Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft
File:                     ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft (raw, json)
Hash identifier:          Xu7sq8UWSVBoBKPe04xcOIwp3GM/AWQs/9SCAcSRKPo=
Subject key identifier:   7A:91:DA:3B:C3:50:F8:8A:6B:34:15:D9:2E:C6:20:FE:C8:00:4C:35
Authority key identifier: 50:B0:E7:15:71:47:A9:0C:E3:74:60:B7:19:CB:76:06:94:AB:54:14
Certificate issuer:       /CN=50b0e7157147a90ce37460b719cb760694ab5414
Certificate serial:       01A08AC2FD9D14C1A86B4AB552AB75E948DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft
Manifest number:          034F
Signing time:             Thu 10 Sep 2026 10:00:29 +0000
Manifest this update:     Thu 10 Sep 2026 10:00:29 +0000
Manifest next update:     Fri 11 Sep 2026 10:00:29 +0000
Files and hashes:         1: ULDnFXFHqQzjdGC3Gct2BpSrVBQ.crl (hash: Xx6N9Gz8qGp9OMonwx34+3FO3ybeYFwFT6zKJV1X1lI=)
                          2: YTZnwgX1fpqLaA8u7GzOIk6ue1k.roa (hash: mBjPd/UyUtpVQP57vDWgcX+PhPNfMg70eOHjoJqEsnc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 10:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:c2:fd:9d:14:c1:a8:6b:4a:b5:52:ab:75:e9:48:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50b0e7157147a90ce37460b719cb760694ab5414
        Validity
            Not Before: Sep 10 10:00:29 2026 GMT
            Not After : Sep 11 10:00:29 2026 GMT
        Subject: CN=7a91da3bc350f88a6b3415d92ec620fec8004c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:86:83:08:f2:52:29:81:aa:9f:c6:cc:71:62:
                    71:18:fb:f3:16:9b:db:7c:c4:a7:56:ab:ce:93:37:
                    53:5d:db:53:73:60:3c:a8:ec:5d:32:88:2a:79:a5:
                    30:58:6b:07:27:3f:76:e9:2a:4b:9b:63:ce:70:c7:
                    a0:93:1f:f8:fa:ec:44:bf:af:d1:0e:c9:28:fc:69:
                    36:81:52:40:58:19:7d:c1:94:ff:dc:ca:df:85:11:
                    78:ae:ec:01:a6:65:ff:ca:3f:47:c6:c3:a7:83:33:
                    83:bf:4e:c0:90:70:7b:69:26:a9:ec:90:93:b8:69:
                    f8:da:b5:e1:f5:57:bb:e7:22:c8:67:fd:e0:55:37:
                    6b:d3:8e:68:39:45:48:a3:7c:3c:e7:20:98:f4:ce:
                    9a:6b:4a:c8:f9:5e:7c:51:98:56:53:b4:bf:26:10:
                    9b:e1:d8:33:59:6c:4a:96:89:21:66:48:2d:fe:4c:
                    dd:88:01:73:e6:08:14:00:24:12:6e:68:39:4e:c8:
                    45:5c:ab:f4:5c:36:ad:40:7b:3a:de:b3:f6:e2:0f:
                    aa:bb:58:7f:2b:5c:97:a7:88:bc:1d:be:59:c7:09:
                    cf:09:d2:b3:6d:f6:ba:a7:35:7b:6b:31:cf:59:cd:
                    43:61:f7:8f:9e:43:54:87:9d:90:ed:89:64:4e:b5:
                    1c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:91:DA:3B:C3:50:F8:8A:6B:34:15:D9:2E:C6:20:FE:C8:00:4C:35
            X509v3 Authority Key Identifier:
                keyid:50:B0:E7:15:71:47:A9:0C:E3:74:60:B7:19:CB:76:06:94:AB:54:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:9f:08:66:7a:fd:73:b0:dc:18:53:e3:28:7d:ee:0f:de:97:
         af:58:da:f9:c5:4d:65:55:4c:0a:a3:80:6e:49:14:2f:87:e8:
         c6:28:b8:6a:b3:d7:c4:a9:89:4d:3a:0c:42:de:91:47:5b:c8:
         1e:66:cc:4f:be:21:23:70:d8:77:d6:c8:5d:dd:d0:e1:af:b1:
         ed:65:b1:9f:1e:e5:68:d6:14:9e:ec:3e:4b:f5:bc:25:3f:ee:
         f1:61:a3:08:1e:72:4a:d2:82:81:0a:12:a9:1c:b2:74:25:5c:
         39:c4:1e:7c:0c:df:cc:ff:93:15:6f:72:f0:87:20:ff:af:d1:
         6c:55:45:07:4a:7e:fc:56:15:d3:50:21:b1:cf:ec:8f:69:29:
         fe:84:ea:d6:a2:ea:27:d5:7d:61:7e:68:05:7d:7c:8d:0e:40:
         36:36:c9:8b:7f:ee:e8:74:04:60:b2:64:b5:66:84:bb:12:1a:
         80:bf:d5:74:51:7d:a2:09:e6:30:a9:45:b7:10:b8:2b:d9:af:
         ad:dd:38:e2:67:46:9e:95:a0:83:d4:10:87:2f:0c:de:2b:08:
         6c:84:13:40:bc:3c:9d:c6:5d:45:e5:40:df:08:ac:3a:9c:cd:
         1d:b7:84:2f:ae:29:61:ad:7b:00:f2:f1:57:c1:cb:72:ab:8d:
         cf:12:c0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:27:00 2026 by rpki-client