Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
File:                     rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft (raw, json)
Hash identifier:          aoxwjmLJ8+ebWafmgXoTmzwOsR6RT49wKMy9Okd0TOU=
Subject key identifier:   8D:D4:62:AF:E4:92:46:4E:42:58:6C:A2:9A:50:A5:4E:B3:4F:68:75
Authority key identifier: AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD
Certificate issuer:       /CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd
Certificate serial:       01A122418EE92A292EA863057DBD3959CE67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
Manifest number:          06BC
Signing time:             Fri 09 Oct 2026 20:01:24 +0000
Manifest this update:     Fri 09 Oct 2026 20:01:24 +0000
Manifest next update:     Sat 10 Oct 2026 20:01:24 +0000
Files and hashes:         1: 5bBSbPRJU7MitFpRgPerCchom28.roa (hash: QAwUl9Lhrh1n1EXirxYX4rz+UIQVZLyQirDHc9Fe4Ek=)
                          2: rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl (hash: s06t/EdLw34QNVI5KB2LHuRIwyDX0Uh43b1Io0J7MeQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 13:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:22:41:8e:e9:2a:29:2e:a8:63:05:7d:bd:39:59:ce:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd
        Validity
            Not Before: Oct  9 20:01:24 2026 GMT
            Not After : Oct 10 20:01:24 2026 GMT
        Subject: CN=8dd462afe492464e42586ca29a50a54eb34f6875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:01:42:df:68:33:c9:0d:39:1f:6a:68:5e:75:
                    12:a9:4c:57:e9:8c:88:8e:10:c0:36:c1:c7:42:51:
                    12:01:91:34:75:16:a6:b4:13:b1:5f:1e:61:da:24:
                    28:94:de:b5:aa:ff:1d:d6:38:af:26:32:62:0a:35:
                    d3:87:2c:45:0b:64:a3:55:ec:52:43:78:0b:44:64:
                    a1:83:b8:d2:d6:8c:b8:68:09:d1:37:32:22:ea:af:
                    80:08:0f:d0:8a:13:35:27:bb:4f:0b:77:df:38:bf:
                    95:72:03:87:83:a7:af:53:3d:dc:77:fb:31:c0:5b:
                    a0:b6:f3:63:41:43:83:58:da:d7:9a:19:62:bf:c0:
                    4c:6b:38:0f:09:9c:86:26:ca:1c:5a:a5:08:a7:12:
                    51:64:c4:4a:3c:12:53:a9:77:e7:cf:2e:e1:ea:85:
                    cc:e7:cc:79:b6:2b:d2:ab:0a:28:5d:da:60:43:fd:
                    77:65:9d:72:5b:c2:e6:bf:0f:9f:af:ab:c4:a1:bb:
                    ab:49:a2:69:56:f9:63:72:f1:08:28:79:e5:26:3c:
                    b4:7a:00:6b:38:14:38:a9:78:3c:3b:36:36:c6:a5:
                    82:85:78:10:fb:76:36:5d:4b:f5:15:6a:ae:9c:ed:
                    b0:78:de:fc:1c:96:03:f9:78:66:d3:37:59:cd:38:
                    7e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D4:62:AF:E4:92:46:4E:42:58:6C:A2:9A:50:A5:4E:B3:4F:68:75
            X509v3 Authority Key Identifier:
                keyid:AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:87:95:cc:b1:64:20:01:f8:9a:69:f3:34:c1:70:55:c5:d5:
         19:8c:da:c7:9c:a3:e3:44:a2:48:87:17:6f:c8:af:30:65:79:
         64:92:86:84:cf:12:09:4b:af:c1:09:5b:76:76:05:27:23:a6:
         bc:84:43:da:29:6f:9b:e8:b7:08:51:dc:79:8c:61:bc:27:a0:
         59:bf:24:39:a6:8c:96:62:2e:28:64:a9:70:3e:02:36:1d:4a:
         08:7b:5c:de:d8:e2:03:92:1a:53:ab:2b:28:29:75:02:0b:e4:
         d3:c9:68:8a:3a:b1:55:a3:8e:f8:a3:11:eb:c9:61:4e:09:1f:
         1c:44:9c:4e:6c:22:8f:76:c7:c2:76:3b:cd:d2:5e:39:24:72:
         71:c5:b6:6d:57:58:47:09:ac:c1:76:1c:bf:f1:0d:aa:eb:36:
         f8:6f:4a:65:d8:1e:d0:04:aa:e9:20:a9:85:9a:89:14:c4:84:
         b5:75:8a:ee:ea:11:1c:92:02:55:a7:0a:20:7e:cf:c2:eb:42:
         0c:ad:8d:fa:3e:7f:c2:bf:11:26:23:4e:12:e2:f2:31:92:38:
         e7:00:3f:d4:cc:99:bf:df:e6:1a:c9:ce:13:33:6d:a8:35:a3:
         06:74:64:0a:8e:56:d7:da:79:15:dc:48:46:45:42:7d:0a:0c:
         f8:dd:5e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:39:52 2026 by rpki-client