Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
File:                     sUiB-j51o4Uc9wQZE1q91SnS9oI.mft (raw, json)
Hash identifier:          FLzjMSDKwUHvhTG8XyjsiKA7hWuMAvPyyuWGio7VtLk=
Subject key identifier:   2C:C7:43:6C:57:51:C8:EC:E6:38:8C:A9:F6:25:B0:42:B6:71:78:26
Authority key identifier: B1:48:81:FA:3E:75:A3:85:1C:F7:04:19:13:5A:BD:D5:29:D2:F6:82
Certificate issuer:       /CN=b14881fa3e75a3851cf70419135abdd529d2f682
Certificate serial:       01A14C195ACB9DD874D2AE699B6C3C071ACB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
Manifest number:          1AAF
Signing time:             Sat 17 Oct 2026 23:01:32 +0000
Manifest this update:     Sat 17 Oct 2026 23:01:32 +0000
Manifest next update:     Sun 18 Oct 2026 23:01:32 +0000
Files and hashes:         1: UPKKwW9VJYZFBiA_WvIaqWPdF7s.roa (hash: K2pc24cJyQQfvnYYt5miofrs9P0Hxb8DyAeGlZ+9xFY=)
                          2: sUiB-j51o4Uc9wQZE1q91SnS9oI.crl (hash: eg3Td7d4hSgYnSFFL9/Ma1mmSGjPcF06IH6goQmbSbw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4c:19:5a:cb:9d:d8:74:d2:ae:69:9b:6c:3c:07:1a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b14881fa3e75a3851cf70419135abdd529d2f682
        Validity
            Not Before: Oct 17 23:01:32 2026 GMT
            Not After : Oct 18 23:01:32 2026 GMT
        Subject: CN=2cc7436c5751c8ece6388ca9f625b042b6717826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:40:ba:02:59:44:c1:3c:d1:95:85:d6:4c:c2:
                    f1:b7:83:7e:a8:87:45:46:09:62:86:d5:9a:b5:a5:
                    ef:28:68:5b:d8:4a:3c:94:e3:63:67:8c:a8:d2:69:
                    65:09:87:ae:ec:8f:fc:39:3b:af:b6:b7:0e:1d:cc:
                    ed:cd:4d:70:b1:45:60:39:83:dd:93:af:93:f4:10:
                    18:15:46:1d:6f:58:cd:22:3c:cc:09:4b:49:6f:c6:
                    3a:2d:7d:0e:fe:b1:67:57:4e:67:f0:a9:30:b9:d7:
                    ed:ab:fd:3d:ff:89:52:d9:d5:54:bd:c2:a1:f8:78:
                    3d:e4:ec:c9:4e:8a:e2:fb:4c:8f:ef:73:9d:84:ed:
                    46:46:ad:82:df:97:89:dd:9b:b0:bf:9a:2b:66:02:
                    a2:b5:9f:30:0f:c4:00:a8:e4:72:48:29:19:53:7a:
                    7a:d3:9d:b7:ae:54:72:27:1f:3a:83:72:c4:d3:f9:
                    c7:8e:56:10:01:40:6e:60:77:35:39:91:10:93:73:
                    25:14:0e:21:63:a4:d5:68:61:c8:78:cf:e1:5c:99:
                    8a:a7:ea:53:4b:32:54:da:30:41:ab:5a:55:08:db:
                    62:58:d5:bf:d1:fc:64:d5:e7:92:7e:fc:8d:25:6f:
                    9c:cb:ff:a2:4f:e1:cf:9c:6d:a7:8f:f0:a4:66:e7:
                    6c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C7:43:6C:57:51:C8:EC:E6:38:8C:A9:F6:25:B0:42:B6:71:78:26
            X509v3 Authority Key Identifier:
                keyid:B1:48:81:FA:3E:75:A3:85:1C:F7:04:19:13:5A:BD:D5:29:D2:F6:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:bf:0c:e8:3b:92:72:63:8d:b7:5c:43:da:47:13:f4:47:63:
         c3:f4:b7:bd:bf:37:94:f2:89:a5:ad:5f:26:4b:cb:18:4f:ba:
         7c:5b:a5:3c:c1:bb:05:74:ba:20:84:76:e3:00:dc:e0:7f:c9:
         c1:cb:87:c5:b5:15:22:af:08:72:94:7f:f8:fd:e8:ca:cb:5b:
         83:5b:46:1e:c2:eb:97:28:22:19:e1:37:ab:6c:6b:47:04:4a:
         e9:40:67:c2:21:11:06:b7:e9:65:50:6a:7e:d2:dc:12:c6:12:
         e1:da:99:a1:19:78:dc:11:72:04:e5:d4:98:49:98:cd:cf:31:
         33:98:f5:b0:a5:93:0b:cb:99:2c:73:47:b5:fa:44:2a:63:26:
         b7:8c:0c:39:25:98:04:f5:cc:57:83:b3:24:16:84:b9:4d:68:
         17:74:1c:27:14:a2:ff:07:8d:84:b2:27:f1:2a:7b:ce:22:54:
         56:fb:13:f3:55:82:1f:4a:c4:35:bc:b4:a5:e1:0a:9d:54:ed:
         fc:2e:d2:27:b3:06:c0:e3:b5:2d:b1:f1:ad:da:8a:69:91:54:
         59:62:c6:01:4d:8a:fb:cd:c0:b6:63:bd:37:7d:cb:cd:e9:e6:
         da:f7:b7:a9:a9:cf:6a:6e:de:48:2a:55:a2:b2:98:59:b5:1a:
         f2:11:6a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 11:36:09 2026 by rpki-client