Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft
File:                     UAqdaSWQfcZs55keuULmgLE5E6k.mft (raw, json)
Hash identifier:          QF4wRV39hyCQsi7VnaO9uWLJI8lZ9hqYWDCAzoI+PVQ=
Subject key identifier:   87:45:D3:A6:FA:A2:38:5E:6C:4D:AB:EF:0C:70:7F:AC:BF:3B:E4:C1
Authority key identifier: 50:0A:9D:69:25:90:7D:C6:6C:E7:99:1E:B9:42:E6:80:B1:39:13:A9
Certificate issuer:       /CN=500a9d6925907dc66ce7991eb942e680b13913a9
Certificate serial:       01A08C43B67605DBABD860FB6E4884F8C375
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UAqdaSWQfcZs55keuULmgLE5E6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft
Manifest number:          018E
Signing time:             Thu 10 Sep 2026 17:00:42 +0000
Manifest this update:     Thu 10 Sep 2026 17:00:42 +0000
Manifest next update:     Fri 11 Sep 2026 17:00:42 +0000
Files and hashes:         1: UAqdaSWQfcZs55keuULmgLE5E6k.crl (hash: cZ8+Sz4yLXkXD4/mtDzZL9HG1XUTG3IBJprcRFHPY2I=)
                          2: XTRFNK15Srj4Dxkx9BJpGhvon9c.roa (hash: 2JtlFPv4dLd8U4gLpBv5lJb7jlDjsUb3MwUWDpaLfmA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UAqdaSWQfcZs55keuULmgLE5E6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:43:b6:76:05:db:ab:d8:60:fb:6e:48:84:f8:c3:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500a9d6925907dc66ce7991eb942e680b13913a9
        Validity
            Not Before: Sep 10 17:00:42 2026 GMT
            Not After : Sep 11 17:00:42 2026 GMT
        Subject: CN=8745d3a6faa2385e6c4dabef0c707facbf3be4c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5d:36:b4:28:6b:dc:d4:68:c8:73:c6:da:6a:
                    0e:47:1b:7a:62:02:24:6d:84:0b:31:79:8d:59:25:
                    c1:6b:02:89:d7:ca:07:f2:21:d0:f1:96:48:9a:0e:
                    b7:0a:a6:bd:54:5d:df:31:14:17:68:25:f7:8c:d4:
                    da:91:55:f5:d7:ee:67:f1:04:05:a3:30:6d:9a:f4:
                    28:8f:b1:07:09:1e:d1:ae:23:99:31:fc:6c:a1:b2:
                    f6:f8:a0:0b:6f:94:17:fe:56:52:1a:eb:2c:ec:9e:
                    f4:ff:05:66:bc:df:8a:07:82:07:42:7e:3b:00:b9:
                    35:d6:a0:93:98:07:7f:45:fb:c6:a2:93:25:46:26:
                    a7:85:99:e2:5e:3f:50:0b:fd:11:70:83:be:76:23:
                    74:4b:6c:ff:5d:9b:59:45:44:b4:ab:c7:d8:2b:34:
                    0e:f5:89:5d:4e:44:ec:12:15:88:52:ef:97:f0:9d:
                    18:60:17:cc:3a:a9:94:fe:f1:09:a7:5b:a6:e6:64:
                    75:dc:95:37:24:28:b6:a3:8b:60:7c:20:25:c7:3f:
                    47:01:fa:80:0f:89:b6:88:c6:6b:4f:bd:97:54:02:
                    35:48:2f:f0:0e:7d:0a:ba:50:e0:41:a5:00:61:46:
                    19:d2:2b:e9:a2:79:b8:38:e2:f6:aa:41:27:d2:82:
                    7c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:45:D3:A6:FA:A2:38:5E:6C:4D:AB:EF:0C:70:7F:AC:BF:3B:E4:C1
            X509v3 Authority Key Identifier:
                keyid:50:0A:9D:69:25:90:7D:C6:6C:E7:99:1E:B9:42:E6:80:B1:39:13:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAqdaSWQfcZs55keuULmgLE5E6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:2d:54:89:0c:f3:02:53:2a:56:31:bd:78:1c:e8:7c:93:41:
         55:ec:4d:0f:c3:e2:90:96:68:1c:36:1e:3c:fb:66:5c:1c:59:
         89:c8:71:51:59:89:0e:e2:2e:6a:c5:6c:a2:ee:d0:66:8e:20:
         66:50:31:36:5c:4b:13:d3:95:f1:d0:d8:22:3e:73:01:94:c0:
         67:de:91:a1:56:78:27:3d:8d:51:29:f3:04:99:70:ea:67:d7:
         d8:4f:41:c5:d3:99:85:56:2a:c3:80:33:8e:37:14:15:c0:98:
         b4:9e:b4:e1:49:ba:59:e4:1d:b8:24:ec:55:3a:01:83:29:6d:
         77:c8:91:22:b1:f1:64:ca:5c:12:59:4e:5f:58:a3:91:61:d2:
         71:bb:bd:05:f5:42:5a:cf:d3:05:38:9c:d3:cd:4e:19:f9:ee:
         90:a4:89:32:51:dc:d9:ee:65:16:30:bc:8e:f2:78:c3:d9:9e:
         cd:83:27:20:13:20:de:82:97:35:03:6e:67:9f:72:1a:e4:fa:
         3b:8b:76:1a:1a:fb:9a:14:5f:51:48:95:58:bc:16:cb:46:bb:
         81:e8:24:97:fa:0e:3f:8c:cf:df:27:67:e9:4e:dd:3c:4a:f6:
         4b:c9:ee:57:a4:8d:ad:d9:c9:f7:50:90:03:14:7b:f6:bf:1f:
         2c:02:18:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:02:43 2026 by rpki-client