Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.mft
File:                     UZ6XRwxj_aFMMmXrdBpw46i2mv8.mft (raw, json)
Hash identifier:          mTBXKA7AW87LSc1KgppgdLLaEriN/3yRLNLRcIgnXh0=
Subject key identifier:   DB:CC:E9:CB:4C:B4:C4:93:F2:1E:DA:03:34:AE:3A:B6:70:0D:33:25
Authority key identifier: 51:9E:97:47:0C:63:FD:A1:4C:32:65:EB:74:1A:70:E3:A8:B6:9A:FF
Certificate issuer:       /CN=519e97470c63fda14c3265eb741a70e3a8b69aff
Certificate serial:       01A0408554D97EE8B4957DAF12BC211AAF24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UZ6XRwxj_aFMMmXrdBpw46i2mv8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.mft
Manifest number:          1A25
Signing time:             Thu 27 Aug 2026 00:01:14 +0000
Manifest this update:     Thu 27 Aug 2026 00:01:14 +0000
Manifest next update:     Fri 28 Aug 2026 00:01:14 +0000
Files and hashes:         1: HJ4SBz_ou8raAnu7vjA9gto44h0.roa (hash: 31d6vC056XaUqpvSPD3bbBHg7NDJNbf/A6mjtFCVyiI=)
                          2: PH2Kdy1sC8HQ8PKYpAYdkdpdwCA.roa (hash: 2ZEPruJZ71eps2IyLVuADoW6OpOr0mtvk4b7WSmQax4=)
                          3: UZ6XRwxj_aFMMmXrdBpw46i2mv8.crl (hash: 8oR1qQxI5JuR5cMiKZkiMTC1ca/AKwOU5YL6E8/NVnI=)
                          4: pMNTA6pAmgcMgl8b6e9JeHIKlMY.roa (hash: sQxhTOTD/GUr5MiuJD9ZZ0PcinvbqcgtboX08lOVang=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UZ6XRwxj_aFMMmXrdBpw46i2mv8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:85:54:d9:7e:e8:b4:95:7d:af:12:bc:21:1a:af:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=519e97470c63fda14c3265eb741a70e3a8b69aff
        Validity
            Not Before: Aug 27 00:01:14 2026 GMT
            Not After : Aug 28 00:01:14 2026 GMT
        Subject: CN=dbcce9cb4cb4c493f21eda0334ae3ab6700d3325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:98:99:e3:75:3b:93:61:19:e1:03:47:e1:2a:
                    02:33:94:53:57:be:de:83:e9:b3:b5:d4:3f:c5:3f:
                    bd:10:4c:28:bf:94:cf:6a:36:69:86:bd:3c:1c:d7:
                    4c:7e:2e:54:97:67:f3:e6:5f:22:b9:da:c6:66:11:
                    78:b8:ba:5c:0f:1e:71:64:d3:2b:24:cd:45:29:6d:
                    53:ec:28:f0:23:0d:ed:b2:90:2e:90:23:dc:2c:5f:
                    5f:1b:71:6d:f3:6f:ba:77:0b:c0:af:f8:54:e3:d0:
                    54:39:46:cd:8f:76:26:7e:2f:d7:b3:ba:1a:09:66:
                    a0:cf:7b:6c:e5:d7:b2:fd:39:c8:d6:c8:af:c7:81:
                    a5:8a:2b:65:b1:6a:86:2f:3f:19:6d:77:57:ef:ab:
                    79:1b:d9:6b:1c:6e:76:7c:62:fc:36:8c:44:d4:62:
                    13:81:bf:ef:50:92:f2:09:82:ce:fa:bf:64:99:04:
                    06:3c:9e:62:9e:e7:56:f3:09:c7:16:82:cd:f6:9f:
                    1e:ac:79:98:7e:e9:f3:25:87:f2:0d:44:d1:b6:32:
                    c5:e8:63:28:8f:76:b7:45:99:60:e3:cb:20:12:fd:
                    36:1d:3a:10:16:0b:30:84:43:24:94:65:27:f8:4f:
                    8c:49:ca:c5:72:81:d4:1f:74:4d:d9:db:0b:9d:24:
                    85:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:CC:E9:CB:4C:B4:C4:93:F2:1E:DA:03:34:AE:3A:B6:70:0D:33:25
            X509v3 Authority Key Identifier:
                keyid:51:9E:97:47:0C:63:FD:A1:4C:32:65:EB:74:1A:70:E3:A8:B6:9A:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ6XRwxj_aFMMmXrdBpw46i2mv8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ef:ed:39:9b:91:e1:2c:96:d5:0c:c0:9a:7e:12:75:db:5f:
         6c:33:e0:d2:58:ad:2b:83:c6:bb:64:04:eb:6a:c6:e7:28:af:
         5d:54:b7:ee:64:3a:e9:b0:b5:7c:4e:91:8a:3b:50:52:53:ac:
         34:52:d3:c2:b9:f9:1d:9b:7a:55:3e:ac:c3:b8:b0:ad:c5:d0:
         cd:9a:31:7c:6b:54:83:61:35:6e:a1:fb:7c:dc:c1:eb:04:77:
         1b:0f:e2:86:d6:02:ee:f2:b1:fe:93:c0:a1:60:56:23:ba:51:
         d0:1e:29:8e:da:94:8d:25:c0:5a:a4:36:eb:19:d5:97:ee:93:
         65:54:93:cb:48:f4:3d:5d:79:6e:6a:53:91:b3:52:db:5d:35:
         14:ed:60:69:6a:ba:98:34:bc:07:da:fa:3b:37:c7:05:c0:5b:
         1a:11:47:5c:3b:53:35:22:a7:41:12:71:58:32:64:2b:b8:b4:
         99:e6:54:c3:4e:86:ca:e5:0f:bb:f0:11:a0:e4:75:0a:51:8b:
         1c:5a:27:3a:ee:d8:22:f7:05:3c:6b:ce:c6:96:a0:96:5e:05:
         fd:90:fd:be:37:d9:8c:19:f8:0c:46:1a:b1:f6:d9:3f:eb:c7:
         44:87:b6:9d:14:ff:9c:58:8f:ea:6d:2f:b0:e7:dc:c8:e2:50:
         9b:eb:2f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 03:10:59 2026 by rpki-client