Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
File:                     U9To6fSiMLDlaFh2X3EwrNNOni0.mft (raw, json)
Hash identifier:          s6MBSSOxCCu6zMqadhzzqB6F46JYcViSlsur3pmgA7w=
Subject key identifier:   2E:89:11:91:DA:96:06:88:18:61:C9:4E:8F:F2:D9:03:18:16:E8:46
Authority key identifier: 53:D4:E8:E9:F4:A2:30:B0:E5:68:58:76:5F:71:30:AC:D3:4E:9E:2D
Certificate issuer:       /CN=53d4e8e9f4a230b0e56858765f7130acd34e9e2d
Certificate serial:       01A06EA7FA9CF6FDBA1268F57A21418AF676
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U9To6fSiMLDlaFh2X3EwrNNOni0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
Manifest number:          0226
Signing time:             Fri 04 Sep 2026 23:01:37 +0000
Manifest this update:     Fri 04 Sep 2026 23:01:37 +0000
Manifest next update:     Sat 05 Sep 2026 23:01:37 +0000
Files and hashes:         1: KstXJBTU9_95RgYAGgk0ocTiAAk.asa (hash: 1aWyFNHfdiDQ+9mjEacvi8VKbddcwrT5VsWI5r5oY/w=)
                          2: O860BZXE4oCrVhgqCDhjxlkYiZY.roa (hash: WAAeKTz5adCSs3a4JZFRxzoY1WO2G1GDA+qRkP/2UHM=)
                          3: U9To6fSiMLDlaFh2X3EwrNNOni0.crl (hash: g6Isa3RNFhOzsep5ZJeYgsDQ81NwDvlRv0CEnSi+2ps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U9To6fSiMLDlaFh2X3EwrNNOni0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:a7:fa:9c:f6:fd:ba:12:68:f5:7a:21:41:8a:f6:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d4e8e9f4a230b0e56858765f7130acd34e9e2d
        Validity
            Not Before: Sep  4 23:01:37 2026 GMT
            Not After : Sep  5 23:01:37 2026 GMT
        Subject: CN=2e891191da9606881861c94e8ff2d9031816e846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:54:7f:e0:c1:81:99:4b:db:87:7c:e6:d4:c4:
                    02:4d:78:e6:5e:f3:de:2f:46:ec:82:db:c1:27:54:
                    61:ca:04:e1:72:08:1c:b5:40:2f:37:bb:92:3f:8f:
                    d9:c2:0f:23:32:ac:f4:9f:1a:9e:5a:84:fa:81:52:
                    b2:dd:ca:f7:c9:05:d9:8f:10:3d:4c:44:d0:74:5f:
                    40:cd:07:f3:fc:08:30:64:f9:56:47:a4:b2:06:0d:
                    bc:90:ee:ef:05:b4:b2:c7:3f:6f:10:ae:97:7d:a3:
                    cd:3c:1a:b9:22:8b:c5:74:59:d1:87:de:0d:51:58:
                    6d:fa:cd:dd:61:69:56:04:df:76:fd:f7:89:a6:ac:
                    9e:a7:c5:ed:13:d4:88:a8:5c:f0:8f:7c:81:54:bf:
                    b0:22:ad:2d:28:53:ff:e0:64:44:ea:42:77:f6:20:
                    13:e6:0d:1d:8b:ed:9a:e5:46:6d:bb:5f:b0:d7:70:
                    88:2e:04:59:d8:34:cb:90:19:93:ad:5e:12:b7:52:
                    ac:6c:e5:e0:f6:41:4c:08:f6:3b:28:7d:28:72:71:
                    34:51:5e:e0:d4:dd:76:3d:b4:b3:55:c9:f4:27:1e:
                    27:ab:42:8b:57:23:a6:bc:1b:9d:ce:32:61:27:d2:
                    fb:09:3d:8f:05:be:85:7a:c2:75:b0:cf:b6:18:28:
                    b3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:89:11:91:DA:96:06:88:18:61:C9:4E:8F:F2:D9:03:18:16:E8:46
            X509v3 Authority Key Identifier:
                keyid:53:D4:E8:E9:F4:A2:30:B0:E5:68:58:76:5F:71:30:AC:D3:4E:9E:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9To6fSiMLDlaFh2X3EwrNNOni0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:55:6e:77:4c:ab:9b:7b:f6:88:a1:66:76:f4:35:38:58:9f:
         e2:9c:b8:da:fb:d4:51:f3:11:ff:b6:e6:23:82:90:75:91:2c:
         70:d4:b1:55:1a:c1:d3:db:65:cc:de:2d:1a:11:f1:25:37:6f:
         75:c6:48:6c:05:d6:ec:ce:e2:18:e0:dc:43:5e:a0:4f:51:bb:
         a8:d9:6c:ba:2e:2b:cb:63:d8:54:b4:e8:c0:33:c3:b2:8c:f6:
         59:5a:7d:e1:63:67:16:75:f4:5e:43:71:09:8e:1e:fe:b8:a6:
         56:2c:6a:27:03:e7:eb:e0:a2:a4:97:fd:de:c3:7b:17:7a:cf:
         df:e0:f6:92:3d:f2:7b:78:9b:44:c0:c9:a1:7c:3b:c3:6e:fe:
         44:d5:f1:f6:a0:7e:89:0c:c6:61:80:7f:39:6a:54:06:71:f9:
         66:3c:04:ab:72:63:5b:01:04:dd:4d:2a:16:a9:db:16:7c:6f:
         84:c0:6a:41:96:35:27:16:37:d6:27:4d:42:09:a3:4a:46:71:
         03:1b:e0:0b:14:85:77:5e:30:ad:6d:1c:1c:bf:9f:54:4f:a7:
         3b:19:04:f3:14:75:f7:05:78:d8:1e:88:3d:03:51:eb:59:de:
         bc:7f:4c:d2:28:db:99:4c:27:ba:be:ad:e7:97:71:0b:3b:94:
         de:e2:f5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:24:18 2026 by rpki-client