Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
File:                     UF4vLV5wk_-NQAOgK30-ExznChI.mft (raw, json)
Hash identifier:          VQtdgQvG7oezA917lGLyNbRQIJejPjHbtAO3ZPR1rcM=
Subject key identifier:   30:00:B9:11:5B:FF:20:56:8C:91:6B:DB:40:5F:A0:21:8B:1A:C8:4B
Authority key identifier: 50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
Certificate issuer:       /CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Certificate serial:       01A1046DE4511C79E45E2D823B2415160484
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
Manifest number:          1116
Signing time:             Sun 04 Oct 2026 01:01:12 +0000
Manifest this update:     Sun 04 Oct 2026 01:01:12 +0000
Manifest next update:     Mon 05 Oct 2026 01:01:12 +0000
Files and hashes:         1: BBEExDLi9wN2ArwpnoUathyZ5G4.roa (hash: DNC51vwYFelu0Iw03W6o2j0OpPGTm67rvC5dlIgn/R0=)
                          2: B_hvqyRv6JLmJCV1iTWTImKLqvw.roa (hash: TWMSz8xRjNA5aPk12IuqB7yBAlzSjyaKWTWQ7yxehNE=)
                          3: UF4vLV5wk_-NQAOgK30-ExznChI.crl (hash: 9HdmpPlvpvJIFrQF3H61FJKa++NjmL04LALqxqYiZUQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 01:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:04:6d:e4:51:1c:79:e4:5e:2d:82:3b:24:15:16:04:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
        Validity
            Not Before: Oct  4 01:01:12 2026 GMT
            Not After : Oct  5 01:01:12 2026 GMT
        Subject: CN=3000b9115bff20568c916bdb405fa0218b1ac84b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bb:fe:55:38:6a:b7:e1:2f:78:c8:d1:b2:b1:
                    b0:85:87:bd:6a:b5:eb:a9:e7:42:df:e7:11:aa:3e:
                    ed:93:d1:fc:11:ee:cd:69:ab:dd:8f:44:e6:4c:7c:
                    43:c3:e2:71:4b:2c:8a:8e:b4:4d:e4:98:61:87:bf:
                    81:96:07:86:9c:9f:e2:fc:be:78:48:3f:c8:26:3a:
                    cc:24:c9:b1:4d:ef:86:64:e8:16:af:92:7a:a1:17:
                    25:cb:99:2d:a3:fd:51:8c:04:a2:f2:87:6b:68:ee:
                    c0:34:e8:9d:5a:ee:4f:1a:07:b4:09:e9:6c:1b:fa:
                    7d:cd:62:e0:56:2f:1f:7a:3a:2e:e4:75:d8:1e:2a:
                    eb:20:74:29:9b:91:c0:58:81:b9:f5:14:f8:27:3f:
                    2c:34:1e:e2:0f:e8:62:18:93:31:69:13:7d:40:5f:
                    16:35:05:01:04:3d:3f:db:7c:fc:48:d2:1a:39:0f:
                    1e:52:7f:6d:e7:62:f9:97:1f:ee:e0:60:de:de:c4:
                    e3:ec:bd:b3:cb:97:e5:84:f5:f8:a7:72:80:e5:40:
                    77:b6:8d:75:23:e3:c3:cd:00:e0:bf:2d:4f:6f:b2:
                    30:9d:f9:c9:cb:9b:84:9d:71:d1:b2:58:7b:73:2e:
                    63:ee:fe:05:b6:53:18:68:10:0a:c3:b0:a7:b0:1d:
                    49:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:00:B9:11:5B:FF:20:56:8C:91:6B:DB:40:5F:A0:21:8B:1A:C8:4B
            X509v3 Authority Key Identifier:
                keyid:50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:77:84:3f:c1:05:3f:8f:cc:31:de:54:5e:3c:0c:b2:49:38:
         6d:f6:de:39:f3:9a:b0:3a:9c:28:84:d0:0e:19:29:03:da:c4:
         1b:dc:13:6a:1b:39:0c:2c:ef:00:4b:62:92:32:c8:a6:63:16:
         3a:16:03:f7:00:64:e9:21:95:d5:ad:31:49:87:df:ba:5b:b9:
         fe:b5:b3:c8:af:ec:67:d9:71:ac:8c:cd:c9:7f:4d:6a:13:a9:
         56:de:e3:20:0a:aa:79:dd:5c:39:58:c6:4d:93:c2:04:d8:28:
         2d:9b:e3:30:c8:21:76:9b:9e:22:e3:f7:1e:a6:c7:ff:03:61:
         e1:96:27:30:d3:c0:72:7d:a7:69:5f:52:f4:53:5c:20:4d:6e:
         32:a0:e5:b5:cf:ef:7c:ca:58:6c:99:5f:df:b1:8b:88:f5:4d:
         2a:fc:b9:80:c2:7f:5a:7c:42:a6:38:24:bf:a6:c6:e3:4a:d8:
         c0:a5:63:f8:d9:27:b1:c3:33:75:ad:dc:a6:32:a6:37:48:ff:
         e1:aa:b0:0b:37:56:41:be:8d:85:ff:cd:e4:0e:a9:8a:56:9c:
         cf:0f:10:1f:14:c3:f6:1f:2d:8f:8d:94:57:78:26:31:02:65:
         ba:25:27:86:9f:e2:b3:28:1b:af:99:f3:0e:84:a1:6b:f5:28:
         76:b8:e4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:54:47 2026 by rpki-client