Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft
File:                     U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft (raw, json)
Hash identifier:          lcp+86y9ppcIhLHiGqBD56N5e8ikBquwn3+yPfluTOA=
Subject key identifier:   42:84:26:40:83:47:82:1D:94:A4:F5:7B:02:5D:C9:AF:7B:84:C3:88
Authority key identifier: 53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74
Certificate issuer:       /CN=53d0359f9f8b20815ce4d988e109bf82306e4c74
Certificate serial:       01A0B44D68AD365B35C17D9521CB002A55BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft
Manifest number:          10FA
Signing time:             Fri 18 Sep 2026 11:36:07 +0000
Manifest this update:     Fri 18 Sep 2026 11:36:07 +0000
Manifest next update:     Sat 19 Sep 2026 11:36:07 +0000
Files and hashes:         1: 2v8-VRWu7ZQ7kaqtMJAMf8fXUB4.roa (hash: RUjaAMUiVfvMndNs5Aj41yn805YqU9Z4t95Kt6bJ84M=)
                          2: 8cnYIAFov8XyQ7mz1E9Sdbppeps.roa (hash: djldwC6E58AUQMRWAx9zysCU5AJ6c7wvZ0F1503TLkk=)
                          3: KwmyiRC_z9hBeAnC7i3MkCttPhg.roa (hash: RYQ+8HBwCcHX5dXE4t1Fu0qIu5oQb2OLAyRR/Oum9+k=)
                          4: OwXJ8_aEBHXSy1C37RbJt1tMNVE.roa (hash: qtj2hH8I97IITpCpJRG/cr14e5foNr9LkXNGjgwaZLo=)
                          5: U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl (hash: UkzCOqUPOJLgjZ1gZr6P75M7aBuQp4gyl7/4G7P23MU=)
                          6: olvyqzuNvXrGeqfRmEUXNufvjIE.roa (hash: Hprl8Pe8mPAC17YXAu41Cy5RqBefPMudPYxyfqJmQBk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 11:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b4:4d:68:ad:36:5b:35:c1:7d:95:21:cb:00:2a:55:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d0359f9f8b20815ce4d988e109bf82306e4c74
        Validity
            Not Before: Sep 18 11:36:07 2026 GMT
            Not After : Sep 19 11:36:07 2026 GMT
        Subject: CN=428426408347821d94a4f57b025dc9af7b84c388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d3:2d:8d:46:4c:56:ae:f0:7a:b4:50:56:4b:
                    e7:43:21:dd:db:ba:52:c5:fd:0a:cf:e3:36:49:6d:
                    89:e7:4c:2b:53:e7:9f:e8:ea:09:df:9b:70:4c:85:
                    8f:c6:55:ce:b9:e0:ac:99:ce:96:21:51:e4:88:ac:
                    d6:cc:5b:68:ce:cb:96:0d:28:ad:fd:51:6e:84:2f:
                    cf:8a:29:66:b3:33:7c:75:17:3b:e1:10:f4:5d:85:
                    28:c4:95:16:00:a6:60:71:b8:f1:ed:64:dc:b5:ce:
                    80:4e:b3:4b:d6:8e:94:43:0b:fc:42:da:cf:4c:ad:
                    e3:38:ee:90:93:62:4f:c4:fd:5b:7d:26:9b:81:0c:
                    3d:94:0d:00:a5:09:6d:c0:6c:10:ad:f7:55:3d:ff:
                    e0:b7:18:aa:33:ce:e4:d8:68:72:6e:ce:35:f4:48:
                    5f:0b:10:e4:83:0c:4f:92:b2:db:cd:0f:89:bc:0e:
                    10:41:62:6a:ae:fd:a9:1f:7a:8e:f0:f4:a9:ba:5c:
                    17:54:d8:0a:eb:a4:4e:ba:97:05:95:a7:78:f7:32:
                    be:fb:c3:34:28:fb:34:af:c8:78:af:93:25:fe:65:
                    7c:41:f4:04:3a:3f:0a:a3:13:04:9f:3e:27:c8:d6:
                    88:b8:a6:88:10:32:71:79:fb:18:97:7f:f6:25:16:
                    c6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:84:26:40:83:47:82:1D:94:A4:F5:7B:02:5D:C9:AF:7B:84:C3:88
            X509v3 Authority Key Identifier:
                keyid:53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:05:e1:6a:1f:61:6c:8b:dd:9e:cb:1c:9c:a2:1a:f0:f2:9d:
         d5:ae:cf:b1:a4:3f:e1:00:59:37:2f:e0:0d:6e:9c:98:f0:1a:
         e9:b4:0a:64:d3:a2:18:a1:de:eb:44:6e:65:54:f8:b9:db:34:
         77:d1:57:88:df:7a:88:79:30:70:63:1f:a2:35:01:18:34:d0:
         77:df:42:1b:2d:cb:ae:d3:97:9a:ec:ea:d3:2b:07:93:c9:17:
         dc:08:7c:0e:f7:12:7d:47:0c:f3:70:38:5c:11:0e:a8:2c:54:
         b5:7d:12:d1:d1:77:c0:32:7c:3e:e6:d6:07:c4:bb:13:15:af:
         7a:b7:35:6f:fe:1d:cf:c2:f2:63:03:31:7d:27:96:a1:dd:53:
         86:b2:3f:85:5e:fc:97:b5:a5:23:60:b5:43:2c:30:a2:34:0b:
         08:4c:bc:a5:f4:07:6e:2a:10:c8:5a:d1:1c:9e:da:da:fa:ea:
         a5:fe:75:34:51:c0:61:d6:89:51:cc:5c:1b:67:99:70:b9:54:
         f7:b3:b4:e2:5c:d7:94:79:d0:80:30:42:64:7f:16:34:cf:84:
         f4:9b:19:ac:a7:5a:03:ed:d6:26:08:43:bf:01:b0:cd:e0:46:
         b5:b9:96:69:5a:30:e3:f4:79:1b:7d:ad:32:34:24:58:90:bb:
         7d:ab:d5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:10:34 2026 by rpki-client