Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft
File:                     uF6twuxwsw-kIl7X_NVzDwx7xhY.mft (raw, json)
Hash identifier:          FORcDSChJ0wRDUbv3Sg96+4Ww4GXArNhdCF2Mff8npQ=
Subject key identifier:   92:C8:E7:CB:18:92:82:EC:C8:1D:7F:24:C4:99:DB:CD:2A:54:A0:F0
Authority key identifier: B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16
Certificate issuer:       /CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616
Certificate serial:       01A1310F8BC1D3A9B331FAF7C053B8A23012
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft
Manifest number:          0AEE
Signing time:             Mon 12 Oct 2026 17:01:04 +0000
Manifest this update:     Mon 12 Oct 2026 17:01:04 +0000
Manifest next update:     Tue 13 Oct 2026 17:01:04 +0000
Files and hashes:         1: 8pZUXvACu9QhvKuW-qMjjg-zMpg.roa (hash: 0/gavMRZtZdbhY3KH3ekU0vMqEL7/EvqYK9+J6uWS6E=)
                          2: G-toJfPo5_lPvfgOuGF2O7gK5MU.roa (hash: f/HsVZaK7DlKBZfvaInpx95ilwjwGX/MKV/SRXvYXG8=)
                          3: GSvze0OvgyB86_aIjXE_zYpEcJ8.roa (hash: i0T9AmgsVXvoJ7juXc0u6ILs8JxVxErhczJ27Ywnx4c=)
                          4: WEBxfBgljdO2-_OPHWGZu1V4u-E.roa (hash: nt1blU8jTILJsm/QWLFQx/HjDxyXCoII44gqy3P+yHo=)
                          5: daB6TCjb0g5mJAh5C9L7PP2C3bU.roa (hash: LCCpR6Wg5909zrCuVhiyOKBdbzncNfnlYiYr8mrOsJg=)
                          6: uF6twuxwsw-kIl7X_NVzDwx7xhY.crl (hash: JCOGF3iUrzHZGA2dj/STSHVwUWwotseGGrxSizYg2EU=)
                          7: yvd72ao7oZeloqF7PcjwFXQOaKg.roa (hash: p8n/0jBEU3JxwNl8gzkR0TyAriDfbE7fJ2mPGP83LhU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:31:0f:8b:c1:d3:a9:b3:31:fa:f7:c0:53:b8:a2:30:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616
        Validity
            Not Before: Oct 12 17:01:04 2026 GMT
            Not After : Oct 13 17:01:04 2026 GMT
        Subject: CN=92c8e7cb189282ecc81d7f24c499dbcd2a54a0f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:63:ab:11:66:12:bb:66:cd:64:52:c8:3f:b3:
                    8d:26:20:1f:76:75:22:1c:2a:94:9a:f4:e9:cd:0e:
                    39:c2:b7:a0:37:bf:61:5f:56:ef:89:95:df:9b:8c:
                    8b:5d:41:c2:4c:cf:ff:c3:04:e8:4a:f2:70:b9:a2:
                    c7:40:fc:22:4a:03:2e:7c:07:10:c2:bb:c0:ce:a4:
                    ce:09:a2:f5:95:ce:03:d4:17:45:7d:0e:0f:87:ab:
                    43:85:4a:c1:3c:83:28:ee:59:d8:eb:b3:60:35:ff:
                    bf:0b:de:70:b6:7a:ea:3e:0b:be:9a:60:4e:3a:d3:
                    ac:36:0a:5b:76:9f:77:15:92:98:5f:41:8c:20:92:
                    fe:80:f4:dc:0d:4e:b0:85:48:7f:9e:89:8a:0a:77:
                    d2:2c:dc:4a:12:71:09:72:90:7e:cc:2c:16:7e:e8:
                    7f:c5:ca:0d:b6:89:9e:5c:3a:e8:87:45:44:62:8b:
                    3e:d9:0e:db:db:78:d5:9b:cb:69:da:02:ed:f3:59:
                    97:d6:02:4d:df:53:9a:d2:4d:03:c0:f3:c3:ae:b1:
                    9e:12:07:fc:29:e1:c2:5a:44:7a:a7:b4:8d:29:dd:
                    fa:e3:d6:2e:08:f6:19:df:7e:e0:a3:39:48:6f:d1:
                    80:b7:1c:64:41:cb:34:fc:90:54:97:d8:f3:fa:43:
                    14:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C8:E7:CB:18:92:82:EC:C8:1D:7F:24:C4:99:DB:CD:2A:54:A0:F0
            X509v3 Authority Key Identifier:
                keyid:B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:d2:cd:b5:2d:13:45:75:be:34:0b:44:3e:6e:2c:c7:43:d5:
         4d:38:fb:9c:f8:b5:3d:28:08:02:7d:d4:fa:f2:f7:5e:c4:50:
         70:45:73:cd:a5:c0:7c:b2:37:42:68:9b:2e:7c:48:42:1c:b2:
         fd:09:cc:7d:ec:83:f8:e8:39:44:d7:d3:cc:50:bc:ae:6f:75:
         31:b2:d3:de:f2:41:9c:75:a2:1e:6c:54:15:51:d0:c5:a7:9b:
         a2:88:76:84:f1:77:23:f9:b8:84:6a:94:20:6c:37:1c:d3:b3:
         64:fe:b8:ab:78:f4:0a:34:71:a0:63:e9:cf:ef:b8:6a:e7:3b:
         81:58:5b:45:26:8b:b1:f7:c8:d1:ad:e6:39:58:f8:29:3a:e1:
         64:91:54:6f:c4:01:f3:dc:29:a6:1c:e2:66:e5:aa:c8:a6:de:
         d1:a2:20:9a:38:5a:54:54:e9:33:5c:b0:dc:89:e3:47:3e:ac:
         35:b7:96:07:08:35:7d:e6:a8:8f:01:c4:ae:e8:e4:90:37:fa:
         bb:6d:af:94:5f:4f:e7:4e:bf:a3:30:8a:c8:98:02:13:31:b0:
         87:38:1b:30:82:fa:b8:5f:e1:f9:0a:f0:e5:01:ac:95:82:46:
         f4:2f:a1:8a:d2:f2:e9:a1:98:0d:88:04:74:26:96:3a:ce:5f:
         3f:b4:16:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:24:14 2026 by rpki-client