Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft
File:                     UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft (raw, json)
Hash identifier:          ri/B6xtNOXsfqa8083vprxzvwc/UKAoqKR6ShBCY088=
Subject key identifier:   D8:09:10:2E:D3:C2:08:40:BB:EF:DC:6B:CA:67:0A:94:F5:7B:ED:83
Authority key identifier: 53:08:41:E8:2A:A4:6D:99:59:FC:78:11:B2:57:95:C5:6C:D5:06:08
Certificate issuer:       /CN=530841e82aa46d9959fc7811b25795c56cd50608
Certificate serial:       01A18262F1B505FB4F0BCC3742C272554DA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft
Manifest number:          1AAB
Signing time:             Wed 28 Oct 2026 12:01:24 +0000
Manifest this update:     Wed 28 Oct 2026 12:01:24 +0000
Manifest next update:     Thu 29 Oct 2026 12:01:24 +0000
Files and hashes:         1: UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl (hash: s0ClzSgv80R5aeymBl17tqXiqbFJOI1j0y566aMR514=)
                          2: V-wJc1_T9ZdDaXQ8Bjgp6ZwH7Ko.roa (hash: 5Q51/s2uhZseLvK62BKwJY/vcbWTvSMuqDjEqNx+KWI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 12:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:82:62:f1:b5:05:fb:4f:0b:cc:37:42:c2:72:55:4d:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530841e82aa46d9959fc7811b25795c56cd50608
        Validity
            Not Before: Oct 28 12:01:24 2026 GMT
            Not After : Oct 29 12:01:24 2026 GMT
        Subject: CN=d809102ed3c20840bbefdc6bca670a94f57bed83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:15:e5:79:b1:19:1a:72:00:02:1f:3d:8c:42:
                    20:9c:2f:a1:65:10:d5:59:a0:dc:08:39:ca:8d:72:
                    a3:41:84:0f:9b:61:05:62:fe:2c:45:f0:22:71:35:
                    a5:f6:eb:60:ae:af:f5:cc:79:a6:9b:ed:23:f2:3c:
                    c1:3e:c2:e9:ed:27:5a:46:94:64:9d:e3:bd:ee:e5:
                    40:0f:1e:cc:02:1a:05:b2:ac:97:75:7a:f3:12:19:
                    66:3d:3f:bf:45:16:39:3d:f1:16:5d:16:c7:7e:51:
                    f8:75:f4:f4:00:10:b5:5f:72:5f:5e:39:57:82:43:
                    99:62:9c:0a:3e:f7:68:24:af:44:39:39:ee:29:54:
                    3e:21:43:24:c8:26:e8:d8:89:60:23:9f:c7:0e:28:
                    56:69:95:1d:e2:66:e1:d2:ef:07:97:ad:85:c0:c5:
                    39:ad:3f:e4:ee:64:18:34:09:d3:43:b6:bc:94:f9:
                    f6:d0:2c:16:b4:ed:6d:e0:b0:8d:b1:9d:fe:68:a4:
                    9f:8c:aa:bb:0d:e3:e5:6e:01:4e:43:60:d8:f2:c2:
                    b3:ad:3c:86:9d:78:84:66:87:32:b9:7d:a7:87:47:
                    96:3e:39:68:f1:5c:87:f8:74:20:52:69:8a:a7:e6:
                    29:03:45:89:86:73:c1:58:3e:56:41:2a:5f:ad:11:
                    87:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:09:10:2E:D3:C2:08:40:BB:EF:DC:6B:CA:67:0A:94:F5:7B:ED:83
            X509v3 Authority Key Identifier:
                keyid:53:08:41:E8:2A:A4:6D:99:59:FC:78:11:B2:57:95:C5:6C:D5:06:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:7b:d3:00:f2:44:ac:ea:34:77:77:b8:62:79:68:ab:f0:e3:
         3c:03:64:23:3a:9b:ff:47:04:6d:f2:98:25:41:fe:1e:f7:ab:
         97:e8:f9:ef:e6:a0:56:47:f8:95:11:89:fa:3d:e4:7e:69:86:
         0a:60:d4:5c:12:69:cf:5f:4a:8b:98:3d:d7:e0:a2:ca:fd:7c:
         e6:9b:47:3a:40:99:0d:c8:b1:21:81:67:2d:ac:59:a0:dc:f3:
         70:6b:72:6e:c0:51:1f:fb:22:3e:70:8c:96:07:ce:a0:e1:49:
         c3:46:8a:ac:84:52:ef:c9:33:1f:77:50:ef:1b:a4:cc:41:62:
         05:72:2a:ff:b8:62:90:33:09:5b:32:18:c6:cb:7a:9b:51:51:
         28:2b:99:45:56:ea:c9:21:b3:e1:9f:94:43:3f:4f:bd:11:45:
         58:43:f2:f7:85:4a:54:5d:cb:be:f0:61:49:c0:d7:e3:2e:a1:
         75:a8:97:3b:fb:a3:a3:4d:71:33:18:26:39:2f:57:93:57:71:
         d0:87:56:8c:a8:e4:78:6e:52:dd:63:58:72:7f:33:f4:7e:c6:
         db:ad:06:92:d9:ca:2a:07:da:b1:c5:e5:72:38:c2:cb:7e:09:
         dc:8a:96:7c:27:6e:97:8f:db:b3:2d:6c:82:e9:51:cf:11:ac:
         41:45:9e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:15:24 2026 by rpki-client