Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/uwdfqgqHRVxcAiqQrUXyxfPPkhI.mft
File:                     uwdfqgqHRVxcAiqQrUXyxfPPkhI.mft (raw, json)
Hash identifier:          1SXmA56wTtIjK9N2eTltZoFmj1Pqzi7H/sNi+Qk71Fo=
Subject key identifier:   16:2C:68:F0:9F:B6:A4:7E:F8:73:D7:FD:85:F6:A4:30:A4:78:4F:A9
Authority key identifier: BB:07:5F:AA:0A:87:45:5C:5C:02:2A:90:AD:45:F2:C5:F3:CF:92:12
Certificate issuer:       /CN=bb075faa0a87455c5c022a90ad45f2c5f3cf9212
Certificate serial:       01A1931EB79BF45C03BAEF99CF8ACEADAEE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uwdfqgqHRVxcAiqQrUXyxfPPkhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/uwdfqgqHRVxcAiqQrUXyxfPPkhI.mft
Manifest number:          014A
Signing time:             Sat 31 Oct 2026 18:00:26 +0000
Manifest this update:     Sat 31 Oct 2026 18:00:26 +0000
Manifest next update:     Sun 01 Nov 2026 18:00:26 +0000
Files and hashes:         1: DPKvWUzJG61KaC68guvLxBEpIxs.roa (hash: WEuAb6V00NYiqaQluRZ4bK9gn9Tpjn8DHunrHwop33c=)
                          2: uwdfqgqHRVxcAiqQrUXyxfPPkhI.crl (hash: l8FUc5d/pKdfX8X9hsjWDV4K1YkYsy6qrrVAxkwPfyc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/uwdfqgqHRVxcAiqQrUXyxfPPkhI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/uwdfqgqHRVxcAiqQrUXyxfPPkhI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uwdfqgqHRVxcAiqQrUXyxfPPkhI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:93:1e:b7:9b:f4:5c:03:ba:ef:99:cf:8a:ce:ad:ae:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb075faa0a87455c5c022a90ad45f2c5f3cf9212
        Validity
            Not Before: Oct 31 18:00:26 2026 GMT
            Not After : Nov  1 18:00:26 2026 GMT
        Subject: CN=162c68f09fb6a47ef873d7fd85f6a430a4784fa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d7:ca:68:a4:31:74:3e:86:6f:42:27:87:a1:
                    d0:8b:bc:66:b7:2a:bf:b2:35:4c:5a:5a:de:25:ee:
                    c6:73:e7:3e:70:cd:fe:7e:3a:09:1a:50:45:8e:c6:
                    fa:6d:97:63:fd:77:25:e4:71:2f:35:0f:2d:f7:9e:
                    67:f4:88:3f:53:22:a7:ce:14:f9:a5:e4:46:89:5e:
                    15:8d:68:ab:1b:f5:62:9d:bf:9b:3f:b7:f5:5d:31:
                    ad:b8:c7:4b:b8:3c:7a:03:fe:ec:89:0c:75:db:bc:
                    79:1c:d3:78:dc:86:0f:2a:a6:e8:ab:f2:11:5c:96:
                    af:29:3b:e4:e6:24:f0:d5:85:9c:fe:ad:01:41:10:
                    5b:84:09:11:52:0e:4a:30:cf:a5:99:b8:5d:44:80:
                    80:f7:9b:e1:dc:65:05:92:0f:6b:10:a0:6f:82:4b:
                    7d:bf:df:22:22:84:0d:24:7f:e7:bc:7c:dd:ab:f9:
                    88:d4:3b:51:22:10:71:d3:09:1f:85:d4:89:56:de:
                    7e:03:13:49:d5:65:c8:f6:b4:e4:5a:6b:1b:84:11:
                    14:2a:a1:6e:0f:ad:80:63:ca:74:df:f1:f4:aa:8c:
                    74:f1:7d:e8:eb:62:35:c6:dd:a9:a3:65:c1:77:83:
                    86:a2:e9:c3:14:ad:b0:19:5d:c8:38:a6:48:fe:20:
                    04:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2C:68:F0:9F:B6:A4:7E:F8:73:D7:FD:85:F6:A4:30:A4:78:4F:A9
            X509v3 Authority Key Identifier:
                keyid:BB:07:5F:AA:0A:87:45:5C:5C:02:2A:90:AD:45:F2:C5:F3:CF:92:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uwdfqgqHRVxcAiqQrUXyxfPPkhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/uwdfqgqHRVxcAiqQrUXyxfPPkhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/uwdfqgqHRVxcAiqQrUXyxfPPkhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:5c:42:07:2d:f6:31:92:65:b0:bb:c9:b2:53:e2:c9:24:46:
         b5:55:c2:d4:04:08:04:1e:bc:2a:62:c1:5e:42:cd:8e:ea:30:
         fe:37:4f:e9:8c:bf:85:a9:76:2a:8c:cb:8e:52:46:b7:15:29:
         cc:85:b5:25:42:38:34:30:7c:0e:93:eb:1c:ec:8b:fe:ce:a9:
         9a:ba:7a:e2:74:e5:c1:d1:43:92:d4:02:99:b0:b5:5f:45:fd:
         dd:15:64:b5:d3:fd:ac:60:2f:fe:fa:7f:a8:26:63:ba:ab:e0:
         c6:0f:5d:2d:30:3b:0b:82:b6:b7:bf:bf:77:2a:42:df:88:41:
         8b:3b:1c:eb:c2:e2:d0:9c:fc:d2:a9:a7:c0:cc:dc:e8:4b:5f:
         f9:9d:db:42:63:18:92:4a:bc:83:c6:84:df:24:aa:7e:aa:8a:
         c6:07:2c:52:8c:da:02:ff:19:19:b0:84:e4:62:c6:a5:0a:69:
         ed:91:54:4a:1e:34:79:07:3b:20:2c:98:fe:4d:15:d3:90:2e:
         2d:23:78:eb:b4:0c:d8:14:85:08:39:96:aa:f4:70:4a:e0:97:
         ae:98:46:7f:38:7d:de:50:e9:f6:73:8b:04:7f:b8:d6:4f:80:
         35:90:8f:13:cc:6f:5a:5b:91:98:03:f3:ee:a7:8c:c8:64:3f:
         26:0b:b3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 02:11:14 2026 by rpki-client