Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
File:                     uncwHhTWWzo9aG2qwW38SaxIx80.mft (raw, json)
Hash identifier:          CA9wNTG3HEPUVsSIxnWoMH7jjyLHGcOtJV+9ZXEXB94=
Subject key identifier:   2B:BB:FF:64:FA:1D:44:2C:BF:21:70:B8:77:BA:DA:B2:FA:18:D4:B5
Authority key identifier: BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD
Certificate issuer:       /CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd
Certificate serial:       01A11A501F1160F38BF50E2C0A4AC33B7877
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
Manifest number:          16B0
Signing time:             Thu 08 Oct 2026 07:00:20 +0000
Manifest this update:     Thu 08 Oct 2026 07:00:20 +0000
Manifest next update:     Fri 09 Oct 2026 07:00:20 +0000
Files and hashes:         1: 1LEFsPM_H8xQ-_ougrkdy_5rKNU.roa (hash: vqS3TtpAElEQP9C4hD+5YU/4Tth0LEZ2oFRo5KORXho=)
                          2: LBsEkxwQTYhHk4PbiWkcMNY_VwM.roa (hash: 3yJGlq/sSfsWxxmZU2mXpZuXHcJRJ3V2hkCfCCtg9JI=)
                          3: uncwHhTWWzo9aG2qwW38SaxIx80.crl (hash: lbuWVfG434QLzcHhTSSUH9c4syvKea6cq76nq+7Mzto=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1a:50:1f:11:60:f3:8b:f5:0e:2c:0a:4a:c3:3b:78:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd
        Validity
            Not Before: Oct  8 07:00:20 2026 GMT
            Not After : Oct  9 07:00:20 2026 GMT
        Subject: CN=2bbbff64fa1d442cbf2170b877badab2fa18d4b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:eb:64:91:70:ab:76:1f:56:0a:2a:62:15:0d:
                    b0:5c:0e:eb:40:27:84:45:e1:34:63:68:87:65:86:
                    04:c8:41:12:7d:11:69:20:67:27:01:18:d4:f4:6d:
                    2c:d3:59:4b:8d:bf:90:c5:aa:da:0d:55:fd:64:56:
                    ac:31:8e:ad:35:4e:ed:97:96:76:50:37:36:fc:2e:
                    a7:ee:c6:82:67:94:b2:02:61:26:93:d1:06:ff:b5:
                    4e:74:2f:82:4b:1f:ca:6a:6a:bd:c3:6b:8c:85:96:
                    76:76:ea:46:99:d0:25:51:13:2d:be:e2:19:f1:23:
                    51:57:62:2b:d3:0c:4d:06:ce:c4:1d:8f:db:b6:99:
                    6a:f6:b9:5d:80:cc:0e:54:c0:58:af:87:be:32:2e:
                    2b:ab:14:8c:bb:a3:a2:85:7a:f8:94:2d:ba:da:dd:
                    23:84:4e:44:0f:bc:cd:53:74:b8:73:5e:ba:20:9d:
                    9c:f9:87:5a:99:10:ff:70:99:8b:49:64:d3:11:23:
                    81:b8:58:77:ef:7b:7f:af:33:5f:2f:73:b3:38:70:
                    a0:03:e5:88:fc:93:a4:23:87:10:e4:cc:98:14:9e:
                    1d:8b:94:41:7a:fa:fc:a9:24:e6:4f:0f:23:0c:d9:
                    ae:46:e1:97:44:29:8d:05:78:fd:de:03:8f:54:b9:
                    5a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:BB:FF:64:FA:1D:44:2C:BF:21:70:B8:77:BA:DA:B2:FA:18:D4:B5
            X509v3 Authority Key Identifier:
                keyid:BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:c6:9c:76:56:52:f4:3a:56:a8:ba:6d:0a:55:34:63:3a:44:
         ae:d0:2d:0b:0b:73:22:31:a5:69:d3:2a:53:46:21:c5:bc:ca:
         d9:3f:a7:ef:c5:af:76:88:49:3f:d8:f0:4e:88:0a:70:51:1b:
         58:c8:f7:2a:61:36:79:48:f0:3f:81:b2:72:1b:01:c2:49:bd:
         05:e7:e4:fa:80:b3:af:d1:cd:1f:97:81:53:11:91:db:15:06:
         77:4d:b6:8b:c7:21:db:8a:8c:98:4f:6c:3d:e3:4c:3d:b4:95:
         4e:68:da:3f:de:02:f0:67:a1:ac:26:29:60:69:e4:2f:a8:27:
         d0:ff:53:3b:dd:0c:20:e1:2d:61:32:74:89:e5:e7:58:fc:8b:
         f6:af:58:27:b0:2a:00:eb:8a:c9:1d:4f:ea:0a:e3:21:15:27:
         f0:a9:03:6c:04:0a:d5:cf:84:63:62:1f:c1:c3:04:bd:61:61:
         b2:63:33:84:ee:35:d4:ef:30:bb:42:bc:08:e9:c9:ca:f5:3e:
         4a:4b:e5:6c:76:33:3d:db:8e:48:2e:20:8d:05:54:bb:87:59:
         97:06:b7:f3:61:5a:73:f3:9d:dd:0f:45:23:0a:d2:d0:97:49:
         b5:f9:a8:7e:47:62:65:37:09:f6:9e:be:0d:1a:65:9a:39:f3:
         db:be:f8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:57:45 2026 by rpki-client