Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft
File:                     uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft (raw, json)
Hash identifier:          pgVJOMSfqKIEw1QO+q2Mxyt1Yv04Kj91CW78ytlR6hs=
Subject key identifier:   3E:D3:A0:19:28:4D:9D:49:19:70:D0:50:7B:6E:73:93:EF:6C:98:83
Authority key identifier: BA:11:AE:23:A3:E9:C8:BC:6F:5A:79:C7:15:FA:99:A7:8C:F8:5D:FE
Certificate issuer:       /CN=ba11ae23a3e9c8bc6f5a79c715fa99a78cf85dfe
Certificate serial:       01A180AB99AA443B044F4ACD658E16E89B02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft
Manifest number:          0DFB
Signing time:             Wed 28 Oct 2026 04:01:31 +0000
Manifest this update:     Wed 28 Oct 2026 04:01:31 +0000
Manifest next update:     Thu 29 Oct 2026 04:01:31 +0000
Files and hashes:         1: KP9ZK8Mm0n7oCIGFwbCMB_IJtD4.roa (hash: 9E7/dOsgEeSFLc8nXYfohFpko6PoMkA7jZYSR5wWOOU=)
                          2: uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl (hash: KL5tBp5TdDvFCjtzJAZz/7PGZgXE5+KYz229OVoN1uE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 04:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:80:ab:99:aa:44:3b:04:4f:4a:cd:65:8e:16:e8:9b:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba11ae23a3e9c8bc6f5a79c715fa99a78cf85dfe
        Validity
            Not Before: Oct 28 04:01:31 2026 GMT
            Not After : Oct 29 04:01:31 2026 GMT
        Subject: CN=3ed3a019284d9d491970d0507b6e7393ef6c9883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e4:a7:9c:a3:3f:99:04:e5:14:89:39:9b:db:
                    69:38:a2:d5:9d:5b:7c:6a:be:30:ff:34:51:81:4d:
                    05:bc:93:f7:f9:b5:69:29:32:44:94:1f:b6:3d:3b:
                    3d:b7:e5:2d:9a:e2:84:ff:16:b5:7e:de:7b:0a:3b:
                    11:ba:f1:54:55:80:1f:d4:80:5f:c5:c6:ad:7c:22:
                    f8:58:70:38:75:8f:1b:27:af:57:b7:3b:3d:b7:48:
                    8c:69:2f:3f:fe:b8:66:b3:92:a3:24:81:2e:a7:0b:
                    33:23:c6:d5:3c:46:21:ad:85:1a:dd:dc:0e:62:74:
                    b1:f8:f2:f7:1c:6a:38:12:c0:25:2f:d3:2b:35:0a:
                    e7:7b:c5:bb:90:ea:04:c8:e4:01:c5:b0:43:c5:6e:
                    c3:7f:eb:68:74:32:dd:1e:80:96:c3:26:06:91:bc:
                    97:d8:5b:40:9d:9f:5f:45:68:ba:a3:74:0b:c9:06:
                    cc:14:4b:4f:3c:44:51:76:6d:a8:78:b7:40:74:18:
                    95:5d:15:8b:79:42:93:eb:dc:f9:c3:93:2e:6d:6e:
                    b5:14:85:0e:44:89:c1:18:07:58:43:81:e9:05:a7:
                    95:93:e8:52:be:6e:cc:e9:e1:dd:85:c7:91:d5:7c:
                    f2:17:af:76:c0:13:cf:45:00:bb:89:0e:07:95:05:
                    9a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D3:A0:19:28:4D:9D:49:19:70:D0:50:7B:6E:73:93:EF:6C:98:83
            X509v3 Authority Key Identifier:
                keyid:BA:11:AE:23:A3:E9:C8:BC:6F:5A:79:C7:15:FA:99:A7:8C:F8:5D:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:4f:1f:b0:b6:a1:12:0d:22:01:3a:f5:8b:f4:01:e0:ad:e0:
         75:43:0e:51:c8:cd:e0:c0:dd:ac:19:e2:07:cc:3a:bb:71:a4:
         24:c0:95:18:ce:e0:8a:48:57:3f:e5:0e:90:72:84:37:3b:fb:
         b8:66:41:8b:42:6c:7f:1e:21:18:64:f7:f8:2f:eb:e6:20:07:
         fe:1e:ee:8c:8a:c9:97:bb:a2:7c:09:9e:30:85:46:d3:8e:b5:
         32:5d:d9:54:e8:bd:95:7c:71:d9:9b:9d:d0:2c:b0:2e:65:89:
         c7:b7:63:d8:5f:7e:5b:aa:4e:92:30:90:bf:3d:d6:3d:3a:49:
         83:b8:cf:46:3f:43:de:99:33:21:12:dd:50:ec:a8:0d:f7:0c:
         65:7e:cd:7f:9f:38:d8:43:71:32:0a:e5:04:0f:c8:15:f1:e3:
         8e:41:c2:65:86:6e:18:cd:3b:05:31:77:19:cc:16:43:2e:8b:
         13:5d:a3:53:81:5e:a7:70:4a:ef:55:a2:2c:80:8d:61:80:1e:
         25:c0:37:ac:1a:58:73:a7:ba:8b:78:c3:2c:d4:0e:d3:25:f0:
         93:e1:80:4d:e9:9c:8f:7a:0b:dc:29:f6:4b:d9:91:56:02:5f:
         8d:3d:bc:44:b0:de:65:6c:8b:68:b3:ad:d8:e6:36:59:89:49:
         62:0a:f3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 15:07:39 2026 by rpki-client