Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uRaWqBwLoeYdDrr6bchCXD4eA5E.mft
File:                     uRaWqBwLoeYdDrr6bchCXD4eA5E.mft (raw, json)
Hash identifier:          PiyIg1i7NIMzX6bnj3TgvcGu8ZXbel2LOC8zhJJeeFw=
Subject key identifier:   00:14:3F:E7:4F:F0:87:88:2C:A5:4B:99:92:52:18:D3:C6:36:9C:D5
Authority key identifier: B9:16:96:A8:1C:0B:A1:E6:1D:0E:BA:FA:6D:C8:42:5C:3E:1E:03:91
Certificate issuer:       /CN=b91696a81c0ba1e61d0ebafa6dc8425c3e1e0391
Certificate serial:       01A08C7B2A759C9A9ADEE1E45B90E404C0F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRaWqBwLoeYdDrr6bchCXD4eA5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uRaWqBwLoeYdDrr6bchCXD4eA5E.mft
Manifest number:          C2
Signing time:             Thu 10 Sep 2026 18:01:17 +0000
Manifest this update:     Thu 10 Sep 2026 18:01:17 +0000
Manifest next update:     Fri 11 Sep 2026 18:01:17 +0000
Files and hashes:         1: HB0wEFHQqsznJtHWSGVIy1HtmU0.roa (hash: PxSsjONzT5IwaZEdbpKBuHVjcUMFikrQ+hvBI+yX+F4=)
                          2: uRaWqBwLoeYdDrr6bchCXD4eA5E.crl (hash: scAgCWGsq/j24Ly9c8Ug3M1DVxKncMCqXjbyyrnwhAU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uRaWqBwLoeYdDrr6bchCXD4eA5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uRaWqBwLoeYdDrr6bchCXD4eA5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRaWqBwLoeYdDrr6bchCXD4eA5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 18:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:7b:2a:75:9c:9a:9a:de:e1:e4:5b:90:e4:04:c0:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b91696a81c0ba1e61d0ebafa6dc8425c3e1e0391
        Validity
            Not Before: Sep 10 18:01:17 2026 GMT
            Not After : Sep 11 18:01:17 2026 GMT
        Subject: CN=00143fe74ff087882ca54b99925218d3c6369cd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d3:f0:31:d7:80:b5:89:8f:71:98:64:3b:2b:
                    ea:42:3c:66:77:ef:23:d8:8e:92:71:52:74:98:fc:
                    85:a2:66:9b:43:e2:91:9e:19:ab:6e:12:5d:ea:0d:
                    64:8e:d1:ac:c5:05:6b:cc:4a:be:43:c9:e0:8b:18:
                    0e:84:81:5f:5b:f6:ee:8b:7d:38:6d:47:ea:3f:29:
                    03:eb:46:03:dc:ef:05:b0:26:9c:f0:ba:f9:de:2d:
                    46:65:b8:c8:14:69:7f:df:17:cc:92:e8:c1:04:ce:
                    bf:f7:9a:5d:75:2d:1f:91:ba:7c:86:7d:31:91:ab:
                    53:85:dc:28:00:85:cc:6f:aa:ad:34:1f:91:fa:95:
                    de:f4:f4:39:49:5d:95:39:c7:cc:8d:ad:e7:4b:eb:
                    4d:74:1d:d7:09:5c:b9:a4:0f:9f:d1:11:07:61:63:
                    70:84:1c:77:b3:3b:14:9d:88:2d:89:0d:5b:a1:41:
                    b1:64:a1:a8:0b:0f:67:1a:45:6e:bf:f4:b4:db:e2:
                    b8:2b:cb:c9:25:6d:1b:64:af:b1:30:0f:20:36:46:
                    f4:4a:6f:13:be:10:7e:f2:12:df:2d:3c:fd:47:f7:
                    ca:d1:44:8c:eb:d7:ab:e2:20:0c:a2:95:fc:17:e1:
                    a0:46:66:21:a8:9e:d9:d4:e0:5a:99:25:55:cb:71:
                    bc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:14:3F:E7:4F:F0:87:88:2C:A5:4B:99:92:52:18:D3:C6:36:9C:D5
            X509v3 Authority Key Identifier:
                keyid:B9:16:96:A8:1C:0B:A1:E6:1D:0E:BA:FA:6D:C8:42:5C:3E:1E:03:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRaWqBwLoeYdDrr6bchCXD4eA5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uRaWqBwLoeYdDrr6bchCXD4eA5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uRaWqBwLoeYdDrr6bchCXD4eA5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:86:11:42:05:cb:b2:db:96:be:f4:fa:ec:bd:fc:e6:ec:02:
         e4:91:78:6f:1d:3d:08:0e:bf:04:7a:bc:3b:10:c4:a3:0b:81:
         02:e9:92:e6:7a:d0:70:56:7f:3c:54:4b:1e:c5:f6:b0:19:c3:
         0c:02:20:c4:78:cd:ee:7f:14:17:fb:d8:56:8e:b3:36:bb:e2:
         a2:59:9e:ba:a6:90:87:e3:38:09:46:0a:1d:2c:6e:80:ec:e9:
         11:bd:b9:c2:03:ac:d7:23:e7:33:01:28:17:7d:b9:cf:6e:38:
         6e:67:02:a4:39:dc:a3:f3:ff:cf:6c:49:cc:63:3b:e7:fd:6f:
         95:11:cf:bc:a8:4e:86:63:da:04:b1:c5:21:ce:61:a1:fd:69:
         dd:12:86:c4:25:de:61:44:5d:f2:18:b8:13:a2:8c:ed:c5:4d:
         40:9a:49:fb:59:38:0f:b2:02:f0:a1:b8:04:87:04:75:0b:75:
         b9:19:9f:94:f9:1b:4e:8e:b4:11:1f:2c:3f:0f:88:44:0b:d6:
         16:34:22:94:46:99:c9:a9:6d:58:8f:df:50:2a:ee:1a:cc:50:
         b0:7c:6b:15:3c:d8:29:f0:6b:04:cc:5a:2e:a7:71:5d:85:93:
         fe:b9:2b:11:c4:6c:5a:29:1a:44:1c:60:30:90:f6:d1:89:35:
         db:53:29:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:45:34 2026 by rpki-client