Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
File:                     uGWF0IuX5nnwgovxAr6rUdza-oc.mft (raw, json)
Hash identifier:          w0fRGpYvqzPiuck2aZtlq6erelMO+cruUD7GSMzqwV4=
Subject key identifier:   E7:3E:F3:FF:4D:58:D3:97:5C:87:CF:CE:19:E8:6E:3B:29:0E:6F:68
Authority key identifier: B8:65:85:D0:8B:97:E6:79:F0:82:8B:F1:02:BE:AB:51:DC:DA:FA:87
Certificate issuer:       /CN=b86585d08b97e679f0828bf102beab51dcdafa87
Certificate serial:       01A16C7F897FA0621923FFF996E25C830F2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
Manifest number:          0477
Signing time:             Sat 24 Oct 2026 06:00:59 +0000
Manifest this update:     Sat 24 Oct 2026 06:00:59 +0000
Manifest next update:     Sun 25 Oct 2026 06:00:59 +0000
Files and hashes:         1: Ga14DKlkNtPaU4_WDklMXTBEZd0.roa (hash: 51BV+zXQbnh+NfWZphUfXu97WrA83bdxjQhGkdY1730=)
                          2: uGWF0IuX5nnwgovxAr6rUdza-oc.crl (hash: uCTrOfeFRaVEFbJvyC7Y4Oh8wru/CdxZ+DEHtC3ULyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 05:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6c:7f:89:7f:a0:62:19:23:ff:f9:96:e2:5c:83:0f:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b86585d08b97e679f0828bf102beab51dcdafa87
        Validity
            Not Before: Oct 24 06:00:59 2026 GMT
            Not After : Oct 25 06:00:59 2026 GMT
        Subject: CN=e73ef3ff4d58d3975c87cfce19e86e3b290e6f68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:16:bc:05:27:05:8a:93:98:75:78:2b:22:9a:
                    90:95:48:dd:11:93:e4:d8:9e:bc:8c:fe:5a:cb:4e:
                    02:87:c1:23:7a:f1:59:90:b1:3f:ab:41:04:02:ec:
                    0b:b5:1f:a6:75:20:23:e3:75:4f:0c:4f:01:02:93:
                    06:cc:a9:1f:c9:ab:7b:fa:9e:92:bf:ea:b1:10:f7:
                    1a:44:84:fe:2f:b5:ed:4f:42:88:78:16:f6:aa:e2:
                    9f:3a:c5:24:4d:4b:ff:a0:80:14:a6:54:c2:eb:3c:
                    71:2b:7f:a5:8a:6b:d1:56:52:fa:3f:f9:10:9c:9a:
                    68:96:a8:84:cd:49:dc:75:a7:49:e8:02:50:20:82:
                    b2:56:b4:b6:22:89:d1:fe:7d:a7:81:01:4e:a1:74:
                    6b:a9:11:a4:74:0a:d0:49:4f:df:56:fa:bc:71:37:
                    65:e5:17:b7:23:87:0d:ca:7a:8f:ac:7b:e4:82:d2:
                    37:c9:db:c9:fd:97:ae:65:fd:0a:03:de:b4:ae:00:
                    80:b9:b8:49:fb:df:c2:67:af:a1:99:41:62:18:f9:
                    58:e5:43:b0:40:0a:b2:a6:8d:88:12:9d:ba:54:f7:
                    7d:a5:42:96:6d:6d:92:83:9b:ae:4a:23:1c:08:26:
                    05:e4:83:bd:45:e6:d7:12:b6:4f:db:d7:6c:a4:dd:
                    2b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:3E:F3:FF:4D:58:D3:97:5C:87:CF:CE:19:E8:6E:3B:29:0E:6F:68
            X509v3 Authority Key Identifier:
                keyid:B8:65:85:D0:8B:97:E6:79:F0:82:8B:F1:02:BE:AB:51:DC:DA:FA:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:d9:55:e9:87:f3:6c:ab:41:0d:ab:56:29:8d:b3:b7:dd:c0:
         15:f7:41:34:24:5f:20:1d:13:5e:ba:9b:1f:43:d3:68:12:87:
         3b:dc:a1:bf:f9:88:cb:0a:9a:5f:e9:cb:7e:70:ee:58:f6:6d:
         f5:16:d0:19:94:48:7a:1f:d4:d9:fc:52:27:e0:5a:7b:f4:58:
         08:9e:80:c0:81:1a:d0:33:81:c6:49:5b:ac:06:4a:08:58:70:
         3a:8b:7c:b4:a6:de:9c:f6:35:35:79:38:08:82:ea:80:24:74:
         c4:93:29:de:2c:80:ed:f1:b8:cf:dc:a5:a1:22:0b:fe:9e:ef:
         a1:7d:99:12:25:e5:7c:9b:4b:36:f5:6d:61:bd:d0:e0:fd:ed:
         e6:ac:2f:9e:2b:86:e3:0d:36:f3:5b:c9:63:45:f1:0a:c5:ee:
         38:5f:0f:c3:0f:39:e3:ab:e9:3b:a1:5b:a2:3c:80:ca:dc:70:
         f2:d4:0b:1f:4a:26:6f:29:d1:24:78:98:c5:2a:21:3f:0e:af:
         56:46:26:d7:64:c9:97:80:f3:25:86:71:5c:86:a4:5d:b3:bc:
         04:4d:16:19:14:90:5d:f0:68:b9:89:ca:d5:cc:91:8f:fa:f9:
         46:c1:dd:6c:bd:e1:8d:1e:de:bb:02:96:1a:c3:27:6a:55:03:
         b7:4d:0b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 15:43:27 2026 by rpki-client