Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
File:                     uxkNECrJYDtAWzY3TUKYaGBJN68.mft (raw, json)
Hash identifier:          gEgQBMLp/5aIp7y3UB1guhbrlN9tp+N5tu0JRzX5eao=
Subject key identifier:   89:6E:48:3D:D5:F0:31:B8:17:B4:98:45:B8:93:1A:06:3C:E4:71:EC
Authority key identifier: BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF
Certificate issuer:       /CN=bb190d102ac9603b405b36374d429868604937af
Certificate serial:       01A04319157A1B626FA9B31CB14EE692BC7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
Manifest number:          1A2A
Signing time:             Thu 27 Aug 2026 12:01:52 +0000
Manifest this update:     Thu 27 Aug 2026 12:01:52 +0000
Manifest next update:     Fri 28 Aug 2026 12:01:52 +0000
Files and hashes:         1: 7_ksMt69-ko9Gs3LCNVMY5Yua58.roa (hash: psyoJRhZwf9m2YaavxF9lBoTofEe6e2bqkYbKXhQaKc=)
                          2: fVnni3HY7sky3f7i5b4WxqKCK1w.roa (hash: EnePOrLQan0VYDSXsgvz+/fx8DR+bHj24KExzs6KuKQ=)
                          3: m35mxfiiz904INQeQIrVDjuOzJw.roa (hash: i+J1jgfb7rEYgW3Y5tYB7Y9arIQtP02Ur8/LX7WJu3Y=)
                          4: uxkNECrJYDtAWzY3TUKYaGBJN68.crl (hash: fyyCvUlstH5kZ4PgxyHjDs8obGd7LkqHFgMVe5Hl8mY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 28 Aug 2026 12:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:43:19:15:7a:1b:62:6f:a9:b3:1c:b1:4e:e6:92:bc:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb190d102ac9603b405b36374d429868604937af
        Validity
            Not Before: Aug 27 12:01:52 2026 GMT
            Not After : Aug 28 12:01:52 2026 GMT
        Subject: CN=896e483dd5f031b817b49845b8931a063ce471ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d6:ac:c6:1f:9e:36:a6:94:df:14:7e:1c:6a:
                    5e:1a:33:cf:24:43:aa:9f:93:d4:73:a3:50:16:1d:
                    52:64:6a:f0:9c:6e:7d:29:fe:5d:7f:f3:98:11:ac:
                    f0:a9:e6:28:5c:1c:51:2f:c1:48:ad:82:20:98:cb:
                    31:95:38:71:c5:a6:e5:0f:f9:89:3a:02:44:53:a3:
                    6b:c4:c9:04:84:b4:69:c0:7e:18:16:67:2f:ae:bd:
                    dd:ed:04:01:25:0e:50:59:fb:cd:13:5c:bf:21:53:
                    07:0e:4a:a9:44:a9:56:3a:45:c3:ef:ad:7b:30:4e:
                    3d:0d:57:3f:28:ae:de:98:2a:c5:59:12:ff:11:76:
                    f7:c9:e1:44:6d:15:cf:60:d2:06:4c:ce:0f:d8:e1:
                    7c:e5:88:6b:b2:c5:fd:b3:92:8a:5e:0e:69:21:3e:
                    73:bb:44:42:9c:51:33:86:82:84:be:ab:b7:73:dd:
                    a6:54:e8:26:bc:ae:4d:70:0a:4e:29:75:01:88:b2:
                    4a:75:54:05:06:e5:4e:72:18:d2:9a:53:d5:85:b8:
                    58:53:4a:e6:14:d0:19:a1:10:77:24:86:03:da:3e:
                    8a:82:57:42:2a:2f:6a:84:09:c1:1e:d9:30:4a:70:
                    c9:fb:fc:84:3d:9e:da:77:8d:08:8e:48:9d:67:59:
                    89:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:6E:48:3D:D5:F0:31:B8:17:B4:98:45:B8:93:1A:06:3C:E4:71:EC
            X509v3 Authority Key Identifier:
                keyid:BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:82:3d:8c:7c:7e:4e:01:a3:4f:9b:f5:0b:e7:ca:1c:2a:2d:
         26:89:5b:07:50:cc:fb:c9:5e:20:8e:2d:f4:51:7b:89:b1:7e:
         a4:eb:4f:f2:fe:4e:e9:ff:83:d2:d8:78:d8:18:47:2d:91:6a:
         16:cf:ed:fe:85:7a:fd:b2:ea:cc:20:82:1c:d5:94:71:a2:90:
         5f:cc:5b:b1:07:1d:fc:2c:d5:65:b0:a7:6f:8d:6c:ba:2c:0b:
         a1:72:5b:fe:37:96:0e:c8:a2:5c:fc:65:89:6e:d9:f3:78:b1:
         7a:a9:cc:fb:6f:50:dd:ed:de:3b:6b:43:76:54:34:8e:b2:6c:
         93:73:ea:96:dd:1c:bd:22:9c:5b:ad:80:b9:0d:ed:86:12:80:
         3e:71:8f:8d:26:af:3d:05:7e:0d:e0:98:44:6a:ef:9e:d2:1c:
         b8:fd:5e:d2:cf:b2:46:fd:63:c4:d5:a4:8b:5d:99:b4:11:91:
         22:01:b1:58:10:c0:4e:29:3a:bc:4a:3b:d1:98:22:61:6f:19:
         bc:0c:8b:f7:6f:6b:95:e0:50:5e:e7:d3:63:f7:33:a6:63:a9:
         f3:02:97:95:12:e0:8d:a2:27:c0:81:bd:89:03:c7:6d:1a:f8:
         31:42:f8:f1:f0:50:34:b0:73:f0:da:58:3c:70:4e:01:1c:9e:
         fc:59:2f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 16:50:09 2026 by rpki-client