Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft
File:                     UyQUSSuyz6QI_1c6oGj8-aXneO4.mft (raw, json)
Hash identifier:          VeYS1vhO5tYClxr/3+8Tym/flUpcArtPYBNYg9ooPqQ=
Subject key identifier:   A0:FB:CE:77:50:F3:48:95:70:BA:FC:7E:37:84:63:5B:3C:21:2D:18
Authority key identifier: 53:24:14:49:2B:B2:CF:A4:08:FF:57:3A:A0:68:FC:F9:A5:E7:78:EE
Certificate issuer:       /CN=532414492bb2cfa408ff573aa068fcf9a5e778ee
Certificate serial:       01A08C4425BCBB8CB8539335BEA9EAD75163
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UyQUSSuyz6QI_1c6oGj8-aXneO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft
Manifest number:          1399
Signing time:             Thu 10 Sep 2026 17:01:11 +0000
Manifest this update:     Thu 10 Sep 2026 17:01:11 +0000
Manifest next update:     Fri 11 Sep 2026 17:01:11 +0000
Files and hashes:         1: 1-vw_YpjLtL2osMGBDqhaMbBPjy0.roa (hash: y1eYYcI99eIq1QFUMBnmXcbeI9owv4tyUVDJFPBTheQ=)
                          2: UyQUSSuyz6QI_1c6oGj8-aXneO4.crl (hash: /ePcdSo8kiw1S76dDWwreX3ziH3Qtbc/wIK8/8AK43g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UyQUSSuyz6QI_1c6oGj8-aXneO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:44:25:bc:bb:8c:b8:53:93:35:be:a9:ea:d7:51:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=532414492bb2cfa408ff573aa068fcf9a5e778ee
        Validity
            Not Before: Sep 10 17:01:11 2026 GMT
            Not After : Sep 11 17:01:11 2026 GMT
        Subject: CN=a0fbce7750f3489570bafc7e3784635b3c212d18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:39:4d:ab:0f:1a:da:2c:84:0f:75:e9:31:72:
                    d9:ce:7c:54:bf:a9:95:96:38:07:73:47:b0:60:ae:
                    91:16:46:b7:3c:2f:f6:d1:16:77:8a:0c:1c:3b:61:
                    51:67:67:fc:1b:13:1d:ef:05:16:92:58:f1:bc:14:
                    36:e7:3b:90:50:79:65:a1:a5:e3:27:58:11:e7:c5:
                    e1:26:ac:1a:85:34:ad:8e:16:9d:cc:7e:7a:7d:22:
                    b1:0e:12:44:79:5f:75:b7:5d:50:bf:2d:79:77:f6:
                    46:46:52:33:91:09:4f:af:04:3d:60:e2:fc:b9:0a:
                    79:45:cc:89:14:a9:54:6f:f0:79:c8:7f:df:7d:63:
                    66:e6:9b:5e:e9:37:9c:9e:26:88:e3:01:ee:42:73:
                    1b:b1:c3:c2:eb:2e:86:49:73:e7:1e:8f:a1:6c:8a:
                    9d:20:4f:ab:69:0f:ea:bb:14:cd:f3:52:50:87:cf:
                    7e:e6:ec:55:1d:33:8c:08:4f:91:be:5b:40:37:32:
                    22:91:75:28:34:f6:1b:57:d3:06:49:84:43:c7:21:
                    6c:ce:2e:74:5c:27:ba:4d:1b:84:cd:cc:6d:35:42:
                    14:72:d6:02:9f:fe:d2:19:ad:d8:9d:5e:d0:0f:0f:
                    17:9f:29:3e:7e:9b:40:78:69:04:d5:a0:d8:71:4e:
                    2a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:FB:CE:77:50:F3:48:95:70:BA:FC:7E:37:84:63:5B:3C:21:2D:18
            X509v3 Authority Key Identifier:
                keyid:53:24:14:49:2B:B2:CF:A4:08:FF:57:3A:A0:68:FC:F9:A5:E7:78:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyQUSSuyz6QI_1c6oGj8-aXneO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:b0:d5:6b:3c:6c:10:56:63:a9:d3:93:1f:0d:4c:d3:b3:d4:
         da:a5:a1:f2:e3:3f:b9:1f:72:da:b8:3a:87:2f:3e:90:77:e0:
         de:03:f8:4d:24:25:2f:c2:84:f2:54:d9:3e:59:e3:34:6b:6c:
         19:93:48:ae:59:8a:55:67:42:cd:04:ae:30:5c:10:01:b2:e6:
         6f:6f:d8:e5:d2:86:f3:f9:89:08:c5:05:34:dc:85:1c:3f:d3:
         cf:e8:3d:cd:31:3e:6b:9a:c4:3d:12:ee:48:4a:6e:55:13:8e:
         ed:9d:d6:57:c0:84:c8:b0:c0:c1:97:d2:00:f5:43:9e:52:0f:
         1c:b9:5c:28:af:fe:06:a3:d3:2b:1c:dd:d8:f9:ae:90:11:e7:
         5e:51:ae:1c:7a:2a:ca:8e:39:bf:49:89:94:77:d2:07:2a:98:
         ef:71:dc:19:f6:0d:61:36:01:09:2a:40:3a:c2:fb:a2:a9:b5:
         97:a8:32:a9:1d:3d:7d:fb:c0:19:63:2f:64:77:1a:6a:9d:1d:
         0b:f7:0a:4a:85:9d:d9:c4:e9:5c:c0:09:9a:07:34:c3:45:5c:
         ab:0a:bd:78:73:21:43:3f:fd:22:ad:03:12:cc:e4:75:d3:55:
         c7:a3:9c:92:20:6b:b8:84:7b:31:44:84:23:42:d8:6f:79:8c:
         65:4e:51:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:15:48 2026 by rpki-client