Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
File:                     UxIuA6hBuIeJY6__9pXKT5_QaCw.mft (raw, json)
Hash identifier:          o4gPxwH9lQ/o9TvU6z5Pt/E64keLO90dJurM/tcfVPc=
Subject key identifier:   9A:A0:A7:56:87:DC:DC:EF:C0:20:00:95:75:5B:24:D8:43:B9:D1:A0
Authority key identifier: 53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
Certificate issuer:       /CN=53122e03a841b8878963affff695ca4f9fd0682c
Certificate serial:       01A0B5AD2257A1AF43EF293C240E4345D7EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
Manifest number:          1372
Signing time:             Fri 18 Sep 2026 18:00:17 +0000
Manifest this update:     Fri 18 Sep 2026 18:00:17 +0000
Manifest next update:     Sat 19 Sep 2026 18:00:17 +0000
Files and hashes:         1: UjFdhEdt4WKlDSIUUurW21paKp4.roa (hash: fDRm4GJe+GCEFChs7oH68Gzn9XNFPr0wdWmaIX+37oo=)
                          2: UxIuA6hBuIeJY6__9pXKT5_QaCw.crl (hash: ylJThdGoPBbvcG7Z5Wco6e9atQSkat4/qNrRd4V1iPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 16:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b5:ad:22:57:a1:af:43:ef:29:3c:24:0e:43:45:d7:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53122e03a841b8878963affff695ca4f9fd0682c
        Validity
            Not Before: Sep 18 18:00:17 2026 GMT
            Not After : Sep 19 18:00:17 2026 GMT
        Subject: CN=9aa0a75687dcdcefc0200095755b24d843b9d1a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:38:c9:0f:49:a1:3a:0f:b8:2c:c9:c6:ba:90:
                    63:63:f4:41:5f:8e:b9:11:63:13:44:ce:7d:97:53:
                    2d:a7:c4:f2:ad:6e:a1:1c:b3:0b:fa:cc:39:93:96:
                    3a:67:fa:2a:19:4d:03:33:07:a7:5b:2c:2f:11:03:
                    5b:00:c9:29:46:54:10:ee:6f:73:4d:15:83:be:3c:
                    10:42:24:83:23:27:7b:9c:dc:25:67:e3:45:63:70:
                    72:c9:85:c2:1c:68:a4:70:71:18:50:e6:3a:a5:a5:
                    14:20:70:d3:31:af:6d:4d:36:49:64:18:7b:d6:dd:
                    d3:db:ce:e4:41:e7:81:e9:a2:38:bd:8b:fa:60:e0:
                    9f:72:99:03:1d:51:9f:d9:a7:83:85:9e:93:73:73:
                    05:8e:be:54:1d:c9:22:57:ce:16:06:77:4a:a0:92:
                    d7:e7:3a:8f:c9:db:d9:d6:a9:74:7a:0d:76:dd:ba:
                    be:57:d8:41:0d:f3:2a:d5:1d:6e:e3:39:3e:62:4d:
                    fc:3f:50:a1:25:42:63:af:4f:07:fc:30:43:74:de:
                    6e:e2:28:7e:38:42:90:71:94:c4:b1:72:d7:dc:52:
                    84:4c:91:4c:37:c5:9d:37:91:3a:c0:61:5b:8f:65:
                    e1:92:a7:82:d2:64:b6:59:24:4a:e8:9d:64:65:2d:
                    90:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A0:A7:56:87:DC:DC:EF:C0:20:00:95:75:5B:24:D8:43:B9:D1:A0
            X509v3 Authority Key Identifier:
                keyid:53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:de:2a:a2:c6:8a:5c:1c:f0:72:08:ed:93:d2:ba:e1:91:8c:
         42:5b:7c:f6:7f:c3:1d:67:3e:70:ad:92:54:ed:d5:2a:ea:05:
         ab:73:77:6e:93:a9:78:10:ba:61:c2:a1:15:93:66:9c:fc:01:
         ab:9f:70:6c:8f:0e:28:0e:5b:ea:53:f3:9b:b6:b6:d7:d7:05:
         51:6d:ce:e6:e6:0c:0b:4c:9d:d6:df:4a:ef:bb:f0:d5:7b:6a:
         2f:85:5b:d6:2f:88:0b:13:69:22:c5:e2:e1:29:6f:72:9b:a0:
         77:9c:be:34:48:e9:49:97:53:ff:d4:6a:29:af:cf:14:e7:7b:
         78:c0:c7:d1:c3:a8:98:32:0f:9d:92:da:77:2f:90:17:2b:18:
         1c:f3:3e:3c:9c:3c:40:67:2d:30:7a:ae:ee:86:80:37:48:4a:
         02:75:75:21:28:f7:83:38:e3:a3:b9:a1:d5:48:5d:7b:31:9d:
         e2:1b:0b:95:85:1c:dc:4d:87:b8:44:79:b1:b7:e8:af:db:f2:
         02:1a:02:ac:d2:85:db:7a:f7:a7:f2:99:86:a0:93:d0:07:c7:
         4e:58:87:c6:90:84:59:cb:fd:52:a6:36:0d:3a:57:31:95:17:
         5f:1f:cf:7a:d9:a6:b8:67:38:2e:37:e3:fe:df:39:f9:ed:3f:
         3e:2a:44:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:13:32 2026 by rpki-client