1:a2:85:c0:97:77:c1:79:27:81:1f:9c:c3:9f:ab:
                    dc:f7:5e:c5:02:cd:42:7d:32:25:c8:cf:04:86:a6:
                    f3:2d:67:39:6e:47:69:e8:df:f9:bd:7f:7f:a4:bb:
                    ed:f7:e5:33:9e:c0:b3:bb:19:b4:70:6e:13:41:69:
                    ce:5a:62:9d:be:be:0b:de:d3:9c:f0:02:02:53:b4:
                    22:fc:7f:b0:d4:e8:0d:26:3e:7f:63:b5:f2:da:07:
                    67:56:d1:d6:53:2f:ca:20:f3:db:55:37:35:52:86:
                    40:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:FE:5A:A0:80:74:A1:74:95:BF:6B:61:0C:94:AE:BB:97:4B:1A:91
            X509v3 Authority Key Identifier:
                keyid:09:47:BF:06:FF:D6:AA:83:73:71:66:6A:C4:FB:48:5C:33:22:AF:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUe_Bv_WqoNzcWZqxPtIXDMirzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4320e2-55cc-4e5d-98cb-0912d9a5d947/1/CUe_Bv_WqoNzcWZqxPtIXDMirzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4320e2-55cc-4e5d-98cb-0912d9a5d947/1/CUe_Bv_WqoNzcWZqxPtIXDMirzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:79:03:b0:ae:6b:77:ef:aa:a7:0d:6d:fc:d2:73:44:8e:16:
         11:e7:fa:3d:41:aa:13:b9:92:c5:7b:92:82:3b:be:6f:d5:26:
         8e:c9:f1:a1:c4:9d:02:d8:0b:e6:50:1a:77:b0:90:f2:1f:fa:
         7c:54:69:9a:f7:e6:9a:2b:7c:3d:62:25:76:8e:62:54:49:cd:
         77:79:79:bb:c5:8c:c1:b9:b9:a2:bc:8d:7f:9c:46:36:4d:1e:
         ae:d2:6c:a0:b6:4f:f8:c4:26:8e:d9:94:23:c8:6f:8d:7d:b7:
         c7:27:95:c1:c6:d3:8c:3d:90:d2:63:a5:b3:5a:1c:d5:2b:21:
         8e:46:d7:81:5e:fe:37:01:3b:1d:e5:62:8e:48:cf:09:01:1b:
         ff:b3:50:12:b1:7c:67:75:a2:25:72:96:f5:90:0d:58:66:51:
         5e:fe:b2:cb:2b:1f:32:08:d8:2a:92:0e:d8:68:7a:d5:ac:d4:
         1c:4e:d0:4b:22:4d:8b:6e:58:64:4e:7a:bf:0d:30:a0:22:29:
         b2:f5:77:7a:f1:57:6a:ba:65:a9:cb:a5:c0:83:38:f5:23:20:
         ba:a3:c2:8d:17:64:51:f3:4b:64:22:4a:5f:b2:75:36:2c:c4:
         00:51:3e:e6:7e:b9:b3:09:91:25:9e:37:61:0e:b6:c4:7a:74:
         32:47:bb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:11:42 2026 by rpki-client