Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
File:                     UdoAZhIua6KU0rdHk41Gx06Z-IA.mft (raw, json)
Hash identifier:          Qwngzeuwn+ms68iycZR4sGdtAYzTEHkR1u8zZ1onZ+A=
Subject key identifier:   A3:2F:3F:E5:CB:D9:8A:FE:19:F1:08:60:A7:BB:BB:03:C4:1C:9A:DA
Authority key identifier: 51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80
Certificate issuer:       /CN=51da0066122e6ba294d2b747938d46c74e99f880
Certificate serial:       01A08979FEE2DBEA0071E65FF9FE9D4AFEC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
Manifest number:          0A94
Signing time:             Thu 10 Sep 2026 04:01:08 +0000
Manifest this update:     Thu 10 Sep 2026 04:01:08 +0000
Manifest next update:     Fri 11 Sep 2026 04:01:08 +0000
Files and hashes:         1: UdoAZhIua6KU0rdHk41Gx06Z-IA.crl (hash: OEqFP+fs6idwtcBj1J5gF/AlBWtOecf/q0LgVh0qQWA=)
                          2: bBMlqfhZbgU4RFc29xzMS28J5Yc.roa (hash: wmFqb2uW30KLYhFd4JkMsA8poWqQ5oZsDAIy44oWkC4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:79:fe:e2:db:ea:00:71:e6:5f:f9:fe:9d:4a:fe:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51da0066122e6ba294d2b747938d46c74e99f880
        Validity
            Not Before: Sep 10 04:01:08 2026 GMT
            Not After : Sep 11 04:01:08 2026 GMT
        Subject: CN=a32f3fe5cbd98afe19f10860a7bbbb03c41c9ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c9:e6:9d:d6:53:3d:80:07:5d:df:1e:b5:ce:
                    d6:46:03:49:be:85:1d:a5:1e:82:fd:39:7b:38:c4:
                    fe:76:0e:51:b8:37:1e:c0:4e:31:09:b2:fc:b3:d9:
                    5d:db:e2:29:a4:9d:2e:18:cd:fb:e0:04:69:c3:c6:
                    3f:9d:1c:f9:ff:a4:4c:bd:19:eb:08:73:d0:f6:50:
                    31:cd:fd:15:51:94:7f:06:1f:71:b5:ca:7f:6b:fa:
                    00:b2:6a:54:6d:2f:5d:a8:57:35:d1:1a:9a:e7:0a:
                    b0:03:62:72:df:05:8e:c7:02:5a:d5:a7:d7:bf:c5:
                    4e:f7:a1:61:7b:33:61:21:31:97:53:4a:57:fc:06:
                    d1:32:42:d1:b1:12:f1:8f:00:55:68:7d:65:28:04:
                    dc:d2:35:74:65:4c:02:37:56:a2:be:5c:46:ab:31:
                    0c:1d:22:84:db:ff:51:6f:50:63:e9:36:2d:96:b9:
                    4b:13:28:7d:37:3b:ba:13:ce:ec:67:45:ba:f2:d4:
                    07:26:6c:49:55:ff:32:98:cc:b7:e8:a9:3d:e0:2d:
                    54:08:8d:14:e4:84:0f:4e:16:a2:b6:af:f6:cd:fb:
                    a0:8a:8a:fa:cc:16:cf:c2:62:f4:e3:a1:25:fb:1d:
                    a1:4f:22:a7:a0:9d:55:5e:7e:04:36:08:b4:7f:d6:
                    0c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:2F:3F:E5:CB:D9:8A:FE:19:F1:08:60:A7:BB:BB:03:C4:1C:9A:DA
            X509v3 Authority Key Identifier:
                keyid:51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:49:1f:f7:24:c6:44:d8:21:1d:05:4b:c2:6c:7f:a7:d3:ca:
         29:66:4a:fb:a1:5e:5a:51:bc:79:56:98:11:d5:8f:26:bc:37:
         12:92:8b:6f:96:a0:88:13:b2:be:30:03:1a:7f:c3:3f:5f:6f:
         09:84:ad:6d:cf:71:29:12:66:bc:e2:cf:b6:9f:30:58:7e:6a:
         70:d7:07:d4:c3:a3:cd:5f:df:28:ad:01:29:e4:88:2e:c6:cb:
         18:84:26:e2:e8:eb:d4:fc:fe:85:86:5a:f0:79:46:15:e6:38:
         59:77:45:c8:55:a1:8f:e9:54:3c:db:d9:e3:7a:3f:a1:c4:25:
         5c:ac:77:39:64:41:d3:76:77:21:fd:41:05:07:8d:7e:e7:93:
         1d:0d:82:6e:d6:14:e3:20:f1:40:ad:b4:55:39:7d:07:1e:77:
         46:58:c2:7a:24:ed:83:e0:70:3c:e9:78:15:26:a7:9d:9b:64:
         ff:68:83:99:88:7c:35:e6:4c:b3:85:b6:7c:ca:0f:a8:92:3d:
         98:d9:aa:bf:fd:f8:b5:c7:6c:21:1f:3f:9f:26:ea:1f:6f:a7:
         ee:da:b8:09:26:1d:82:fc:5b:98:2f:b8:64:f3:2c:46:68:a5:
         c4:ed:a2:c4:82:72:30:cc:0f:e2:ca:a6:04:36:f3:43:2c:e9:
         5a:91:9b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:46:17 2026 by rpki-client