Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft
File:                     UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft (raw, json)
Hash identifier:          yqvB7fywQsdKZBvyN0uOnRLsjzLvDIdFsmBszHrqx/s=
Subject key identifier:   64:A5:8D:5B:DB:39:E7:17:D0:DE:34:59:19:97:FD:F3:6F:86:E9:20
Authority key identifier: 53:14:84:D0:DE:03:9F:66:5E:1F:92:CA:B3:11:CF:EB:C5:92:B7:A7
Certificate issuer:       /CN=531484d0de039f665e1f92cab311cfebc592b7a7
Certificate serial:       01A08F7BACACBDB476A11BE56009836DA494
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft
Manifest number:          0463
Signing time:             Fri 11 Sep 2026 08:00:41 +0000
Manifest this update:     Fri 11 Sep 2026 08:00:41 +0000
Manifest next update:     Sat 12 Sep 2026 08:00:41 +0000
Files and hashes:         1: UxSE0N4Dn2ZeH5LKsxHP68WSt6c.crl (hash: YZMi9lPR2kz4dcAUt09tOVmVOQaC5a5GF2C2FKJ0n0o=)
                          2: id4cne0ADTAlR4kVnZ7TzsVyZd0.roa (hash: STBT1Ri+KbBfmsLxotuYk9/+lHx8/xJxtwJSr3baU/U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 12 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8f:7b:ac:ac:bd:b4:76:a1:1b:e5:60:09:83:6d:a4:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=531484d0de039f665e1f92cab311cfebc592b7a7
        Validity
            Not Before: Sep 11 08:00:41 2026 GMT
            Not After : Sep 12 08:00:41 2026 GMT
        Subject: CN=64a58d5bdb39e717d0de34591997fdf36f86e920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3b:2f:3c:0b:0f:d3:66:76:88:b6:e8:65:1d:
                    01:4a:4f:e5:33:ba:e2:fd:60:ee:58:b7:3a:a9:ea:
                    23:33:ac:d5:44:01:fa:9f:f2:ad:5c:54:55:87:e5:
                    a9:1d:09:9e:69:6b:0f:b1:31:5e:37:15:19:9d:53:
                    c6:c4:dc:04:c9:82:9e:8f:8e:99:ca:af:8f:57:b7:
                    b0:5a:0a:9f:90:da:20:03:b9:a4:8d:bc:bc:41:2d:
                    3f:98:c5:61:1d:52:79:7f:39:98:f8:3a:16:0a:05:
                    f7:00:07:46:84:ef:58:b2:bf:51:ea:75:f1:87:41:
                    eb:c2:36:99:0e:12:76:1e:9d:ae:ad:3b:95:9a:71:
                    d7:a7:6f:40:24:6a:db:34:af:d1:51:26:f9:50:de:
                    3b:6a:01:f2:ee:67:4c:14:73:c9:2f:50:9c:1d:d4:
                    e7:a7:d4:0f:36:45:f6:79:35:9e:14:a1:4c:a8:4c:
                    05:6e:2c:1c:d1:61:f0:ef:b7:36:f9:a5:ec:ff:c4:
                    f8:c8:5b:65:16:a3:b4:57:a3:db:6d:b8:9f:2b:01:
                    b4:80:20:7f:1d:18:9c:2b:3f:25:60:ad:b9:d1:e2:
                    9d:c6:0f:82:a1:13:bd:17:5b:4d:b4:7a:12:3e:bb:
                    54:55:f0:3e:26:83:5b:10:21:cc:69:21:a3:a8:9d:
                    d5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A5:8D:5B:DB:39:E7:17:D0:DE:34:59:19:97:FD:F3:6F:86:E9:20
            X509v3 Authority Key Identifier:
                keyid:53:14:84:D0:DE:03:9F:66:5E:1F:92:CA:B3:11:CF:EB:C5:92:B7:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:d5:f9:aa:18:bc:16:ac:94:b8:fc:66:f3:a3:2b:34:6f:20:
         eb:ea:04:95:5c:99:e6:b0:43:02:06:2f:98:f9:7b:26:3e:57:
         1e:66:e6:6f:ad:6e:c6:ab:2c:af:76:2d:3d:a9:13:0c:5f:48:
         67:7f:9e:1d:46:1c:6e:b0:82:9d:4c:76:c1:70:49:11:55:9c:
         24:4b:89:4a:bf:49:10:96:cd:77:96:49:f2:cc:e5:56:95:8c:
         60:e6:22:ba:c6:d1:db:e6:ca:b8:37:8c:a3:fd:a7:05:15:c7:
         e9:6d:38:b4:71:97:c8:d4:5e:f4:a0:ed:2e:93:d2:58:4a:5f:
         73:c5:ca:aa:9c:e2:b6:69:33:76:92:a1:34:78:29:be:2d:b9:
         ef:32:63:aa:8b:a4:20:3c:79:4a:89:65:58:30:00:d1:7c:12:
         da:f4:84:7d:0c:fa:5b:fd:88:bf:2d:65:a8:f7:d6:e0:7f:06:
         f0:cd:6a:23:9d:9f:ed:ae:75:fd:70:87:fd:ce:61:c9:13:42:
         9a:cb:15:fc:58:12:81:95:b4:31:16:8e:a3:ae:d0:00:9a:00:
         42:02:d8:06:ac:93:89:db:0e:bd:45:41:78:a1:97:6b:56:b5:
         e7:af:62:64:1c:89:7d:8d:d8:40:a5:95:3b:85:0b:37:5c:f4:
         f5:32:ab:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:43:33 2026 by rpki-client