Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
File:                     UiezboKeTYVl7WV0jhsck8zQDO4.mft (raw, json)
Hash identifier:          uZ4icpk0RngU9Y7NX4mA2FN0JsjZSk+z6/lP3G+gq/4=
Subject key identifier:   57:EC:C2:0E:0A:20:8C:4D:A4:1E:1C:39:7B:60:EF:9F:2D:02:5D:40
Authority key identifier: 52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE
Certificate issuer:       /CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee
Certificate serial:       01A00213CF0E1BA25C05A7B9E300F513DEE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
Manifest number:          1414
Signing time:             Fri 14 Aug 2026 21:00:47 +0000
Manifest this update:     Fri 14 Aug 2026 21:00:47 +0000
Manifest next update:     Sat 15 Aug 2026 21:00:47 +0000
Files and hashes:         1: P5QGU51MBWbq811ui2M903jDzeM.roa (hash: cl6QRl57KjA79TtkotpuwrlWUT5toZEw0rnOBUVQkL8=)
                          2: UiezboKeTYVl7WV0jhsck8zQDO4.crl (hash: B1nM9oGyh1aADMZW+2IwosnDTyQBP3m7vz4UIZVlVtE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:13:cf:0e:1b:a2:5c:05:a7:b9:e3:00:f5:13:de:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee
        Validity
            Not Before: Aug 14 21:00:47 2026 GMT
            Not After : Aug 15 21:00:47 2026 GMT
        Subject: CN=57ecc20e0a208c4da41e1c397b60ef9f2d025d40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1b:fd:3b:04:14:28:9a:20:3e:6e:2a:48:31:
                    39:cd:5e:69:e2:84:ce:91:d1:db:6e:ea:1a:25:1b:
                    d7:c7:01:42:6b:1f:c2:68:4a:58:28:85:c2:37:1a:
                    4c:41:ef:2f:09:ff:09:55:df:6d:9a:8e:4d:11:e0:
                    d6:41:a6:38:cd:7f:f5:f4:7c:d9:77:41:63:a9:9e:
                    c0:09:05:32:c9:7a:1f:f5:d8:95:20:84:9b:67:e4:
                    75:da:a4:96:8b:5b:bc:68:68:00:f5:71:4e:30:7a:
                    e6:83:1d:50:11:e6:a0:a9:80:3d:21:62:d4:73:98:
                    94:ed:77:9e:97:2b:e2:17:9b:ce:2a:9b:f5:ba:77:
                    b5:21:60:fe:08:c1:04:08:52:19:2e:ee:94:63:53:
                    59:1b:7f:2a:0d:24:52:8f:e2:a9:55:5b:12:87:80:
                    0b:5e:50:f0:5c:ab:a5:0d:83:d1:28:5c:83:5b:31:
                    09:bd:b2:da:12:bd:8f:a7:2d:dd:23:bf:a1:b9:1c:
                    7f:f3:e1:c3:e2:07:2b:4b:e5:a0:23:d9:7b:2a:54:
                    41:83:4f:71:06:25:69:9e:96:e0:1b:e7:89:82:02:
                    e8:cc:68:8c:63:5f:55:93:99:5f:3c:2f:46:77:f3:
                    2b:37:1d:59:b4:03:df:7c:bf:07:32:0a:28:17:2d:
                    59:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:EC:C2:0E:0A:20:8C:4D:A4:1E:1C:39:7B:60:EF:9F:2D:02:5D:40
            X509v3 Authority Key Identifier:
                keyid:52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:59:e1:ee:b0:13:63:33:9e:51:b5:b2:08:ca:23:0b:cd:ce:
         43:c4:c6:71:4e:fd:cd:2f:e3:f9:59:26:ae:50:eb:f4:3a:66:
         10:8f:e5:5d:ea:4e:56:66:45:f4:45:a9:1d:12:36:75:fc:0b:
         dc:a5:b6:12:22:06:aa:59:f9:e1:83:dc:a8:15:85:3d:89:1f:
         3b:a7:49:1a:0b:2d:bc:28:90:75:b6:94:a1:d5:30:74:88:51:
         c3:7d:7f:3e:cb:37:ad:17:31:51:f1:a4:f5:7f:2d:0a:8f:2d:
         f8:07:da:21:9c:d6:2e:1f:a6:4b:40:d2:05:78:9b:42:c3:f5:
         c1:46:c8:6f:fc:cc:d8:34:9c:09:7f:4f:7c:8d:dd:df:89:61:
         95:c7:32:10:80:73:2e:03:67:f6:28:92:77:08:00:2a:81:24:
         66:05:f6:3f:46:09:03:d8:43:9e:32:6d:06:78:36:37:f0:88:
         99:33:35:1c:c9:8a:45:a5:73:cd:e6:0c:5d:58:56:f1:28:f8:
         a6:63:70:66:ec:04:fe:a5:00:c0:11:00:ee:f1:e3:6d:97:64:
         9c:6e:06:ab:e0:99:ef:90:2d:5d:51:ef:51:35:40:4b:bc:b8:
         62:b8:ed:6b:b2:a7:f6:4c:2d:f7:e0:61:2e:c2:1f:5c:ce:51:
         b5:ee:18:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:29:21 2026 by rpki-client