Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft
File:                     uhfrfV8E0nFV8gF4bzkPtAimquQ.mft (raw, json)
Hash identifier:          LTna8uxZhuohlkI9wtTMQdCWgIiJEVsMiTv2tbTMSFY=
Subject key identifier:   BF:5E:E2:7C:9B:3F:50:A1:EE:7A:04:81:A9:02:52:7D:14:7C:5B:57
Authority key identifier: BA:17:EB:7D:5F:04:D2:71:55:F2:01:78:6F:39:0F:B4:08:A6:AA:E4
Certificate issuer:       /CN=ba17eb7d5f04d27155f201786f390fb408a6aae4
Certificate serial:       01A06EA71B5221748E3F1EB5327B3D047F42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft
Manifest number:          0272
Signing time:             Fri 04 Sep 2026 23:00:40 +0000
Manifest this update:     Fri 04 Sep 2026 23:00:40 +0000
Manifest next update:     Sat 05 Sep 2026 23:00:40 +0000
Files and hashes:         1: 0yT0OXiNw9csRLbDIHPuRhRNJuA.roa (hash: V99TnpgsuLfThbZigceHdcceXYaalafIhYll4v0qF0s=)
                          2: uhfrfV8E0nFV8gF4bzkPtAimquQ.crl (hash: 35gGierTCyGeUS9A3EdyQiUUMNxcUBteuV2q/iCTaSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:a7:1b:52:21:74:8e:3f:1e:b5:32:7b:3d:04:7f:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba17eb7d5f04d27155f201786f390fb408a6aae4
        Validity
            Not Before: Sep  4 23:00:40 2026 GMT
            Not After : Sep  5 23:00:40 2026 GMT
        Subject: CN=bf5ee27c9b3f50a1ee7a0481a902527d147c5b57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:73:99:11:97:b4:35:51:a6:6e:c9:96:6c:10:
                    f9:9a:59:2e:43:d9:42:14:3e:e1:2c:19:61:47:e9:
                    4a:78:3e:e8:05:97:61:93:bd:a0:4f:74:bd:0d:63:
                    6d:e5:57:3b:0c:fe:96:51:d9:5d:2e:11:3f:f2:ec:
                    6c:78:13:2c:0c:58:d9:a4:94:c2:1e:9f:c0:7b:6a:
                    63:f5:61:f8:20:81:67:01:c7:f8:0b:37:fe:9e:54:
                    c1:07:dc:49:6f:36:53:25:9f:bd:d3:84:36:9a:31:
                    46:02:c4:05:55:e8:66:fe:96:9e:a6:5f:72:f8:ad:
                    5b:5c:a8:a8:80:bf:e8:d3:eb:a6:f0:f9:02:87:b9:
                    11:ab:c1:ab:5a:05:17:ee:23:99:3c:0e:db:e7:4d:
                    47:ca:c9:09:a1:fd:ce:2c:56:50:60:bc:21:fc:01:
                    e5:81:69:be:c3:5f:0d:9a:99:3a:4e:ab:8c:4a:8d:
                    db:d6:01:eb:8b:e4:2f:c7:50:0e:6f:b8:3f:75:95:
                    57:d3:86:a7:0b:4a:d2:c2:3e:ab:34:3b:80:55:9f:
                    10:71:63:7c:7a:7a:0d:7c:9c:21:d7:e5:a9:77:01:
                    10:22:91:2c:c6:df:7e:91:97:da:54:33:d5:05:0f:
                    9f:b4:7f:2f:78:6e:ed:72:ac:fe:d8:fe:23:30:46:
                    4d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:5E:E2:7C:9B:3F:50:A1:EE:7A:04:81:A9:02:52:7D:14:7C:5B:57
            X509v3 Authority Key Identifier:
                keyid:BA:17:EB:7D:5F:04:D2:71:55:F2:01:78:6F:39:0F:B4:08:A6:AA:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:85:75:22:a9:37:87:d8:66:81:08:df:63:7a:00:6e:6c:de:
         61:0a:79:4e:b1:6d:fd:71:c5:38:26:a2:02:1b:ce:8f:c8:51:
         b4:be:7f:db:35:2a:08:74:f3:97:09:15:30:4d:d2:71:d5:4e:
         92:dd:94:f6:4c:8d:17:1f:3a:ec:c4:79:be:a5:73:7d:e3:1d:
         42:66:08:e0:b9:89:e4:66:d1:67:85:bb:80:dc:19:69:4e:4f:
         2a:aa:26:40:f7:0c:b3:3e:4b:48:4b:98:52:47:3a:2c:83:39:
         f2:9c:f4:0d:21:04:c5:12:cb:a7:52:4a:7e:5d:32:d1:41:24:
         09:96:eb:a5:1d:21:ad:cc:12:4f:7b:00:66:32:28:e0:52:b8:
         e9:9e:b9:04:86:bb:0e:eb:f5:2d:28:c3:cc:13:c4:0b:52:92:
         0f:93:32:b5:c2:fc:82:e9:de:a0:37:77:92:81:1d:e4:a1:62:
         9b:fa:ac:7e:5a:68:0f:13:2d:bd:5a:68:3b:c8:48:f1:e9:fd:
         47:df:ef:f8:2c:68:9a:44:34:78:f2:07:01:62:2a:ab:56:5f:
         89:c1:c8:7f:2d:79:95:09:61:44:44:10:3a:a4:f6:e9:83:eb:
         de:f0:63:1f:5b:de:c9:27:50:53:29:4b:66:b5:32:4b:d5:75:
         ff:b5:44:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:22:31 2026 by rpki-client