Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.mft
File:                     uMUVXbf5hZ4ITC7pv5boaJIJ09U.mft (raw, json)
Hash identifier:          74TA6GhmsDgza8pXcrbgIpRnODdOWlvrtHAfikpIUg8=
Subject key identifier:   E0:BF:5F:E7:CF:22:7E:FA:5A:0A:36:45:14:EA:36:B1:7C:39:B1:A7
Authority key identifier: B8:C5:15:5D:B7:F9:85:9E:08:4C:2E:E9:BF:96:E8:68:92:09:D3:D5
Certificate issuer:       /CN=b8c5155db7f9859e084c2ee9bf96e8689209d3d5
Certificate serial:       01A17BBB22C527CA9AB319E20502E58252F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMUVXbf5hZ4ITC7pv5boaJIJ09U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.mft
Manifest number:          1ACD
Signing time:             Tue 27 Oct 2026 05:00:24 +0000
Manifest this update:     Tue 27 Oct 2026 05:00:24 +0000
Manifest next update:     Wed 28 Oct 2026 05:00:24 +0000
Files and hashes:         1: lMQRX0mR9Axp4z6P95tdFQDV46k.roa (hash: Se/NXmVlNWl9ejlquvOyXO/Tg0Zm/eNsymPPK58mByY=)
                          2: uMUVXbf5hZ4ITC7pv5boaJIJ09U.crl (hash: X5kPgqJEcY82MoO4Tla6FyyHfpIBvZU3R5eBfUdODOc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uMUVXbf5hZ4ITC7pv5boaJIJ09U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 03:05:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:bb:22:c5:27:ca:9a:b3:19:e2:05:02:e5:82:52:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8c5155db7f9859e084c2ee9bf96e8689209d3d5
        Validity
            Not Before: Oct 27 05:00:24 2026 GMT
            Not After : Oct 28 05:00:24 2026 GMT
        Subject: CN=e0bf5fe7cf227efa5a0a364514ea36b17c39b1a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3b:41:35:b8:0d:98:9c:92:51:29:da:ef:cf:
                    4c:1d:93:27:88:ec:5f:99:ba:a7:e6:5a:7b:10:ec:
                    1f:79:f0:2a:fc:da:85:bb:4f:7f:a2:7e:dc:6d:55:
                    ab:3c:5d:cc:b7:16:bd:4a:66:4f:69:d1:b0:7a:32:
                    f1:a6:80:70:21:86:e1:48:65:d0:7f:e4:ba:16:8a:
                    38:96:ca:40:2d:a8:22:0a:65:ea:0f:e6:8d:85:81:
                    e7:70:bb:f6:4f:d8:f9:db:b0:0f:51:1d:ee:a4:5f:
                    81:ef:b8:c5:56:ef:a1:0f:ec:e5:60:28:3e:4f:31:
                    43:f5:26:39:26:fd:fd:65:32:73:c4:d8:6e:a3:14:
                    0e:32:61:bd:63:9f:01:c1:1a:83:6c:81:16:e1:1b:
                    e2:85:d0:0d:4d:48:42:f6:2a:98:7a:8f:83:60:b0:
                    cf:d5:be:7d:87:09:90:98:6f:40:e8:bb:e6:c1:f9:
                    aa:d7:fb:ee:d5:53:c2:52:ec:4d:62:b2:cd:cf:82:
                    fa:53:a4:87:77:dc:e9:5b:d6:0c:37:d1:bb:4e:40:
                    fa:cb:1c:74:32:d7:93:1a:75:88:5b:7f:a8:fc:0b:
                    3b:43:29:33:ee:98:53:a1:14:fe:8d:51:d9:55:27:
                    75:2a:02:e3:91:6a:7c:12:4a:f1:d2:99:72:a4:33:
                    b1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BF:5F:E7:CF:22:7E:FA:5A:0A:36:45:14:EA:36:B1:7C:39:B1:A7
            X509v3 Authority Key Identifier:
                keyid:B8:C5:15:5D:B7:F9:85:9E:08:4C:2E:E9:BF:96:E8:68:92:09:D3:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMUVXbf5hZ4ITC7pv5boaJIJ09U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:ee:3e:04:53:aa:44:ee:27:7b:3e:42:4c:9b:c0:d1:3d:28:
         df:4f:7d:d8:a7:d8:d1:ba:fd:db:5d:ed:8f:a4:fd:a8:62:e1:
         4a:47:a3:ef:54:70:18:15:1e:c8:7a:38:6f:88:33:eb:90:dd:
         3b:c6:f7:2e:c3:91:3c:1a:d0:5b:1f:c5:98:f1:0f:9f:ca:92:
         37:09:1c:0d:6e:b3:9d:9b:67:e1:7b:64:b6:bf:2f:59:41:4c:
         52:fc:fc:a1:c0:ea:7d:cf:63:c2:c0:59:14:d5:4a:b9:48:fa:
         ea:85:40:b5:b1:38:92:c2:35:7c:e6:dd:32:f5:e8:8c:d5:56:
         73:4e:a1:d3:a9:4f:cb:73:73:d4:94:99:0d:fa:74:88:5b:31:
         00:93:53:41:fd:42:02:9b:c0:97:10:78:47:77:57:ac:68:5a:
         7a:3f:15:a9:10:f6:3b:12:d8:c8:db:1b:f4:9e:7e:ba:21:bf:
         5f:e5:e3:35:98:fb:d1:30:d8:6a:d5:dd:0b:3a:61:3c:0e:d9:
         93:5d:9e:bd:a6:b9:f0:99:24:c9:0d:34:05:ce:b9:24:e3:5a:
         c2:ef:ba:55:29:89:3a:64:5b:69:22:fa:4f:35:2e:10:db:b7:
         a9:4a:6c:1e:67:74:86:0d:46:5b:5d:7b:5f:2d:03:2d:a0:1f:
         b9:fb:8e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:15:45 2026 by rpki-client