Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
File:                     UJY_Dmf02JPPPXAaI2EObziVkmA.mft (raw, json)
Hash identifier:          nBKeqUXNfgpoWN9KZ5G5fN3qz2oZId/TD0IW3tndBPY=
Subject key identifier:   59:FF:76:72:08:23:B3:14:0B:77:6D:0A:9D:30:B1:2B:01:5F:2C:49
Authority key identifier: 50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
Certificate issuer:       /CN=50963f0e67f4d893cf3d701a23610e6f38959260
Certificate serial:       01A0B5AD783EEB9673334011256BAD2B6038
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
Manifest number:          0991
Signing time:             Fri 18 Sep 2026 18:00:39 +0000
Manifest this update:     Fri 18 Sep 2026 18:00:39 +0000
Manifest next update:     Sat 19 Sep 2026 18:00:39 +0000
Files and hashes:         1: 1QoJ4_QLDS8eoUu-jsU6CKTeJ0E.roa (hash: YdO1HiNE8mqcRJU9ltW5QnoiKSnwfSL0ojQXRoxTalo=)
                          2: UJY_Dmf02JPPPXAaI2EObziVkmA.crl (hash: XkBWGugL9s3fgMj3koQM+hHL0KNcbUqstMgzl38+ilQ=)
                          3: djBGBe9HqvFt7_WabJRUgnTlUhU.roa (hash: n0zVn2aXvua0NDEZjxIxFHxOhEeyIZrC4KOQSbouI7k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 16:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b5:ad:78:3e:eb:96:73:33:40:11:25:6b:ad:2b:60:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50963f0e67f4d893cf3d701a23610e6f38959260
        Validity
            Not Before: Sep 18 18:00:39 2026 GMT
            Not After : Sep 19 18:00:39 2026 GMT
        Subject: CN=59ff76720823b3140b776d0a9d30b12b015f2c49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:0c:06:a6:e5:10:fd:fb:a9:0c:13:c6:a5:21:
                    d7:b3:49:df:5d:92:76:6d:82:44:c9:d0:4e:8f:3f:
                    18:4d:ff:8e:52:73:39:b5:d7:7c:ec:36:f0:51:59:
                    09:a2:47:a4:6a:26:b4:f5:41:3b:24:38:a0:b1:a5:
                    1b:9f:e9:0d:28:5e:d2:57:80:61:a0:5a:4f:2d:66:
                    91:fd:af:d5:32:63:ec:2a:a9:0f:3a:a5:0a:62:5c:
                    08:b2:36:6a:ed:02:46:cb:f9:30:ab:fb:d2:1e:98:
                    f7:e6:ee:7e:26:a8:c9:56:f6:2e:bc:f7:f4:ec:44:
                    97:2e:4c:ac:c9:0a:88:50:89:22:c7:a2:0e:d3:c3:
                    37:43:fb:46:64:48:78:e6:d7:d3:fb:9e:ba:e5:aa:
                    ea:71:8b:16:4f:4a:fc:86:27:e4:e3:69:81:d3:6c:
                    c3:d9:41:99:e4:07:e5:0d:88:88:2d:a8:91:32:f6:
                    c0:92:5b:a0:92:6c:0f:eb:8e:59:bd:ee:1f:f8:be:
                    a1:25:22:54:3a:c0:a3:87:d3:fa:5e:ef:db:e2:0b:
                    39:7f:e9:ea:1c:4f:75:6f:aa:c1:2c:9d:30:e3:24:
                    df:4e:ec:f9:26:b2:e9:fa:63:4a:44:c7:c5:12:b4:
                    bf:ac:ef:ea:b6:d8:bb:52:c2:07:99:c0:b1:d9:e7:
                    3a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FF:76:72:08:23:B3:14:0B:77:6D:0A:9D:30:B1:2B:01:5F:2C:49
            X509v3 Authority Key Identifier:
                keyid:50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:d9:fa:b5:51:ef:5d:25:10:07:8a:a3:a4:d9:39:88:ce:2a:
         03:8a:f0:9b:68:39:00:b3:d3:c6:8b:e8:86:c4:0d:47:1e:2c:
         81:82:af:11:a1:85:fc:ed:59:88:de:e9:37:67:13:38:47:17:
         49:6c:c1:31:a7:b2:e8:84:61:1d:95:6f:5e:d9:73:37:39:c8:
         82:2b:3b:ac:d9:a6:03:ef:02:1e:19:48:f2:ce:66:3e:6b:d7:
         79:02:60:be:47:05:57:00:64:94:7d:12:71:fd:07:83:99:95:
         58:20:60:63:a2:34:6e:2d:c3:85:a5:16:3d:25:d3:4e:be:77:
         c6:06:93:64:da:ab:86:92:75:3a:e7:4e:5a:49:1d:6f:cf:48:
         e0:2a:05:f9:80:2f:01:ae:ac:60:d9:3f:e2:a5:6b:b3:b5:2b:
         6f:8f:01:61:91:07:0f:80:9a:75:eb:59:b3:7c:e7:33:4a:5b:
         37:17:96:9c:e4:7f:a7:aa:1a:99:b5:36:2c:7e:4f:4b:2b:58:
         08:5d:89:25:ed:29:ab:ca:2f:81:52:e3:ab:f9:30:43:50:a4:
         ec:40:23:6e:a2:99:3f:67:38:98:a9:0b:b4:09:9b:3d:44:03:
         7f:b7:7e:b1:cb:19:7b:67:56:e8:1c:32:89:32:70:55:0b:f6:
         ac:a8:d2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 00:33:29 2026 by rpki-client