Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
File:                     uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft (raw, json)
Hash identifier:          EC08GptRWCx3lRH8oqzlrYkgC2R9hVrK4fwqcz6wUc0=
Subject key identifier:   58:62:AF:AA:96:E6:49:7D:E1:0C:9C:6C:56:6D:EA:FE:06:D6:A4:69
Authority key identifier: B8:D3:EC:B8:F7:11:E0:B9:2B:50:5B:8A:0F:7A:5E:E0:42:29:13:95
Certificate issuer:       /CN=b8d3ecb8f711e0b92b505b8a0f7a5ee042291395
Certificate serial:       01A16C7F9F5D07C0BB348BC2EED9A89A30B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
Manifest number:          1378
Signing time:             Sat 24 Oct 2026 06:01:05 +0000
Manifest this update:     Sat 24 Oct 2026 06:01:05 +0000
Manifest next update:     Sun 25 Oct 2026 06:01:05 +0000
Files and hashes:         1: 5pmE9mYBjRhZe38QmWwWm942O9U.roa (hash: I/XtJQhuUGNWJY5SlUg6TDyMur1mKeDTnd/4LdzUf1c=)
                          2: uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl (hash: dL7qkF4Unyb/32gk124oUhp3l+QKz7YFzq+fKW5h6bU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 04:42:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6c:7f:9f:5d:07:c0:bb:34:8b:c2:ee:d9:a8:9a:30:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8d3ecb8f711e0b92b505b8a0f7a5ee042291395
        Validity
            Not Before: Oct 24 06:01:05 2026 GMT
            Not After : Oct 25 06:01:05 2026 GMT
        Subject: CN=5862afaa96e6497de10c9c6c566deafe06d6a469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1a:22:3f:b7:84:92:d3:63:65:1b:24:82:9c:
                    e1:ef:6a:e5:27:f1:cf:b6:81:e3:ab:f4:a4:a1:96:
                    93:83:1d:e0:e2:c6:b7:fe:30:f8:fc:a1:0f:e1:97:
                    b2:04:ac:14:fd:06:10:c9:5c:f5:a3:66:28:8f:0a:
                    72:0d:6b:80:a2:8a:4d:95:f4:4c:ce:f6:15:0c:2a:
                    14:29:0f:e1:1d:19:0b:d8:26:12:92:dd:d1:05:ff:
                    01:97:d4:6e:55:9d:5b:58:0a:60:da:bb:83:c1:02:
                    31:26:cc:74:2d:9f:6f:e4:08:c3:a4:fc:e2:94:6c:
                    b3:05:0a:1f:bd:f7:6a:1a:f8:2e:7e:eb:6d:29:ff:
                    a8:28:79:52:ff:d6:0f:7e:5f:9d:66:a4:63:a8:b7:
                    1b:50:cc:64:6c:75:1c:c4:cc:0c:07:0a:41:85:44:
                    6c:aa:1d:7e:84:81:97:78:03:f7:e3:9e:d7:7c:8f:
                    a0:c0:84:ea:8f:14:87:20:b3:17:46:2d:32:2d:07:
                    fb:6e:9d:19:b1:73:aa:5c:24:b6:85:49:20:51:e2:
                    22:af:af:f0:08:16:cb:ad:28:bb:8e:98:f8:b9:8a:
                    c3:f4:9c:47:64:a7:b2:05:0e:0b:ae:78:42:75:18:
                    bd:7a:82:ef:41:f7:d6:03:50:dc:09:c3:54:8b:37:
                    d3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:62:AF:AA:96:E6:49:7D:E1:0C:9C:6C:56:6D:EA:FE:06:D6:A4:69
            X509v3 Authority Key Identifier:
                keyid:B8:D3:EC:B8:F7:11:E0:B9:2B:50:5B:8A:0F:7A:5E:E0:42:29:13:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:0e:16:97:a9:08:ba:b5:30:f1:47:b7:59:f7:5b:aa:66:c7:
         f6:70:3e:ab:b3:9d:8f:b6:30:26:3d:c3:3b:26:2a:40:62:11:
         03:26:8c:34:69:d9:38:13:85:11:ae:a3:a4:0a:42:01:70:c0:
         7f:4c:53:4d:13:04:68:83:02:72:8b:61:4a:94:b8:1e:34:26:
         fa:09:1c:c1:1b:a2:a5:73:d0:50:be:59:d8:1a:5a:0a:ac:29:
         dd:0d:31:c7:59:54:3a:25:40:d5:32:06:70:71:eb:59:e8:10:
         6a:4b:a7:7c:04:53:c0:2d:35:5a:09:67:6b:26:1f:bf:03:7b:
         0a:a2:6e:af:65:d0:52:24:fc:61:3a:57:f6:b7:4d:3b:09:16:
         71:ac:06:80:f4:3d:27:2c:dd:2b:ea:e2:a0:07:62:42:d1:7e:
         0c:d6:77:d5:19:ce:d3:6c:26:05:90:d8:d8:3d:fe:51:af:18:
         c9:30:49:92:b9:df:66:7a:5d:55:f1:9a:35:2b:2d:68:cd:b6:
         46:ff:51:77:4e:ca:16:e7:d6:a2:0e:54:8f:0e:30:62:ec:a9:
         de:ca:30:3f:8f:65:1f:1a:49:93:95:94:90:14:3d:dc:f4:3c:
         a9:81:04:88:d0:4c:5e:f2:2a:0d:f3:80:a7:4c:d2:e7:bb:fd:
         16:d6:56:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:14:38 2026 by rpki-client