Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
File:                     UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft (raw, json)
Hash identifier:          R546afUlUAfy3j4Hpb2/sybtgHbz4qb3bqD2uB7nBmk=
Subject key identifier:   A7:71:F0:D8:D6:AD:FB:DE:C4:86:C9:22:C2:F5:EF:4F:1A:41:6D:4D
Authority key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
Certificate issuer:       /CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Certificate serial:       01A1238B3FA21D2C91B95DB1DADED5627283
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
Manifest number:          1AA4
Signing time:             Sat 10 Oct 2026 02:01:30 +0000
Manifest this update:     Sat 10 Oct 2026 02:01:30 +0000
Manifest next update:     Sun 11 Oct 2026 02:01:30 +0000
Files and hashes:         1: 0d6SiGZ_3HskVJZrwW4LAUnPhVk.roa (hash: sH5j+6BmvxKro4kCtZa6p73msltGzoMgNQq57Mh0jXE=)
                          2: GBJMnjMbFvL5E-lL9i3lBFi6nWY.roa (hash: SL+iSObRv/yIgCUc1iePoCbQgwvJ0km8l952y/nYPkY=)
                          3: IY7fhcpZn8V1nFJzcjkAB2G_wy8.roa (hash: kypNUV6hOKnyhwHaYDOZf/jJOmWZK2acEUl1kQxKdoM=)
                          4: UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl (hash: GZUPvItTXsAmZXAV4eButyOvgEuS/wpg0Sqz0SQuZB8=)
                          5: ZDSwaO2zu2qpiNoQdfHO9f__qXE.roa (hash: /yuwN8mjkUUOdBbxmmKWCbuEc9CKVHYeB+reIdnpnsM=)
                          6: qfnbY9JngbTP144k13tCg-IRl3w.roa (hash: 9MKZ2wZQrvJYgyQxGjaYnWmRu2eM+70F1EApasiltnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 00:43:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:23:8b:3f:a2:1d:2c:91:b9:5d:b1:da:de:d5:62:72:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
        Validity
            Not Before: Oct 10 02:01:30 2026 GMT
            Not After : Oct 11 02:01:30 2026 GMT
        Subject: CN=a771f0d8d6adfbdec486c922c2f5ef4f1a416d4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0c:16:13:37:a7:a6:48:5c:ef:4f:6f:67:6b:
                    2b:78:1e:34:fd:21:84:aa:3d:ce:f2:1f:cb:12:bd:
                    77:33:72:48:59:d6:8f:74:a7:ea:29:e1:05:64:a3:
                    b3:09:5e:4d:46:ab:07:50:f3:a9:a0:08:bf:0b:85:
                    fd:68:32:17:e0:c7:53:7c:3d:91:ec:1c:be:de:04:
                    36:cd:e3:1c:0d:68:cc:9e:e0:90:32:dd:40:19:3e:
                    9c:a1:4e:a9:c2:7a:2c:2e:bf:fb:97:5f:ac:39:97:
                    53:22:71:2e:6f:10:6b:af:01:73:70:ee:df:22:28:
                    14:ec:c6:d4:89:70:3c:4c:0c:40:60:c1:a3:d5:e1:
                    b9:d0:3c:38:61:2f:6f:be:12:02:9c:18:af:28:aa:
                    ab:d7:ec:70:81:f2:b6:d9:d3:90:0f:ff:5c:17:28:
                    6d:0d:7e:ff:14:af:66:e2:77:57:d4:dd:cb:35:89:
                    dc:53:d2:50:1b:77:25:3e:81:02:51:a9:9e:76:ad:
                    b1:0e:f1:43:5e:8b:1e:90:c9:d0:1a:81:f1:ee:79:
                    e4:87:b4:39:3b:a6:fe:16:2e:ea:c6:76:c7:51:d2:
                    15:e7:ef:1f:a4:43:fa:8a:c8:2f:29:3f:b6:1f:de:
                    53:6e:75:a1:bf:2a:b5:e3:6d:2d:e1:eb:e0:8a:29:
                    d0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:71:F0:D8:D6:AD:FB:DE:C4:86:C9:22:C2:F5:EF:4F:1A:41:6D:4D
            X509v3 Authority Key Identifier:
                keyid:52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:02:82:f1:ae:d7:ec:ac:af:3c:31:dd:04:ac:89:a0:1d:a0:
         19:9e:c6:3b:00:f4:0e:38:0c:7a:8d:b4:b0:28:4c:ce:92:31:
         7d:bb:2f:eb:ab:62:cd:dc:6d:47:25:c4:d7:75:06:e8:ae:41:
         6a:3b:ea:3d:e2:f4:b0:8d:44:4a:13:ef:36:d5:da:97:02:6f:
         b4:8a:ff:3b:af:ba:c1:6f:b6:ad:24:d7:b1:48:45:17:00:a6:
         9f:cc:69:19:58:80:c7:81:e8:94:f4:dd:1a:49:a9:81:4b:9f:
         5f:6d:6b:20:5d:79:57:7b:39:d5:9e:cd:7a:8e:2b:14:21:5b:
         12:76:db:1e:1e:82:d0:1f:5d:04:b6:e6:c4:bd:34:9c:56:83:
         c5:92:66:07:b7:ec:d9:2c:a8:d0:53:d7:a3:de:b0:3c:9c:74:
         76:cf:e4:d2:43:81:f9:f9:45:47:97:ae:78:2b:ef:61:3f:a1:
         85:db:d9:e1:a7:df:e2:4c:b5:e5:3b:b5:15:61:ec:37:b1:2b:
         66:75:95:6e:c7:21:0c:f8:e8:4b:38:c5:10:12:72:38:a3:24:
         93:c0:72:c6:3e:16:c0:7b:b4:67:f8:d1:20:5d:92:ab:b9:ab:
         3c:63:b3:f1:f4:78:67:e8:9f:37:7d:24:09:14:5c:54:4e:85:
         e7:1c:2b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:54:44 2026 by rpki-client