Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft
File:                     uO0-vNIVX5oXihA62rSP2osidaU.mft (raw, json)
Hash identifier:          k/L2dz4iACQpWFFmc/Sfs7jFN80mUJczhgo/GPeOh2M=
Subject key identifier:   1D:9E:3D:FF:0C:45:3A:FC:36:24:DB:75:EA:7E:E2:E6:5A:FE:1F:B8
Authority key identifier: B8:ED:3E:BC:D2:15:5F:9A:17:8A:10:3A:DA:B4:8F:DA:8B:22:75:A5
Certificate issuer:       /CN=b8ed3ebcd2155f9a178a103adab48fda8b2275a5
Certificate serial:       01A1770366B0A6517FC846ACB06769A4E7BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft
Manifest number:          1629
Signing time:             Mon 26 Oct 2026 07:01:13 +0000
Manifest this update:     Mon 26 Oct 2026 07:01:13 +0000
Manifest next update:     Tue 27 Oct 2026 07:01:13 +0000
Files and hashes:         1: 1-fsHYTIUTFY0216Qbk8IXnoEcp8.roa (hash: bfgMgiAWnH7b52b8mMjuMw9kDEycqTEWeJ8kbQp2a6c=)
                          2: WIAk63chBCdGYiGDL4jJVIzgpHA.roa (hash: e3taT/GSCbu7IKCePzef39V4CQeoRg7zNm3KotlMe7A=)
                          3: Z4cd67t_oTbTTOY62m-SDIBMEfk.roa (hash: /PTXJtjmPJ7VKf+Ddpyha9KTCciauyGlpPXGyj6aw+Y=)
                          4: uO0-vNIVX5oXihA62rSP2osidaU.crl (hash: /slwurDeBNppxU/+8Y1bjOi5AdEEQI7rQnuUODsZqTw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 07:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:77:03:66:b0:a6:51:7f:c8:46:ac:b0:67:69:a4:e7:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8ed3ebcd2155f9a178a103adab48fda8b2275a5
        Validity
            Not Before: Oct 26 07:01:13 2026 GMT
            Not After : Oct 27 07:01:13 2026 GMT
        Subject: CN=1d9e3dff0c453afc3624db75ea7ee2e65afe1fb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:56:dd:c4:a0:ce:ea:d4:86:4e:d8:bb:0c:55:
                    29:45:8b:08:d1:18:5b:f9:ed:ea:5d:9d:c4:fe:b6:
                    68:90:9e:3a:e8:47:e7:06:26:0e:f7:7b:df:7f:ea:
                    c0:89:32:b0:01:70:c5:bd:88:8f:93:88:ad:94:15:
                    db:4d:32:5a:88:30:dc:92:57:39:71:5f:c6:7a:0a:
                    48:4d:63:dc:a9:9e:ee:26:42:50:53:15:1c:72:38:
                    cb:82:71:8b:9d:53:e9:90:7a:41:c7:15:49:52:be:
                    5e:a8:56:14:32:45:89:d8:3d:19:6d:94:9c:07:9c:
                    d4:07:32:c0:6e:83:14:c9:6b:03:67:95:7e:e8:71:
                    e0:2a:5e:4d:df:0f:f5:b3:8f:81:7e:7f:dd:83:21:
                    50:a1:34:7e:8d:4c:ad:c2:11:4c:6c:16:b8:9b:66:
                    1f:f0:ab:57:3f:3b:ad:45:f0:34:e2:a9:7c:0e:cf:
                    ab:15:78:93:20:da:64:d4:ff:8c:e2:7f:b2:93:97:
                    53:d5:ae:29:6d:6a:e6:b6:9e:2e:30:b5:95:96:8d:
                    25:21:b9:8f:1b:66:d4:ab:b6:65:a4:5c:1c:8b:ca:
                    d0:1c:c4:eb:2b:9b:2b:ee:a8:67:6a:c4:4b:cc:25:
                    2c:be:65:8c:ba:c7:b0:c3:29:04:36:68:06:2f:21:
                    09:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:9E:3D:FF:0C:45:3A:FC:36:24:DB:75:EA:7E:E2:E6:5A:FE:1F:B8
            X509v3 Authority Key Identifier:
                keyid:B8:ED:3E:BC:D2:15:5F:9A:17:8A:10:3A:DA:B4:8F:DA:8B:22:75:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:b6:c0:bf:6f:e5:0f:36:84:b6:a9:56:7b:8c:dd:e6:7e:20:
         f2:46:0c:f4:4e:5c:60:6e:b0:5a:4f:76:ab:49:1a:38:33:b2:
         6f:1e:54:a7:6b:71:86:ef:26:d0:69:52:d4:0f:2e:cc:fc:a5:
         8c:9e:b5:8c:14:1e:22:a7:d9:42:e9:e8:cb:97:6a:ba:07:3e:
         ff:aa:80:cf:d1:e9:2f:ce:87:db:0f:d0:e3:6d:b5:a6:19:a5:
         f3:0e:c3:1e:a4:8c:cf:04:c0:d8:e1:52:27:23:a0:d6:e3:7a:
         d3:48:2b:92:a4:96:36:06:27:13:b5:da:66:77:7e:9f:8b:1d:
         d4:a1:4e:30:df:0b:1f:be:96:7e:3d:a0:ac:df:39:8c:38:ac:
         19:50:d6:9b:11:3f:78:a4:a8:5d:7c:70:f5:dd:93:da:55:05:
         23:7c:03:6d:2e:1e:59:06:9b:55:59:6a:ea:86:34:c9:c2:d3:
         78:d5:d3:0e:0c:a8:86:24:03:54:27:86:a2:79:dc:0a:42:f0:
         71:99:dd:58:f8:7d:9a:87:42:f5:ba:9e:bb:5b:e6:f7:c0:bc:
         21:50:de:99:13:4d:b1:ad:2b:ee:07:2a:50:46:47:99:c3:09:
         15:58:1c:83:60:4a:50:2f:42:46:d3:01:fe:28:6f:87:5b:db:
         6b:57:b7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 16:46:13 2026 by rpki-client