Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
File:                     uXhT3Vdz8qawcYefW567Dm9Ofao.mft (raw, json)
Hash identifier:          TUgnBAud4JV8jeNfcdzwyiHU76P1ePGI/6yivFma4J4=
Subject key identifier:   CC:3E:A8:97:C0:DF:16:16:C8:10:C8:49:9B:5A:76:D8:03:75:2A:A1
Authority key identifier: B9:78:53:DD:57:73:F2:A6:B0:71:87:9F:5B:9E:BB:0E:6F:4E:7D:AA
Certificate issuer:       /CN=b97853dd5773f2a6b071879f5b9ebb0e6f4e7daa
Certificate serial:       01A15DE86DE577CC95717AFCB7C3307D808D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
Manifest number:          1A47
Signing time:             Wed 21 Oct 2026 10:01:15 +0000
Manifest this update:     Wed 21 Oct 2026 10:01:15 +0000
Manifest next update:     Thu 22 Oct 2026 10:01:15 +0000
Files and hashes:         1: F_MQUh6Cv4-dn8QQYjcllgNmU_Q.roa (hash: rPOBsU3IqWyWd2TrfL/Ef+LouW+88Qh38gAJottjBDo=)
                          2: uXhT3Vdz8qawcYefW567Dm9Ofao.crl (hash: 2ZhlgJgwtqHSVSoOhY3xWuFuv/zSE6uQbfaNjtDRxXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 10:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5d:e8:6d:e5:77:cc:95:71:7a:fc:b7:c3:30:7d:80:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97853dd5773f2a6b071879f5b9ebb0e6f4e7daa
        Validity
            Not Before: Oct 21 10:01:15 2026 GMT
            Not After : Oct 22 10:01:15 2026 GMT
        Subject: CN=cc3ea897c0df1616c810c8499b5a76d803752aa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:50:9b:6f:5a:77:c3:7b:25:7f:0b:50:7f:f4:
                    c6:b3:14:26:3f:61:3d:9a:40:98:c7:e5:aa:ad:d8:
                    90:f8:4f:a4:e4:48:78:f5:5d:47:8b:cd:80:f0:e4:
                    16:26:ac:6f:fa:ef:8f:76:03:d7:bd:27:f1:1e:29:
                    c5:cd:3b:78:e9:47:6d:b5:80:05:da:6a:d5:69:e4:
                    fe:f5:b0:98:1c:c4:e2:11:e0:e3:91:db:bc:1c:16:
                    1b:c5:23:dc:ce:5b:a3:ce:4a:2a:7b:d3:dc:03:7d:
                    f9:b3:bb:05:b2:45:48:51:cf:d1:4c:eb:97:8d:a4:
                    07:b3:fb:e4:30:4e:dd:b8:9c:15:48:2d:a0:10:ab:
                    9b:23:31:82:37:14:bf:34:d5:5a:2b:30:0a:df:8c:
                    a1:bb:75:2b:5b:02:12:4d:04:40:72:ac:ee:18:99:
                    c8:3d:f0:52:a6:65:e4:d1:31:5e:f2:2c:af:b6:c6:
                    44:2d:50:a2:b1:cd:51:01:4c:a1:62:d7:7a:44:81:
                    27:65:e1:91:41:05:9e:42:79:b5:4b:b4:51:4f:1d:
                    93:5a:15:32:6c:8c:fd:03:28:91:5d:bf:f2:fb:2e:
                    7f:f9:49:65:6b:07:32:82:15:09:a0:c1:41:89:ba:
                    be:e5:51:34:80:09:c1:6a:99:21:c8:ff:e3:fe:b2:
                    37:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:3E:A8:97:C0:DF:16:16:C8:10:C8:49:9B:5A:76:D8:03:75:2A:A1
            X509v3 Authority Key Identifier:
                keyid:B9:78:53:DD:57:73:F2:A6:B0:71:87:9F:5B:9E:BB:0E:6F:4E:7D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:84:a2:d7:da:7d:17:33:d2:28:dd:56:0d:1c:60:54:5e:c5:
         87:11:ad:a0:c5:86:57:4a:57:e0:c3:1f:cd:3c:db:42:13:7a:
         49:6b:87:f6:9d:22:82:f8:df:41:df:dd:c7:b9:06:15:a1:25:
         fb:37:47:f1:ae:91:0b:92:29:a0:33:eb:bf:bd:48:83:8c:f8:
         0c:2a:06:83:8b:6a:00:3c:26:53:38:28:45:47:00:4e:c0:d3:
         cb:e2:1f:6e:b4:e0:2c:61:8d:5d:2c:d9:34:fe:f4:7c:13:c9:
         a6:6f:0a:f2:3f:79:da:2f:23:49:1e:db:93:86:74:d3:85:f9:
         49:be:eb:81:c9:c6:76:fa:d9:44:bb:08:aa:2e:16:25:89:96:
         e1:8f:31:5d:7f:5a:09:a6:bc:0f:41:8a:e8:9c:ef:b8:37:dc:
         99:60:4a:10:6c:85:5e:95:cf:13:c2:4f:7c:00:3a:05:03:c4:
         95:71:e1:5c:2a:dd:f4:d8:30:8b:01:e7:f5:84:d9:ee:5f:a4:
         06:39:52:fe:c5:bd:e3:a5:73:19:c9:ab:e2:f3:b4:b1:40:a9:
         23:5f:82:f8:64:89:5a:56:94:fd:9f:e1:c8:3b:f1:0c:2b:b6:
         00:4c:c0:30:cf:cb:7a:fc:15:01:8d:65:36:ef:a3:f5:d8:eb:
         d6:0a:03:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 21:15:18 2026 by rpki-client