Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft
File:                     UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft (raw, json)
Hash identifier:          uj4w8mIs+iYg+2xnuSMhU1rskLLl5xA3+Tav8ftHo38=
Subject key identifier:   73:32:91:07:54:17:C7:26:03:98:A2:4D:9F:FF:7B:C1:BE:73:24:CD
Authority key identifier: 53:14:84:D0:DE:03:9F:66:5E:1F:92:CA:B3:11:CF:EB:C5:92:B7:A7
Certificate issuer:       /CN=531484d0de039f665e1f92cab311cfebc592b7a7
Certificate serial:       01A182D12525781C9883FCBC902248EFDFC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft
Manifest number:          04E1
Signing time:             Wed 28 Oct 2026 14:01:46 +0000
Manifest this update:     Wed 28 Oct 2026 14:01:46 +0000
Manifest next update:     Thu 29 Oct 2026 14:01:46 +0000
Files and hashes:         1: UxSE0N4Dn2ZeH5LKsxHP68WSt6c.crl (hash: QcbJIwUJB4B9/JJ1VuLE3ifQK0KaQ10QZzpZ1KqdwSo=)
                          2: id4cne0ADTAlR4kVnZ7TzsVyZd0.roa (hash: STBT1Ri+KbBfmsLxotuYk9/+lHx8/xJxtwJSr3baU/U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 14:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:82:d1:25:25:78:1c:98:83:fc:bc:90:22:48:ef:df:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=531484d0de039f665e1f92cab311cfebc592b7a7
        Validity
            Not Before: Oct 28 14:01:46 2026 GMT
            Not After : Oct 29 14:01:46 2026 GMT
        Subject: CN=733291075417c7260398a24d9fff7bc1be7324cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ba:1b:6d:f7:9b:a2:f6:1a:29:0a:76:47:c5:
                    11:57:68:f1:db:42:05:d8:83:ba:cf:87:99:72:e2:
                    eb:07:67:cf:8f:8b:a1:b6:f2:4f:4b:07:d0:c1:4f:
                    29:87:b7:72:84:dd:13:dd:0e:56:79:f4:55:ba:c3:
                    7d:1d:d9:1c:14:1b:1b:3b:f0:6a:bc:fc:14:a5:75:
                    e0:38:c0:e1:23:56:6e:90:80:98:0d:64:1d:f9:8c:
                    22:38:64:bf:2e:15:ec:3a:42:b8:67:ae:93:6a:53:
                    70:ce:16:3d:3c:9e:4d:ad:1c:a8:71:97:15:e5:8c:
                    80:04:7d:36:d7:cb:1c:d0:78:f7:1c:b8:00:22:95:
                    c3:f7:37:02:57:89:e1:55:e4:33:0d:e9:a6:33:29:
                    5a:4c:d2:f3:d2:be:23:9a:dd:b0:00:71:d1:e1:04:
                    be:9f:84:06:ce:c0:84:4c:2a:9c:a0:b2:eb:da:c7:
                    4d:e4:55:ec:54:c3:94:b3:ef:7c:dc:26:cf:ba:53:
                    85:b4:bd:91:39:ea:78:84:4c:7c:7c:da:30:c2:7a:
                    85:38:45:3f:41:8c:18:3d:a9:33:b2:39:3f:81:9d:
                    11:5a:b1:7c:9b:62:f2:3e:5f:8c:32:dc:78:0b:a3:
                    ad:84:35:c6:79:c8:e8:45:83:6f:64:03:22:4d:84:
                    a6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:32:91:07:54:17:C7:26:03:98:A2:4D:9F:FF:7B:C1:BE:73:24:CD
            X509v3 Authority Key Identifier:
                keyid:53:14:84:D0:DE:03:9F:66:5E:1F:92:CA:B3:11:CF:EB:C5:92:B7:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:ef:35:75:22:f7:a7:0c:4a:a0:e1:68:2c:9f:9a:4c:7b:78:
         16:e1:1f:1b:36:70:78:56:a4:83:d1:99:94:87:c2:a1:fc:d3:
         d1:b1:25:66:f4:9b:96:d8:d7:43:8a:62:2c:2c:67:94:c8:67:
         85:12:cd:42:83:c5:d1:3d:7d:81:53:93:67:52:60:c7:b4:81:
         67:64:a7:62:97:b5:4a:0a:be:91:1b:25:23:0f:5b:11:15:d0:
         41:5b:12:be:99:43:d6:65:a2:64:a9:5e:30:68:17:57:a1:a5:
         6b:91:2c:19:2e:46:f1:ce:e8:f9:19:ab:61:03:da:99:38:05:
         40:dd:02:ca:5b:bd:b0:9d:d5:cc:a1:6f:3d:e4:80:11:f1:bb:
         a0:a8:68:4e:eb:22:5b:f7:27:2e:5f:16:9f:c9:70:74:9f:27:
         51:ea:2e:f9:13:b2:a7:0c:95:5d:06:78:9d:43:a2:7f:7b:1d:
         6d:78:18:ff:62:7a:91:98:21:1f:09:9c:52:ce:36:cf:82:4c:
         9e:29:64:90:39:d8:a8:0e:3a:bc:8c:db:2d:2f:e6:54:f6:52:
         7a:b3:16:08:55:9c:9b:51:51:90:60:4c:a6:84:f8:56:5b:40:
         ca:f3:2c:cb:c8:c4:a0:07:f4:d1:54:15:c7:f2:ff:a0:f4:b1:
         3e:c4:03:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 21:50:52 2026 by rpki-client