Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/UDYBHjSAnkd01MnJ8W_KaL24f6o.mft
File:                     UDYBHjSAnkd01MnJ8W_KaL24f6o.mft (raw, json)
Hash identifier:          99MjNH2HIvN9Bh9CPSIkHDzc3Kz1psH3YD4kI3NZme4=
Subject key identifier:   31:C6:6E:E1:5D:63:E8:5F:A0:7F:05:19:D9:67:51:A5:53:48:8F:BD
Authority key identifier: 50:36:01:1E:34:80:9E:47:74:D4:C9:C9:F1:6F:CA:68:BD:B8:7F:AA
Certificate issuer:       /CN=5036011e34809e4774d4c9c9f16fca68bdb87faa
Certificate serial:       01A174391C62DCA98E0297ADB91A104255C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UDYBHjSAnkd01MnJ8W_KaL24f6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/UDYBHjSAnkd01MnJ8W_KaL24f6o.mft
Manifest number:          013A
Signing time:             Sun 25 Oct 2026 18:01:02 +0000
Manifest this update:     Sun 25 Oct 2026 18:01:02 +0000
Manifest next update:     Mon 26 Oct 2026 18:01:02 +0000
Files and hashes:         1: UDYBHjSAnkd01MnJ8W_KaL24f6o.crl (hash: 3xvJViujzqGyZ03+wYNsSpZalNuLSv5hsZl2Rw/tLAM=)
                          2: bEKO1xFyFydQ-qhcqaJLpw9igyY.asa (hash: jR7DlDJeCnwaCJJNmvyvwR2xMQOi7n5oqyxgiOsySVM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/UDYBHjSAnkd01MnJ8W_KaL24f6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/UDYBHjSAnkd01MnJ8W_KaL24f6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UDYBHjSAnkd01MnJ8W_KaL24f6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:74:39:1c:62:dc:a9:8e:02:97:ad:b9:1a:10:42:55:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5036011e34809e4774d4c9c9f16fca68bdb87faa
        Validity
            Not Before: Oct 25 18:01:02 2026 GMT
            Not After : Oct 26 18:01:02 2026 GMT
        Subject: CN=31c66ee15d63e85fa07f0519d96751a553488fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ee:61:ec:94:0b:27:f0:bf:70:fc:8c:f9:0a:
                    94:39:66:2d:de:c5:42:56:84:10:b1:1c:8e:bb:6d:
                    4b:38:d9:b8:28:2b:5f:cb:e4:61:b9:2e:01:94:e2:
                    06:5a:80:f8:1f:b0:e1:fe:f2:15:90:ba:4f:da:aa:
                    4b:16:e7:e1:f8:ee:b4:b4:a1:dd:26:29:eb:ed:d7:
                    72:eb:1e:a3:14:25:ad:45:b6:b9:5b:af:43:ce:76:
                    0a:5e:c3:75:8e:23:2a:8f:5d:74:c9:4c:01:52:ec:
                    7c:de:14:9b:2b:06:e3:1d:6e:07:3b:ab:1f:20:ee:
                    39:49:46:13:ac:3c:9c:cf:b7:df:f1:1c:84:2d:46:
                    11:08:2b:b2:aa:6e:c2:3b:b1:8e:7a:42:84:1e:41:
                    b7:6c:1f:30:e5:8d:3e:f9:00:ee:33:2f:79:28:ed:
                    a8:c8:42:b3:5a:d1:89:ca:89:02:fe:12:b2:81:d5:
                    b6:6e:01:8d:f5:e8:4b:3d:b3:84:04:c9:6b:b6:58:
                    32:72:3d:da:dd:43:db:57:b7:17:5f:11:6a:5d:00:
                    bb:c0:e9:50:dd:f1:94:5f:78:91:5f:84:c9:ed:99:
                    c2:40:99:45:b4:87:73:b5:64:cc:79:80:81:03:68:
                    3e:4f:26:e6:32:43:25:aa:09:bd:1f:e4:85:bf:c4:
                    fe:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C6:6E:E1:5D:63:E8:5F:A0:7F:05:19:D9:67:51:A5:53:48:8F:BD
            X509v3 Authority Key Identifier:
                keyid:50:36:01:1E:34:80:9E:47:74:D4:C9:C9:F1:6F:CA:68:BD:B8:7F:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDYBHjSAnkd01MnJ8W_KaL24f6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/UDYBHjSAnkd01MnJ8W_KaL24f6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/UDYBHjSAnkd01MnJ8W_KaL24f6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:2c:ba:af:2b:a1:35:3e:3a:74:2c:dd:22:1a:6b:bb:12:7c:
         62:7c:04:dd:a8:f0:08:b6:92:1a:7a:9b:6b:d2:8b:e2:75:db:
         d7:03:24:03:18:c5:ec:63:22:8f:41:71:04:cd:d1:4f:9e:5f:
         d1:5f:62:ef:4a:b1:ad:88:08:32:ec:b0:7c:09:8c:2e:1e:06:
         10:48:8a:22:42:7d:38:ca:5d:f4:d1:07:70:39:83:4e:f7:57:
         07:8a:0d:e9:6c:f8:81:c0:6a:f8:4e:1f:d9:a7:11:44:d0:92:
         cd:5a:7b:50:9a:48:54:eb:a4:d5:e3:68:0f:b6:00:be:f2:ce:
         9a:be:91:47:07:f2:9e:74:13:8b:b9:d7:ae:89:9d:64:c0:a5:
         83:2d:7d:de:55:19:b4:51:28:1f:37:99:f9:cd:67:ee:b4:9f:
         4b:55:b3:0f:97:fe:8e:3a:0f:b7:1a:13:70:58:24:a9:b2:75:
         53:5e:8d:98:26:f5:5b:2f:70:04:08:e4:1f:ee:53:d6:03:84:
         6a:73:cd:af:ff:2d:c9:9c:d2:c1:26:8e:94:51:92:5a:09:d1:
         f0:f2:4d:b5:62:bc:f2:22:bb:d1:08:b3:b0:25:5f:92:13:61:
         c7:e3:e2:b5:0c:7c:79:b8:62:ea:6d:49:e5:45:df:1c:9d:98:
         43:d0:a6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:19:34 2026 by rpki-client