Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.mft
File:                     UZ6XRwxj_aFMMmXrdBpw46i2mv8.mft (raw, json)
Hash identifier:          UMejoHMjABctOH17BcM0lqNGnSaFjs/LwFsAFWNco+8=
Subject key identifier:   D2:EC:92:8D:64:80:4A:C9:55:3E:BC:9C:D8:05:E1:C3:61:FC:3E:F0
Authority key identifier: 51:9E:97:47:0C:63:FD:A1:4C:32:65:EB:74:1A:70:E3:A8:B6:9A:FF
Certificate issuer:       /CN=519e97470c63fda14c3265eb741a70e3a8b69aff
Certificate serial:       01A186E38F9B04DC6FE7D5390097BB3C75FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UZ6XRwxj_aFMMmXrdBpw46i2mv8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.mft
Manifest number:          1ACE
Signing time:             Thu 29 Oct 2026 09:00:22 +0000
Manifest this update:     Thu 29 Oct 2026 09:00:22 +0000
Manifest next update:     Fri 30 Oct 2026 09:00:22 +0000
Files and hashes:         1: HJ4SBz_ou8raAnu7vjA9gto44h0.roa (hash: 31d6vC056XaUqpvSPD3bbBHg7NDJNbf/A6mjtFCVyiI=)
                          2: PH2Kdy1sC8HQ8PKYpAYdkdpdwCA.roa (hash: 2ZEPruJZ71eps2IyLVuADoW6OpOr0mtvk4b7WSmQax4=)
                          3: UZ6XRwxj_aFMMmXrdBpw46i2mv8.crl (hash: VtR1JkP0tm44yUoH/a3TCY3tQEKSO90A2fIL4xl0dCw=)
                          4: pMNTA6pAmgcMgl8b6e9JeHIKlMY.roa (hash: sQxhTOTD/GUr5MiuJD9ZZ0PcinvbqcgtboX08lOVang=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UZ6XRwxj_aFMMmXrdBpw46i2mv8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 09:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:86:e3:8f:9b:04:dc:6f:e7:d5:39:00:97:bb:3c:75:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=519e97470c63fda14c3265eb741a70e3a8b69aff
        Validity
            Not Before: Oct 29 09:00:22 2026 GMT
            Not After : Oct 30 09:00:22 2026 GMT
        Subject: CN=d2ec928d64804ac9553ebc9cd805e1c361fc3ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cf:59:90:45:4c:10:e5:55:d1:9c:a8:0e:27:
                    ab:0b:b7:ce:28:7a:e1:fe:af:d9:be:1e:f9:5b:ca:
                    e6:17:e2:53:69:3b:de:44:87:06:37:eb:63:1e:c1:
                    26:2a:db:a6:28:19:da:c9:06:07:60:b4:67:4a:d1:
                    18:bb:ca:31:f7:af:d8:c3:61:14:63:6f:c5:22:e8:
                    f9:8e:73:25:d0:3e:d8:36:d6:6e:96:98:a4:a5:51:
                    ca:4e:d3:45:94:88:17:30:f1:a4:2b:b3:67:31:ee:
                    6f:19:2b:29:3b:b6:7e:ce:39:c1:b4:a7:e6:fe:dc:
                    d2:38:e3:61:cb:ee:c8:fc:0f:12:cd:e0:ce:3d:29:
                    b0:50:e8:e2:2c:be:69:2c:02:d0:0f:f3:38:93:3b:
                    10:32:84:e4:1a:71:1c:d1:3d:c9:88:61:13:22:eb:
                    ec:4e:69:b0:ff:76:0f:29:7a:3f:c2:89:44:61:8b:
                    05:9f:9c:a8:e7:63:de:8d:62:2c:28:e1:7d:e9:9e:
                    a7:69:bb:87:2f:ee:7e:68:a1:3d:93:ef:7a:1f:e2:
                    31:37:52:05:9a:68:b9:b8:04:f5:3a:ff:8e:19:ed:
                    55:de:12:7c:62:ec:c1:5a:fc:26:0e:28:37:aa:d2:
                    4d:eb:2d:9e:91:26:40:a6:3e:21:1a:92:40:63:49:
                    e0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:EC:92:8D:64:80:4A:C9:55:3E:BC:9C:D8:05:E1:C3:61:FC:3E:F0
            X509v3 Authority Key Identifier:
                keyid:51:9E:97:47:0C:63:FD:A1:4C:32:65:EB:74:1A:70:E3:A8:B6:9A:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ6XRwxj_aFMMmXrdBpw46i2mv8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:25:83:ce:31:26:1e:64:32:d1:42:c9:25:30:5c:2a:2d:07:
         ca:d6:c9:ea:5b:3f:c0:9a:ac:e9:27:94:fd:d6:63:12:21:ee:
         5f:25:a1:cd:ee:33:84:b2:62:2b:b8:24:c7:b4:0e:29:34:69:
         26:09:9c:39:70:03:15:64:49:6f:74:a1:39:b4:67:b5:2a:61:
         8b:10:5c:f5:cd:03:c8:91:39:2d:bc:58:3a:41:c4:61:54:cb:
         a1:49:73:9b:7d:dc:78:53:66:74:87:e0:b6:d2:78:07:fd:b9:
         ed:da:21:df:7b:a2:10:37:e2:8c:af:c2:40:56:06:06:02:44:
         21:25:bf:bc:96:3e:3f:68:db:32:b5:a3:79:17:f4:1b:61:b2:
         a3:c7:65:6a:c1:6b:e5:ce:71:d0:4d:12:4f:f6:74:3c:0e:b1:
         39:f9:3d:cd:78:e5:57:24:6c:02:56:7b:15:7b:b7:9e:09:b2:
         d5:33:89:30:4f:0a:f0:96:33:e0:79:91:e0:5c:af:d9:d1:0c:
         a9:63:6c:20:90:5b:f8:94:33:89:b2:24:36:2c:35:ec:2a:12:
         a8:ad:02:a1:6c:25:59:de:88:a2:a9:b9:0d:f6:99:89:9f:07:
         4c:d2:d4:aa:a1:05:60:d1:71:41:74:d0:9e:de:ec:48:be:a7:
         77:08:3e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:09:34 2026 by rpki-client