Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
File:                     uGWF0IuX5nnwgovxAr6rUdza-oc.mft (raw, json)
Hash identifier:          UuPhzKQbW/YqFVpzqTKEYKahzwqvVXf5qa0586EUbw4=
Subject key identifier:   14:0F:69:8E:8D:1F:C8:F0:CC:F1:8B:FE:60:59:FB:D3:71:14:CD:E9
Authority key identifier: B8:65:85:D0:8B:97:E6:79:F0:82:8B:F1:02:BE:AB:51:DC:DA:FA:87
Certificate issuer:       /CN=b86585d08b97e679f0828bf102beab51dcdafa87
Certificate serial:       01A0412A8D467D3C8A13198299CB935C23E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
Manifest number:          03DC
Signing time:             Thu 27 Aug 2026 03:01:42 +0000
Manifest this update:     Thu 27 Aug 2026 03:01:42 +0000
Manifest next update:     Fri 28 Aug 2026 03:01:42 +0000
Files and hashes:         1: Ga14DKlkNtPaU4_WDklMXTBEZd0.roa (hash: 51BV+zXQbnh+NfWZphUfXu97WrA83bdxjQhGkdY1730=)
                          2: uGWF0IuX5nnwgovxAr6rUdza-oc.crl (hash: mgl9NU0M5t5hoOpLjWSgcgWZVUy0l1YGYRU34pxNCaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:41:2a:8d:46:7d:3c:8a:13:19:82:99:cb:93:5c:23:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b86585d08b97e679f0828bf102beab51dcdafa87
        Validity
            Not Before: Aug 27 03:01:42 2026 GMT
            Not After : Aug 28 03:01:42 2026 GMT
        Subject: CN=140f698e8d1fc8f0ccf18bfe6059fbd37114cde9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1e:8d:87:14:25:57:d8:fe:e0:d4:fb:f2:bd:
                    f3:b7:50:f9:4c:24:6b:0a:09:4d:a5:69:7f:b8:0d:
                    58:15:3b:c9:90:13:c5:a9:2d:88:7c:70:81:b5:a2:
                    d5:77:22:11:a4:d4:79:bc:b6:a9:f9:2c:89:46:12:
                    2b:29:56:06:53:8a:95:f2:84:27:ff:57:40:e8:65:
                    1e:57:d3:d1:ed:90:71:b4:ec:be:4f:fd:a2:ac:cf:
                    47:1f:7b:bd:78:3d:1a:54:52:44:b2:5f:85:26:92:
                    d2:b5:1a:4d:0e:75:55:34:07:62:8e:bf:5b:a7:ec:
                    95:75:bc:35:19:00:b4:72:44:18:89:45:17:bd:7e:
                    49:6d:04:91:f6:53:26:85:44:c5:45:95:96:ae:53:
                    a9:38:36:cb:f1:f6:e9:89:79:ae:c3:02:79:13:3d:
                    e2:3a:4a:72:56:b9:0f:bf:25:9c:95:f5:4c:a6:f7:
                    48:eb:da:5a:22:3b:99:dd:54:a0:1a:57:b1:d2:32:
                    cf:62:01:c3:e4:22:18:b4:38:40:5a:92:e1:69:fc:
                    b8:a5:71:1a:f7:df:52:8d:7b:59:6f:76:54:2f:66:
                    f1:1d:3b:0f:7d:26:36:c2:8f:b1:99:77:dd:30:2c:
                    de:ca:b7:59:23:92:27:bb:55:43:b2:81:fc:df:f5:
                    cf:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:0F:69:8E:8D:1F:C8:F0:CC:F1:8B:FE:60:59:FB:D3:71:14:CD:E9
            X509v3 Authority Key Identifier:
                keyid:B8:65:85:D0:8B:97:E6:79:F0:82:8B:F1:02:BE:AB:51:DC:DA:FA:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:64:ae:24:84:0e:21:7c:d2:5b:79:52:eb:8d:96:e5:9e:93:
         5d:4f:e2:06:9a:ec:8e:55:5a:4c:c6:2c:c1:97:d7:59:8c:e0:
         a6:ff:30:2a:68:e4:10:93:55:81:f6:43:c8:40:0c:f3:35:09:
         13:00:be:00:07:ed:d9:e5:9e:69:5f:18:5b:43:74:92:75:8d:
         88:35:27:18:07:27:4a:80:a4:f4:2e:b3:0f:3d:9b:49:0f:93:
         39:fb:4b:d0:e5:41:77:86:d3:2f:e7:dd:fe:05:f8:6f:2f:60:
         78:35:56:51:53:e9:87:c9:6b:65:fb:f4:a6:bb:4d:29:5f:d8:
         fa:b9:be:21:59:5f:5e:ea:c9:7a:52:b2:ee:62:58:a5:e0:59:
         a2:84:4e:f7:91:48:4a:e5:a9:26:9b:7e:eb:be:d6:09:d9:83:
         1e:25:7e:ff:da:27:56:b4:82:06:b1:65:64:20:10:dc:c8:5b:
         8b:bd:29:f0:60:8d:63:06:88:52:2d:36:11:ec:50:07:24:13:
         82:3c:c0:36:10:fb:4e:9a:3c:2f:cd:27:83:f7:e4:d3:43:37:
         33:bf:98:51:aa:4e:b7:b8:2d:2c:11:b9:2f:b5:bf:c8:ac:c8:
         c4:f5:10:cb:cb:33:d3:b1:24:d0:2e:8c:2f:b1:fa:80:ee:fd:
         b1:e8:44:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:37:45 2026 by rpki-client