Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
File:                     ufQO9_E-yaFW77DbOWCQvHXanUM.mft (raw, json)
Hash identifier:          DEgodkAN0QKqIjcOMV1BiwjG3YlJEexBzw4AEHd8v2Y=
Subject key identifier:   F0:0D:2D:1D:9A:ED:F0:82:4B:18:22:8A:30:DF:9F:39:28:D1:81:45
Authority key identifier: B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
Certificate issuer:       /CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Certificate serial:       01A116060556116A10F4FE967950150BCF80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
Manifest number:          1A90
Signing time:             Wed 07 Oct 2026 11:00:55 +0000
Manifest this update:     Wed 07 Oct 2026 11:00:55 +0000
Manifest next update:     Thu 08 Oct 2026 11:00:55 +0000
Files and hashes:         1: bYWnNBJ88LbQXbWSQLO05IsIsMk.roa (hash: 8zUO33POztpiVvtW7T3x8U4nLE2YNCP2J0oxQWs2DYg=)
                          2: ufQO9_E-yaFW77DbOWCQvHXanUM.crl (hash: VUxkiHruhEKONkBALB/6gDVPERUqqFZAN2+yVemzeng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 11:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:16:06:05:56:11:6a:10:f4:fe:96:79:50:15:0b:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
        Validity
            Not Before: Oct  7 11:00:55 2026 GMT
            Not After : Oct  8 11:00:55 2026 GMT
        Subject: CN=f00d2d1d9aedf0824b18228a30df9f3928d18145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5d:45:43:f8:e0:1f:cc:e2:05:58:2e:1f:32:
                    1c:54:7b:e8:83:7c:b7:74:22:6f:77:84:42:29:28:
                    9e:5b:96:a4:cf:c6:ee:5d:ef:b8:4d:0e:98:56:5b:
                    cf:78:c9:71:bb:fd:91:de:e4:c2:ef:6f:17:5f:ba:
                    59:65:75:cb:9e:a4:2c:37:80:ec:05:aa:9b:e0:54:
                    d7:e4:38:49:7b:9b:23:aa:88:20:78:ce:50:94:f4:
                    dd:6f:f8:1c:03:55:d0:e1:d5:f5:3e:bd:7e:fe:b8:
                    46:4e:7f:d5:2c:df:f1:29:dd:a3:39:aa:8e:2b:b1:
                    a9:57:a1:38:55:a8:d4:4f:37:73:d2:52:cc:59:20:
                    82:3d:40:18:d5:12:20:05:eb:e5:b7:d0:2b:33:97:
                    9c:ef:6a:24:0b:02:7f:b2:07:e0:8a:94:d4:9d:c1:
                    b6:80:08:f3:0f:cb:8c:82:d3:ec:d3:d6:fd:04:f6:
                    45:77:3a:de:6a:38:6e:a4:20:86:26:53:1d:43:2d:
                    74:99:c5:65:b0:85:ee:24:0d:12:fc:95:47:1f:95:
                    8f:fb:2f:2a:63:fc:99:5c:96:66:a5:d7:74:9d:cc:
                    41:05:9a:81:e8:56:d4:81:66:c3:60:52:f9:96:34:
                    46:af:24:e3:67:3a:9e:66:73:7f:49:dd:ce:f6:3e:
                    65:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:0D:2D:1D:9A:ED:F0:82:4B:18:22:8A:30:DF:9F:39:28:D1:81:45
            X509v3 Authority Key Identifier:
                keyid:B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:b7:3f:92:0a:f2:c9:b2:d9:0a:bf:ee:23:57:39:c8:93:3a:
         86:b0:e3:aa:9e:a4:a6:8a:71:a2:72:37:f6:fd:90:66:3e:63:
         c7:48:86:5b:88:6e:99:74:73:df:bb:19:be:72:84:a5:ed:fc:
         b7:46:22:71:8d:87:81:f7:0d:97:2a:2f:0d:d4:d0:57:f5:7c:
         79:f7:0d:7a:8f:5a:37:39:ee:7e:a1:fe:c1:a1:91:1e:7f:dd:
         23:5b:eb:52:e2:c1:6b:51:a1:15:05:72:2c:d8:7a:b5:bd:40:
         a3:0d:4c:e2:1f:6b:e3:7b:ca:ee:05:6e:38:59:d4:3a:21:ef:
         02:f4:ef:a7:22:b4:7f:c8:dc:79:de:be:ef:0d:0f:54:9e:76:
         c2:40:dc:f6:58:f1:c0:5c:d7:8e:d6:48:c5:54:f0:17:0d:3c:
         32:dc:50:b1:9f:e1:81:52:ed:43:14:1d:9f:2d:99:90:31:0d:
         85:7c:0a:e6:a3:db:0e:58:e7:43:31:53:35:18:38:aa:a7:30:
         88:83:1c:20:9e:ba:56:45:04:c0:5c:03:9b:af:4d:b6:cc:47:
         f5:c4:a7:0f:f6:d8:36:28:c8:6c:63:15:d7:b7:41:24:f4:c2:
         9a:d7:79:3e:ca:60:b7:90:b0:d7:28:2a:ad:42:0b:5b:ae:47:
         ad:6c:71:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 21:00:48 2026 by rpki-client