Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
File:                     UfSwsEaesNBxmUzYI480vvAMb74.mft (raw, json)
Hash identifier:          90tEs/QgxSWHRC4mnPa8ah4QGBPndaTVBYj9ho6xkXs=
Subject key identifier:   CE:F1:94:45:8D:19:4D:D8:5A:6F:2E:49:B1:47:09:02:C0:74:54:9B
Authority key identifier: 51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE
Certificate issuer:       /CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe
Certificate serial:       01A027A1EB1870289ABF680A60520B1E5D5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
Manifest number:          0996
Signing time:             Sat 22 Aug 2026 04:01:57 +0000
Manifest this update:     Sat 22 Aug 2026 04:01:57 +0000
Manifest next update:     Sun 23 Aug 2026 04:01:57 +0000
Files and hashes:         1: 1Z9CK4rPbzAMA97TMp2bKUfntRw.roa (hash: LpR7I8xQuFg1r5Rgn2WWeCosLxa5m8Ntho2zm0Of2+c=)
                          2: BLM9s6E3uNgLbo5hUAJYzpxbAgk.roa (hash: 5Ht0651estCzoETFmaG2dTMoJGv16B5IZmwbZaHDuac=)
                          3: UfSwsEaesNBxmUzYI480vvAMb74.crl (hash: 95ImIAhvT+jSCzVXJij2x+I/Q2l0xAEo4jPW10AWsH8=)
                          4: aBkGIeHaROiVyf6y4zQUYjIbWLo.roa (hash: QrqArFPVF1/qMWn5zOGo4TUbL6WlcsofMlRqGn2AHJw=)
                          5: aq9niQ1ZlLfgZPSmUPOgIOI3M2c.roa (hash: dNTF2xB3WZEo4xS7rRBBdp1UPiHc48uFIsc0/3W0AY8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:27:a1:eb:18:70:28:9a:bf:68:0a:60:52:0b:1e:5d:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe
        Validity
            Not Before: Aug 22 04:01:57 2026 GMT
            Not After : Aug 23 04:01:57 2026 GMT
        Subject: CN=cef194458d194dd85a6f2e49b1470902c074549b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:67:d8:6b:65:9d:3e:e2:c7:14:45:e7:25:ae:
                    52:b2:00:e6:0e:06:10:6e:8a:90:03:45:5d:9b:82:
                    0e:1f:4b:aa:52:6a:7e:c9:7d:4e:8a:02:d9:9b:ff:
                    42:26:e2:3d:ee:6e:97:0d:01:f2:f6:49:c4:dd:8a:
                    88:c2:11:0b:db:ed:da:03:73:90:23:a4:ce:8d:20:
                    0c:6a:d3:2d:68:c1:78:e0:e1:a7:26:4f:f4:cd:99:
                    46:f7:fe:6a:54:a0:99:24:05:39:7e:7d:7f:42:d6:
                    e4:97:bd:bb:fa:b4:57:ec:45:fd:64:47:74:27:8a:
                    17:49:8b:cd:1f:bc:c2:ca:f8:66:74:55:b3:38:81:
                    4d:1e:f8:0b:8d:59:60:2e:ed:c5:b6:2d:da:5a:a4:
                    56:78:da:0b:4b:b9:8e:d0:6c:ff:b8:ce:be:8d:d7:
                    1b:bb:99:4a:3d:44:82:07:f0:35:e5:fb:4f:5d:99:
                    d7:85:51:36:57:72:60:83:94:12:09:5a:c4:d1:69:
                    59:8d:14:34:e3:6a:11:61:8d:73:4b:99:2c:ad:74:
                    03:82:2c:ad:0e:9f:2a:84:b9:a7:1d:c7:17:fe:22:
                    be:02:3a:6d:46:a3:5d:a0:a8:ae:8b:fb:36:86:57:
                    43:b7:ee:e5:91:aa:22:bb:34:8a:1c:9a:34:d0:ba:
                    31:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F1:94:45:8D:19:4D:D8:5A:6F:2E:49:B1:47:09:02:C0:74:54:9B
            X509v3 Authority Key Identifier:
                keyid:51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:93:0d:eb:58:3a:64:ca:7d:92:a6:d6:22:9a:82:a5:ed:64:
         6a:ed:2a:da:88:04:52:8c:56:5c:69:dd:16:b7:c4:84:3b:20:
         f5:36:b6:b5:42:77:05:d1:1b:a6:73:aa:91:54:71:4c:18:f0:
         cd:9b:8c:ee:92:d6:d8:78:1b:6d:9e:94:c4:ce:77:f5:c2:cd:
         91:2a:fe:0b:86:a8:b3:0e:10:f8:d6:8b:3c:d5:3a:17:08:5c:
         04:30:86:87:56:0f:88:f9:11:5a:c4:db:22:16:0d:c1:c7:2f:
         5a:c2:cd:e8:00:94:3e:73:2c:38:0f:be:a7:dd:4b:ec:2c:dd:
         ed:0f:21:37:2f:a7:0c:87:eb:28:a8:6c:9e:dc:6c:73:87:2b:
         60:da:ed:0a:1d:42:1b:3a:10:e5:c1:34:88:c9:28:7f:2f:fb:
         a6:17:ed:b6:83:f2:10:a1:ce:34:8a:c0:71:04:79:d5:83:2d:
         56:cf:4c:bc:c8:79:7f:84:40:de:49:31:ee:86:73:a3:ff:74:
         94:40:51:07:d5:bc:85:e3:c7:60:af:e4:d1:56:ee:4d:b9:8a:
         8a:07:f4:57:8a:af:e1:16:93:60:18:8d:09:b8:ff:fe:e8:d0:
         62:77:31:d8:bf:4e:6a:4f:db:3c:4e:61:f7:c5:e1:51:bf:44:
         62:8c:18:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:02:34 2026 by rpki-client