Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
File:                     uBuyG1wYiQMNNlpUnyHVtCb53ag.mft (raw, json)
Hash identifier:          H3ldtgfF0jNTTY7OY1rydtmPc+SO9aRAwX/DglBxp9E=
Subject key identifier:   AB:A3:94:51:20:F8:21:14:52:45:7D:78:57:78:B0:37:4E:53:15:F5
Authority key identifier: B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
Certificate issuer:       /CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Certificate serial:       01A11605EA881BCAC4D46E1E1B0EFA7ABB2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
Manifest number:          110D
Signing time:             Wed 07 Oct 2026 11:00:48 +0000
Manifest this update:     Wed 07 Oct 2026 11:00:48 +0000
Manifest next update:     Thu 08 Oct 2026 11:00:48 +0000
Files and hashes:         1: aVdPfU4dss32Ry8yMEI__necPPw.roa (hash: dEwEWAPf2LGlFYLBWr0q6EXerCJ3GpMpvQYiCO1t82Q=)
                          2: i_2ZzMu3wvr5fPJXtrh3ZZ0VWPY.roa (hash: Pv2BiLhGzzZYh+rTS0GF7L9S2emxKMywXwopnvCEbWo=)
                          3: uBuyG1wYiQMNNlpUnyHVtCb53ag.crl (hash: Mi0u2mDhvOrB+y2DVTha2RhkFIPAk+qBzltpnz+q6IM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 11:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:16:05:ea:88:1b:ca:c4:d4:6e:1e:1b:0e:fa:7a:bb:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
        Validity
            Not Before: Oct  7 11:00:48 2026 GMT
            Not After : Oct  8 11:00:48 2026 GMT
        Subject: CN=aba3945120f8211452457d785778b0374e5315f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c1:6e:4b:1a:d9:e0:d6:1b:6c:8d:74:1b:8a:
                    03:b6:37:ad:46:7c:ef:c1:59:2e:f6:45:09:91:ab:
                    23:da:68:94:b3:11:c4:c8:82:fa:72:0a:4c:f8:5d:
                    c9:69:ad:2b:14:83:c3:bd:4e:40:63:92:cc:86:e7:
                    fb:37:3f:36:3e:6f:ca:08:fa:45:e2:73:9c:80:4e:
                    8d:98:af:73:38:4a:57:4b:85:ad:7f:4e:8f:7e:19:
                    ad:4a:24:ae:1d:99:69:3e:ea:29:25:91:c7:f2:84:
                    dc:99:ac:13:8d:6a:c0:50:f9:f1:df:73:78:4a:df:
                    50:e0:db:49:5e:0d:df:ae:80:8d:54:f8:c8:9b:8c:
                    10:83:db:86:b2:3d:d0:18:26:f4:31:9f:b6:b9:14:
                    d1:94:f7:d0:47:34:02:8e:19:5b:89:a3:63:01:65:
                    80:b9:77:2f:61:be:32:6c:00:2c:8d:54:fb:b6:7a:
                    33:22:68:c5:80:99:6b:2e:01:67:4e:63:0f:ee:29:
                    d8:a7:da:b5:48:da:b3:c0:3b:e5:e9:0f:cb:5a:0a:
                    42:fb:d4:dc:04:55:b8:bd:78:2b:ad:99:dc:92:ba:
                    b7:e9:4c:53:9c:8c:dc:72:c8:97:47:7f:9b:66:c8:
                    1b:7d:47:d8:90:fb:2b:d0:ab:8d:e9:a0:db:69:4c:
                    fd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A3:94:51:20:F8:21:14:52:45:7D:78:57:78:B0:37:4E:53:15:F5
            X509v3 Authority Key Identifier:
                keyid:B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:60:cc:ca:2f:d3:84:21:58:07:a7:aa:30:d2:f5:fb:d7:d1:
         27:60:76:f0:43:e3:e1:a1:dd:a9:1a:1d:ab:6c:6b:cb:86:ca:
         18:fc:0e:26:77:1f:ab:01:1f:51:1e:25:b1:be:56:30:ae:c2:
         87:fe:97:a0:4a:7a:85:84:ae:7b:a6:48:5e:a4:42:2e:3d:ce:
         a8:d9:c3:7f:4c:cc:6d:eb:41:37:3f:ef:7b:6f:2a:bb:fa:4a:
         40:41:58:bb:5e:43:9c:20:d5:2b:fb:29:b8:24:7a:ca:a0:22:
         3e:3d:4f:40:0a:26:9e:8d:f1:03:ce:9b:ee:30:fa:9a:45:23:
         37:5b:f9:cb:60:cc:d4:bc:6b:62:a1:7c:a6:44:a7:81:4a:8e:
         49:3b:6e:91:d4:ff:80:d4:99:68:0a:a1:d1:8a:1e:15:17:63:
         a7:3c:1d:09:de:0a:13:82:fd:30:12:e2:5b:38:3b:be:6c:9c:
         5f:70:6b:8c:35:2d:b9:8e:7a:ad:3b:e5:e8:12:bf:fb:23:92:
         68:83:a7:96:d5:4c:76:57:69:aa:ce:07:0a:97:d1:86:32:a6:
         8f:c8:0f:2c:60:74:9a:79:94:b4:54:0f:9e:d4:93:f9:6b:f7:
         bf:d1:72:9b:9a:bc:be:44:62:58:fb:b0:2c:03:dd:65:27:17:
         67:88:6a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 23:03:29 2026 by rpki-client