Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
File:                     uybM-gcX259Wqji4aSzl3PooJec.mft (raw, json)
Hash identifier:          P0A5hjJv2fLqMV3L68kQSbalS+cLOWlslZPdEaPxw38=
Subject key identifier:   70:10:60:3C:3D:75:34:58:4F:61:ED:44:4A:BA:E7:31:A3:02:AB:2C
Authority key identifier: BB:26:CC:FA:07:17:DB:9F:56:AA:38:B8:69:2C:E5:DC:FA:28:25:E7
Certificate issuer:       /CN=bb26ccfa0717db9f56aa38b8692ce5dcfa2825e7
Certificate serial:       01A18ED4389419040D99C49B6124A6910E31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
Manifest number:          0699
Signing time:             Fri 30 Oct 2026 22:00:35 +0000
Manifest this update:     Fri 30 Oct 2026 22:00:35 +0000
Manifest next update:     Sat 31 Oct 2026 22:00:35 +0000
Files and hashes:         1: dbi3fG9bxI9rA-J9Egga8cnvqoo.roa (hash: Ap8z6NPW0v1Uxh7C5vK9EjLc2QYMMSk2Hr7IGcY1KpQ=)
                          2: uybM-gcX259Wqji4aSzl3PooJec.crl (hash: anS+jkF0c7yWPEXOSXIlj9LNdR9KrbLj1XiasE8eJl4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 22:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8e:d4:38:94:19:04:0d:99:c4:9b:61:24:a6:91:0e:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb26ccfa0717db9f56aa38b8692ce5dcfa2825e7
        Validity
            Not Before: Oct 30 22:00:35 2026 GMT
            Not After : Oct 31 22:00:35 2026 GMT
        Subject: CN=7010603c3d7534584f61ed444abae731a302ab2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bb:47:8c:77:f6:e2:3c:ea:17:ca:38:32:15:
                    86:c0:76:7c:58:d7:35:e0:04:18:24:6a:08:35:75:
                    05:26:0b:ba:30:b5:e7:70:a7:34:db:cc:85:cf:a9:
                    00:fe:13:05:9a:a0:89:98:ca:45:22:2c:f9:37:cd:
                    e8:62:82:f7:0c:c8:0c:92:68:30:64:c5:ce:43:5d:
                    ab:7e:21:74:d2:05:44:8d:29:96:be:ad:18:cc:35:
                    2e:04:8c:57:f4:31:90:4c:de:9d:04:08:15:cd:2d:
                    9e:a0:b3:71:be:39:a0:34:98:d6:4f:3d:ac:b6:5e:
                    de:54:20:76:44:e4:00:c5:df:40:bc:64:32:cd:f5:
                    29:ae:19:ae:a0:61:13:d9:15:99:02:e8:aa:a3:7f:
                    e5:11:ff:7c:80:58:cd:c4:de:80:f3:75:b6:4f:0e:
                    81:b7:f4:0c:ac:19:4b:c4:e8:e4:52:ca:bf:38:c3:
                    b2:11:63:c2:a8:7f:1c:1b:4e:b6:de:82:f9:f0:d2:
                    12:ec:08:52:6f:87:2b:3f:94:65:c3:6f:da:90:2f:
                    fe:28:ce:86:76:36:65:a4:ac:dd:35:81:2d:31:bd:
                    7b:c4:9b:c5:92:6b:9f:9d:94:56:1f:fa:aa:3d:7b:
                    5e:cf:d5:fb:b0:d8:97:d2:89:30:94:9e:28:9b:80:
                    b8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:10:60:3C:3D:75:34:58:4F:61:ED:44:4A:BA:E7:31:A3:02:AB:2C
            X509v3 Authority Key Identifier:
                keyid:BB:26:CC:FA:07:17:DB:9F:56:AA:38:B8:69:2C:E5:DC:FA:28:25:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:11:43:13:25:9d:73:ba:85:37:77:14:b6:61:b1:60:91:0f:
         85:6a:28:ad:0a:51:d3:2c:16:40:a0:aa:99:70:02:9f:97:1a:
         bc:af:69:b5:3f:36:b0:a1:da:d9:59:be:74:d6:cd:47:45:89:
         b5:f8:7d:d3:d6:e7:f9:0e:3d:17:19:e6:0a:a1:a9:be:82:d3:
         dd:33:f2:ce:85:2f:e6:75:f8:dd:35:24:13:c5:fb:b4:09:d3:
         3f:55:60:13:a8:01:dc:85:bd:1b:7a:71:53:61:ce:bc:ee:84:
         a8:05:4d:95:e6:1d:58:87:9a:e9:73:94:f7:e0:02:b2:ca:80:
         16:3c:c3:0d:cf:06:d7:4b:87:25:9a:41:87:a0:e6:e6:bb:81:
         dd:ff:f0:96:5b:f8:52:9d:58:31:06:f4:4a:40:bd:cc:ef:c0:
         0c:ec:4f:d5:c9:ac:69:d0:5e:80:93:20:a2:ca:05:e3:a0:dc:
         55:cb:68:66:3f:dd:c2:92:8c:60:2e:c2:b1:4e:97:63:98:99:
         8a:eb:7c:f3:bc:83:d4:e7:3c:59:94:e8:ba:52:a0:a9:00:b5:
         9b:20:24:f1:35:ca:b8:5c:55:90:42:ad:bf:ff:71:75:ed:ea:
         98:2f:43:27:03:2c:e7:fc:a5:91:b9:85:e2:f3:b5:4e:dc:1b:
         d2:5e:d0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:43:53 2026 by rpki-client