Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
File:                     UeK-E5rnec09T-68zTaCgaH156A.mft (raw, json)
Hash identifier:          dGKDaWU9zs+5+gGFlCpL4uarTTlCnhusZhjdjXIWPYg=
Subject key identifier:   42:BE:6A:F0:78:F8:FE:41:FD:4C:75:E3:AE:2B:C3:B8:51:9E:E6:20
Authority key identifier: 51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0
Certificate issuer:       /CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
Certificate serial:       01A1062655C214A08E1DCBD6E92987C2F0FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
Manifest number:          1A86
Signing time:             Sun 04 Oct 2026 09:02:17 +0000
Manifest this update:     Sun 04 Oct 2026 09:02:17 +0000
Manifest next update:     Mon 05 Oct 2026 09:02:17 +0000
Files and hashes:         1: Fh1t7rzPIhJXnOEVD4FNHFJov6I.roa (hash: xyxnFW4AuKmT8OTwF87A3TgtZBfvGtO+UCiL5cJIqm4=)
                          2: UeK-E5rnec09T-68zTaCgaH156A.crl (hash: sCr/oJ7e35BLXmApKF+7sTF1s4P+040Xy79syGPi9oc=)
                          3: _FC9hMLG7SF2_l0VnWxgvnPruLU.roa (hash: /T+U+cTcUNtTkJxXrz2mxyyoddVM2fTKoj6v8XpQa6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 05:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:06:26:55:c2:14:a0:8e:1d:cb:d6:e9:29:87:c2:f0:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
        Validity
            Not Before: Oct  4 09:02:17 2026 GMT
            Not After : Oct  5 09:02:17 2026 GMT
        Subject: CN=42be6af078f8fe41fd4c75e3ae2bc3b8519ee620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a2:a1:ae:ae:e1:c9:46:7a:d9:47:d7:99:a2:
                    d7:67:c5:ef:1e:95:82:f2:3d:16:2d:96:ad:12:e8:
                    39:7f:e2:a6:d3:fe:b2:af:6f:0b:47:b9:85:2b:79:
                    8b:67:1a:f7:68:1d:61:7d:75:1d:9c:9a:a5:d5:ce:
                    51:93:e6:4d:0d:1e:ba:67:c6:80:49:73:b5:ca:2f:
                    49:63:53:bb:11:d4:e6:e6:fb:54:b3:d4:57:65:5f:
                    2e:b1:39:6c:ce:26:ee:00:7c:3b:ad:ab:57:90:56:
                    63:9d:c6:86:c6:ae:81:a3:40:28:cb:ad:9f:03:bf:
                    c5:32:8e:3a:66:72:4a:7d:52:15:d6:e1:6a:f3:5e:
                    bf:6f:67:e3:0c:90:1c:0f:e0:d2:76:f1:19:94:09:
                    7b:63:b9:57:3c:95:04:34:b8:b0:2a:fe:db:c6:89:
                    39:08:21:65:cb:29:e1:82:93:6c:61:92:ef:15:15:
                    1d:ae:7e:3f:3e:85:05:9e:6f:f9:e8:e1:63:91:a1:
                    bf:2c:d1:47:61:3d:49:d2:43:70:74:0e:4e:5f:a2:
                    0c:36:70:b7:e7:53:48:9d:a1:69:be:b7:72:f4:bc:
                    a0:c9:a1:3a:27:2b:2c:3b:05:4f:e4:74:48:f7:47:
                    34:cd:51:4f:a7:33:02:2e:f2:b4:24:09:cc:f7:ad:
                    5f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:BE:6A:F0:78:F8:FE:41:FD:4C:75:E3:AE:2B:C3:B8:51:9E:E6:20
            X509v3 Authority Key Identifier:
                keyid:51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:03:13:58:6e:27:c9:9b:21:f1:a7:64:dd:f8:05:db:37:b1:
         89:8e:80:fa:c8:ba:6a:91:cd:54:9b:45:65:9a:30:59:9e:9a:
         2b:af:4a:fa:bc:84:80:30:cf:7c:81:0d:ba:57:f3:6f:54:bd:
         86:3a:98:2b:9e:ca:57:b9:c3:2c:bb:f5:06:28:ac:ba:9d:10:
         f0:4f:bc:61:d5:14:fc:a1:47:a7:48:9a:92:b8:b6:23:f6:c6:
         cf:01:87:4f:93:6f:a0:4a:1b:f1:71:d9:46:82:c2:87:29:da:
         b4:31:12:9e:ca:aa:2d:aa:55:1c:37:3d:58:94:3d:35:ad:9c:
         84:b6:76:ad:aa:25:37:de:47:ff:8c:57:ee:e4:0f:38:50:39:
         3f:d4:cc:0b:8a:2a:9a:04:42:9d:bf:85:52:13:83:1f:8f:b2:
         19:36:22:2e:aa:c4:f2:43:26:86:df:13:e4:8c:ff:e2:73:e0:
         52:18:b4:70:cc:d7:a3:0a:0b:17:7d:0f:26:de:18:c8:d9:9c:
         89:70:1a:d3:9e:b4:77:fb:30:99:9b:ed:97:4d:90:eb:cf:f8:
         f0:ae:39:8a:01:88:c7:9b:56:8d:7a:d9:ae:e3:89:ee:11:90:
         ae:be:03:1c:1e:18:b0:db:17:69:ea:45:97:eb:46:10:a8:a8:
         ad:2f:0e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:38:30 2026 by rpki-client