Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
File:                     sUiB-j51o4Uc9wQZE1q91SnS9oI.mft (raw, json)
Hash identifier:          UogV0xuXSsjf44E8SL2nbbzNbVhHCY+G2+b6E7w7R/w=
Subject key identifier:   67:C9:00:70:E0:0F:56:66:15:0B:EA:CA:FB:A0:3F:30:50:E7:0F:7C
Authority key identifier: B1:48:81:FA:3E:75:A3:85:1C:F7:04:19:13:5A:BD:D5:29:D2:F6:82
Certificate issuer:       /CN=b14881fa3e75a3851cf70419135abdd529d2f682
Certificate serial:       01A003CB287526D9760B9B12E3452F8EE6F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
Manifest number:          1A05
Signing time:             Sat 15 Aug 2026 05:00:40 +0000
Manifest this update:     Sat 15 Aug 2026 05:00:40 +0000
Manifest next update:     Sun 16 Aug 2026 05:00:40 +0000
Files and hashes:         1: UPKKwW9VJYZFBiA_WvIaqWPdF7s.roa (hash: K2pc24cJyQQfvnYYt5miofrs9P0Hxb8DyAeGlZ+9xFY=)
                          2: sUiB-j51o4Uc9wQZE1q91SnS9oI.crl (hash: 5rKZpXgxF6TMrZrrAsQ1achBFvx0NKasCH3u4gKmDC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:cb:28:75:26:d9:76:0b:9b:12:e3:45:2f:8e:e6:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b14881fa3e75a3851cf70419135abdd529d2f682
        Validity
            Not Before: Aug 15 05:00:40 2026 GMT
            Not After : Aug 16 05:00:40 2026 GMT
        Subject: CN=67c90070e00f5666150beacafba03f3050e70f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:11:65:9b:4c:cc:ac:53:02:0d:6b:2f:ba:cc:
                    94:c2:44:fe:28:c1:7b:9a:a8:40:b2:99:46:c7:cc:
                    13:cb:60:62:49:e1:7d:7f:51:5d:60:a6:ff:42:c4:
                    a0:5a:a2:01:89:d2:ee:66:df:a4:2e:06:d1:9a:e8:
                    2b:a4:64:de:2a:92:b8:bb:fb:f2:b4:8f:d7:fe:e7:
                    36:ca:4e:ce:0d:dd:d1:09:d9:cd:ec:fb:69:bd:13:
                    0e:cb:1a:db:9f:d0:cc:5b:72:25:c5:a9:38:1f:9d:
                    8b:9c:7c:05:86:b5:4b:b7:87:2a:4b:6d:15:c9:af:
                    de:ae:bc:a0:74:97:10:c8:ea:04:c2:b2:5c:88:db:
                    ee:e4:32:f6:da:c0:c9:00:48:ef:d1:67:1c:17:05:
                    85:c0:0a:c8:16:f3:3f:23:60:a1:cb:66:bf:7f:ea:
                    c2:75:0a:3d:7b:07:7d:74:b8:54:4c:c4:de:81:08:
                    6e:b3:7c:cf:a0:2f:3a:58:6a:29:1b:bf:c1:18:50:
                    bb:00:fa:fa:5f:a9:2b:15:64:41:1f:b6:1e:2b:43:
                    1d:b2:8d:dc:30:53:bc:ff:84:5d:fe:4c:6f:cf:b8:
                    b3:82:69:55:01:59:2b:d5:67:9c:34:5b:c1:1b:11:
                    00:f2:43:35:59:35:fb:22:e9:75:51:76:51:4e:6f:
                    bd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C9:00:70:E0:0F:56:66:15:0B:EA:CA:FB:A0:3F:30:50:E7:0F:7C
            X509v3 Authority Key Identifier:
                keyid:B1:48:81:FA:3E:75:A3:85:1C:F7:04:19:13:5A:BD:D5:29:D2:F6:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:24:bc:d6:c8:f6:e1:69:ea:66:1e:23:62:4c:09:30:5f:bb:
         4d:2e:24:47:6e:1c:0a:44:ac:47:1f:85:70:10:b2:e6:ca:52:
         b3:98:f1:8f:c6:51:6d:e3:2e:12:38:58:7d:6c:4d:2b:fe:f1:
         1c:94:33:ca:91:85:3f:3e:bf:82:06:f6:af:9d:59:99:49:94:
         dc:0d:df:4a:91:ae:91:90:0f:ce:36:4c:6a:b3:6b:b2:dd:81:
         06:32:8c:91:9e:73:b6:24:ba:19:0e:86:f9:f6:d3:c8:d7:2a:
         ff:76:55:38:cf:61:c6:82:6c:52:d9:53:60:48:91:9d:41:77:
         9b:55:20:33:71:f5:13:6f:d4:9a:cc:26:83:aa:ad:92:d3:62:
         31:a3:3d:5c:3d:b4:71:1c:73:fa:ed:7c:cc:d8:74:8d:9d:5a:
         47:0c:d7:7f:68:a5:63:cc:89:c1:2d:77:a6:6a:d6:a4:8e:8b:
         39:fb:da:e4:49:5c:1f:fe:d6:95:76:1e:3b:31:15:79:6e:08:
         2c:d6:66:c6:69:d3:ab:cb:93:d1:4c:b9:fb:18:de:f9:6d:49:
         dd:48:ef:af:b1:9a:9b:48:e6:bd:c5:bf:0c:25:80:90:cc:ff:
         a5:7a:9d:a9:13:3e:1f:ca:a1:5d:53:ea:1d:03:3d:d2:f6:05:
         6f:b2:4f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:42:14 2026 by rpki-client