Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
File:                     UNpYj16aHCr1a-CPfmosmYGrYCY.mft (raw, json)
Hash identifier:          yK6m++EL7GDzw+JVrAVoS9WsBTU7jNk6X8U/5l5OqKw=
Subject key identifier:   27:5C:D4:D6:23:CA:C6:1D:E4:58:61:48:98:21:AE:C7:27:CD:0E:FC
Authority key identifier: 50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
Certificate issuer:       /CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Certificate serial:       01A170CA32497BEA5CA59F61FDB733CC4342
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
Manifest number:          0F2B
Signing time:             Sun 25 Oct 2026 02:01:01 +0000
Manifest this update:     Sun 25 Oct 2026 02:01:01 +0000
Manifest next update:     Mon 26 Oct 2026 02:01:01 +0000
Files and hashes:         1: UNpYj16aHCr1a-CPfmosmYGrYCY.crl (hash: i5FfTWWs3v9HkRcfphlWoKj8JpOK+/XklnaT29HSDOk=)
                          2: e-at-P8xiBcITaRp9MWoA0_N7Yc.roa (hash: 9wLByEu5Ei2XqfeNnvQ5SxG/GiSaQBkbBEsIrzP6Rl8=)
                          3: uB1EV_9of9OBUO5nh6wjIcM7XYM.roa (hash: JxjVwCsJHpCurdGu1ulwE9pvdYXZMK7HdluGzn2poh0=)
                          4: zGkoogpOSV7OrRFE8ZxQlbFMmf0.roa (hash: Lv+rOmGoTKRisbrnO2jtdKQEexKh+o81CnIGv9g18ac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 23:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:70:ca:32:49:7b:ea:5c:a5:9f:61:fd:b7:33:cc:43:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
        Validity
            Not Before: Oct 25 02:01:01 2026 GMT
            Not After : Oct 26 02:01:01 2026 GMT
        Subject: CN=275cd4d623cac61de45861489821aec727cd0efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ac:af:c6:97:70:ef:c7:b3:d5:25:f3:44:d0:
                    f7:fd:43:03:e0:0d:1c:7f:0b:4e:0f:4f:12:a1:fe:
                    96:52:a8:84:33:d7:68:ab:c7:f9:bb:8d:57:7c:a4:
                    0f:15:5e:51:87:c7:0b:d5:f2:9b:1e:6c:eb:55:b6:
                    ab:92:7e:53:1f:13:21:ac:8e:ce:47:a2:63:9b:96:
                    f3:99:6b:5b:41:81:20:66:5c:cc:41:fe:ee:12:7c:
                    83:46:c2:95:38:b9:38:a0:0b:69:00:7c:b9:08:35:
                    59:2b:64:3f:2a:24:c7:ad:5b:1f:0b:d1:a8:9f:3e:
                    e2:8a:3d:ec:cf:2e:e4:43:12:95:9a:18:0e:29:3a:
                    dd:f0:4e:e6:2c:fa:b5:38:d5:93:e1:2a:bd:46:a0:
                    85:03:65:04:00:9e:9e:eb:62:37:ce:b7:16:28:3b:
                    4b:c7:ab:25:4f:cc:4b:7d:2f:6a:3b:22:5a:4f:2f:
                    a3:e8:25:b8:2b:fb:eb:f0:26:19:ed:2b:e2:a8:58:
                    b0:cf:34:12:46:ac:89:77:4c:70:a5:3b:68:7b:10:
                    33:7f:11:98:ac:64:e0:cd:43:fb:cf:bc:2c:8c:26:
                    21:43:31:15:4a:4a:13:9f:07:b2:4d:bb:df:28:e9:
                    ea:ff:55:70:b6:a3:4f:21:78:1e:37:98:9f:67:22:
                    3a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:5C:D4:D6:23:CA:C6:1D:E4:58:61:48:98:21:AE:C7:27:CD:0E:FC
            X509v3 Authority Key Identifier:
                keyid:50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:ea:0f:d7:de:56:69:b6:e7:bf:9b:33:0c:78:64:f2:a3:8b:
         a1:5d:f5:ab:0c:4f:60:0e:fa:82:fd:09:71:42:83:8b:a1:94:
         0b:eb:ac:a4:a6:e9:41:51:19:d2:cb:cb:47:54:0e:53:40:e1:
         97:2b:9d:d5:67:fb:ec:d7:65:46:92:0c:bf:ec:12:3c:53:d5:
         d9:8b:a6:5e:b4:f0:5d:6e:87:e3:8c:ff:df:c6:0e:01:a9:c6:
         fd:5d:b6:38:15:6a:fa:76:ec:4a:73:3e:9b:24:98:9d:4f:b4:
         80:e2:00:da:b6:dc:2b:f1:72:29:0a:36:28:0f:fc:d8:f6:68:
         f1:71:6e:57:51:6e:9a:1b:4e:b5:cf:fc:ed:1f:a0:33:a0:b1:
         2e:ae:d6:a7:f3:f3:85:61:d7:8c:c8:f3:3b:1f:41:a6:9d:3d:
         1d:87:47:47:84:d8:ce:b0:e6:7d:4a:b6:a6:e2:45:32:63:17:
         f5:0c:1b:e1:0b:72:75:d5:8e:1e:f5:b3:f9:e0:00:13:a1:1e:
         5e:46:c5:b6:f0:d4:74:13:14:18:c3:aa:76:d6:ac:29:ae:43:
         25:50:fa:96:15:6a:34:e1:b8:77:cb:a5:18:02:54:1f:f8:5f:
         39:30:f2:12:d0:ea:13:44:17:1e:4a:ab:ef:fc:04:12:33:4a:
         90:0c:9b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 10:42:09 2026 by rpki-client