Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft
File:                     U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft (raw, json)
Hash identifier:          i50prDBMu8ED95HYU3xbqeanxLZVR1kjsfSta8NI1a4=
Subject key identifier:   E4:51:D1:3C:BC:5F:C9:00:F3:34:FE:78:C3:9B:78:BC:5D:4E:6C:1B
Authority key identifier: 53:BF:98:D5:35:22:AA:95:70:81:FD:EC:28:B1:72:08:43:94:F1:12
Certificate issuer:       /CN=53bf98d53522aa957081fdec28b172084394f112
Certificate serial:       01A13BCA11E5B375AD3EEE1822CF14454F33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft
Manifest number:          12B9
Signing time:             Wed 14 Oct 2026 19:01:00 +0000
Manifest this update:     Wed 14 Oct 2026 19:01:00 +0000
Manifest next update:     Thu 15 Oct 2026 19:01:00 +0000
Files and hashes:         1: U7-Y1TUiqpVwgf3sKLFyCEOU8RI.crl (hash: OCeYDbViY30voeTHW3tF3zQCd9ruI6HcO93dif+UE2A=)
                          2: mK9jBg2iFuywF6JUAww3mxKLxCU.roa (hash: lk8hbAdLVuILHrw42c6HMnMUPa/ZOyLXrol4InQSdq8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 14:43:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3b:ca:11:e5:b3:75:ad:3e:ee:18:22:cf:14:45:4f:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53bf98d53522aa957081fdec28b172084394f112
        Validity
            Not Before: Oct 14 19:01:00 2026 GMT
            Not After : Oct 15 19:01:00 2026 GMT
        Subject: CN=e451d13cbc5fc900f334fe78c39b78bc5d4e6c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:af:86:94:cc:bf:42:26:55:6b:9b:a5:52:48:
                    2f:b9:ec:f0:6b:ea:f6:ef:62:3e:d1:fe:60:c2:d9:
                    4d:af:ec:10:28:99:92:91:78:d4:35:e7:b9:9a:35:
                    3f:59:64:72:82:f6:3c:90:08:e1:a4:e6:2b:5a:2f:
                    ef:07:43:6b:61:54:5b:ce:ed:75:5e:28:b3:c3:0c:
                    1c:27:0e:da:c4:ef:e9:d8:0b:4a:1c:46:05:fc:b8:
                    31:d6:89:a5:3c:14:60:df:89:81:f5:51:ec:bf:38:
                    e1:26:c3:88:8e:4e:9f:fe:04:a0:9a:73:27:83:eb:
                    24:c8:ac:f8:44:31:e1:b4:00:05:52:fb:1e:47:e6:
                    b8:be:f1:2c:9b:d2:b6:19:a5:ee:25:1e:72:80:d8:
                    9d:54:22:92:0d:5d:7d:c6:ed:cf:c1:fb:ac:a9:2d:
                    bf:90:b2:f0:5f:1f:7c:2d:7b:d7:7d:53:ff:3f:4e:
                    23:b0:c9:64:55:bb:24:75:06:1c:49:79:e0:78:28:
                    a5:bc:47:a8:ed:03:74:de:f0:2b:b0:f2:07:13:1a:
                    43:34:40:ae:d7:ed:b0:2d:95:b1:36:1b:ff:f0:4c:
                    38:fb:95:e2:81:c1:65:d8:50:e9:1c:c5:7c:a1:d1:
                    37:b8:7e:90:03:20:de:a0:40:89:ae:f5:c5:63:ab:
                    2a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:51:D1:3C:BC:5F:C9:00:F3:34:FE:78:C3:9B:78:BC:5D:4E:6C:1B
            X509v3 Authority Key Identifier:
                keyid:53:BF:98:D5:35:22:AA:95:70:81:FD:EC:28:B1:72:08:43:94:F1:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:23:c1:b5:bc:06:60:c9:4e:b1:3a:89:2e:58:c5:43:8e:54:
         91:44:d1:19:ba:ba:1d:01:d3:c6:3f:56:ca:4c:c4:f5:12:5c:
         da:77:71:d0:f1:a3:ab:90:38:6c:f2:7f:97:5e:86:39:26:01:
         dd:7a:85:f7:89:a0:d1:05:d0:92:93:01:44:f3:7b:cd:59:ea:
         86:f0:04:e6:09:86:40:d7:89:5a:ed:7d:ae:32:92:7f:d5:cf:
         2d:56:f4:27:f4:0b:91:d9:3c:3b:66:d3:86:9f:1b:06:2f:50:
         de:89:b1:7b:f8:16:1a:3f:47:d4:2a:68:e8:40:30:b0:88:e6:
         48:ae:d5:d2:a8:a6:27:a7:76:d6:c0:ae:fb:f7:e9:e0:e0:47:
         69:1f:29:99:03:c4:98:3f:bb:e2:d6:70:a5:f7:0c:f7:5a:63:
         d0:cf:7c:17:98:06:1c:26:38:a5:2b:0e:16:88:18:7e:c9:26:
         b5:9f:d5:f8:89:e2:b5:d9:6f:1c:27:76:6c:d4:86:e4:d3:49:
         5d:a1:95:4f:7a:60:d3:ae:9a:fd:e2:a5:7f:6b:76:4e:21:96:
         80:25:ed:da:b1:13:50:38:38:f9:ac:a2:23:26:9b:39:ef:e8:
         ca:fa:5e:15:06:f8:e1:73:94:ab:0d:2c:79:6c:f7:8b:d1:df:
         d0:40:72:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 00:05:41 2026 by rpki-client