Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft
File:                     Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft (raw, json)
Hash identifier:          xmcy/RmspPHJffBYB1wLnBkl/8ZkRtKRjZQzgvz9HkE=
Subject key identifier:   97:84:E0:74:22:8F:AB:3A:19:4C:83:1A:8E:99:B2:87:0B:C9:43:5C
Authority key identifier: 52:89:B6:A8:BF:AA:C5:C8:C0:9A:48:C0:42:81:9D:FC:5E:A4:51:04
Certificate issuer:       /CN=5289b6a8bfaac5c8c09a48c042819dfc5ea45104
Certificate serial:       01A06D95AF759929045D4D785F004C5C5418
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft
Manifest number:          1A35
Signing time:             Fri 04 Sep 2026 18:02:01 +0000
Manifest this update:     Fri 04 Sep 2026 18:02:01 +0000
Manifest next update:     Sat 05 Sep 2026 18:02:01 +0000
Files and hashes:         1: Uom2qL-qxcjAmkjAQoGd_F6kUQQ.crl (hash: OfrgHgPIdpUl6lCyfjnC66EIatlZwwBrZ3RxizMJXzs=)
                          2: tszARLbMXBEIxwdiymgQ3NHG6Wg.roa (hash: jAFxokkoCog3haWB8r0ULaLqiqrv63FYz7hJiW/N96w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 18:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:95:af:75:99:29:04:5d:4d:78:5f:00:4c:5c:54:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5289b6a8bfaac5c8c09a48c042819dfc5ea45104
        Validity
            Not Before: Sep  4 18:02:01 2026 GMT
            Not After : Sep  5 18:02:01 2026 GMT
        Subject: CN=9784e074228fab3a194c831a8e99b2870bc9435c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cb:88:ae:8f:b5:75:3c:18:bb:0a:0b:e3:03:
                    a1:f7:60:6d:ca:50:20:95:64:ab:c0:c3:df:ba:a8:
                    23:84:0d:d8:48:d3:6e:19:cf:00:f8:f0:d3:5d:25:
                    bf:a2:45:1d:b4:59:7d:a8:d0:31:50:bb:0e:35:a2:
                    d6:33:b8:e0:f2:de:60:bd:4d:dc:9e:0a:69:d5:f3:
                    21:22:cf:28:3a:f9:7d:d3:06:ce:d3:59:46:83:b0:
                    c1:0c:c7:44:44:b6:6b:7e:2a:c9:c3:4a:80:f8:01:
                    cc:9f:fc:3b:51:5e:39:cf:5f:74:01:16:b2:e1:17:
                    94:0d:bc:42:39:6c:29:dd:98:49:c1:d1:1b:02:47:
                    c6:b3:64:13:7c:35:1b:b7:5a:40:5a:bd:38:96:81:
                    49:96:14:d1:52:4a:fb:c0:86:da:5e:7c:fb:f7:a1:
                    be:2e:d8:24:45:7d:e3:cd:6f:cb:1a:85:4e:68:a4:
                    9b:94:44:31:31:26:e1:66:cb:c5:11:30:52:0d:40:
                    59:f4:35:62:31:49:97:33:df:12:d1:1f:32:24:ac:
                    62:33:cf:d6:7c:9f:70:d6:6d:01:4e:32:1c:53:90:
                    8f:fe:54:fe:f4:e2:8f:0a:ce:db:6a:c3:6e:e9:16:
                    b8:e2:db:65:d7:f8:fa:17:73:65:60:58:fe:6a:0a:
                    ae:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:84:E0:74:22:8F:AB:3A:19:4C:83:1A:8E:99:B2:87:0B:C9:43:5C
            X509v3 Authority Key Identifier:
                keyid:52:89:B6:A8:BF:AA:C5:C8:C0:9A:48:C0:42:81:9D:FC:5E:A4:51:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:83:26:3c:fc:29:78:c3:8a:4e:64:71:29:a3:19:d5:b4:f5:
         e9:59:7b:04:71:0f:a3:0f:a9:ce:6f:5b:a4:17:9c:3f:47:9b:
         24:f3:a1:5d:70:99:45:6f:61:6a:ba:aa:bf:e6:b7:21:44:ba:
         5a:49:48:01:a8:98:72:9e:78:23:1e:25:b6:d0:42:6e:2a:75:
         ed:e2:51:f9:82:5d:f2:6a:c8:28:55:5c:98:76:6e:d7:4e:3e:
         68:66:f4:35:ed:2e:7f:32:3b:1c:54:6e:7f:84:6c:03:56:4f:
         8f:ac:50:1e:07:61:30:e9:84:26:2f:80:ef:2d:47:e9:72:26:
         fe:5c:fc:b1:3d:01:0a:77:fc:62:2b:24:5c:9c:26:3e:19:e4:
         24:ec:78:24:65:fe:1e:71:6d:d4:3e:8c:26:92:88:e2:28:2c:
         b1:f4:8a:56:73:3b:ae:64:81:77:9e:1a:4c:12:1b:db:82:9f:
         dd:32:be:c5:e4:f4:7f:bf:f1:ef:80:58:05:fe:ce:b6:22:ec:
         80:87:be:43:5f:14:e5:01:16:29:30:bb:2e:7e:bf:03:d1:54:
         b2:00:d2:62:73:db:b9:77:66:96:41:12:08:42:89:7a:de:e7:
         47:c2:fa:6f:8a:63:05:3a:2f:f0:19:08:fd:d8:27:ae:87:7a:
         2a:1e:27:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:38:02 2026 by rpki-client