Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.mft
File:                     uCLebF2ewIbZ0gGrbaVr08_v8kM.mft (raw, json)
Hash identifier:          QaE0C+f+okq/kEuC23cOCiTx1LZSdOBNuKfMiITh7ug=
Subject key identifier:   8C:34:19:50:0E:6E:A2:4E:D9:F6:E3:59:3F:9F:49:AF:E7:23:EC:B6
Authority key identifier: B8:22:DE:6C:5D:9E:C0:86:D9:D2:01:AB:6D:A5:6B:D3:CF:EF:F2:43
Certificate issuer:       /CN=b822de6c5d9ec086d9d201ab6da56bd3cfeff243
Certificate serial:       01A10248DA755697240662DA2283A4A18747
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uCLebF2ewIbZ0gGrbaVr08_v8kM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.mft
Manifest number:          029D
Signing time:             Sat 03 Oct 2026 15:01:31 +0000
Manifest this update:     Sat 03 Oct 2026 15:01:31 +0000
Manifest next update:     Sun 04 Oct 2026 15:01:31 +0000
Files and hashes:         1: fJN7PYZX9Sr-HX_3erhR56oW5z4.roa (hash: 62V7rj0IiHO0OW2XHO1iINDHqaR8ItLLbYMYozGGFjw=)
                          2: uCLebF2ewIbZ0gGrbaVr08_v8kM.crl (hash: 3x/N4y2npt1RpkdBdshyttkWqjE2DV6KsQ8uEcmJNVY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uCLebF2ewIbZ0gGrbaVr08_v8kM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 11:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:02:48:da:75:56:97:24:06:62:da:22:83:a4:a1:87:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b822de6c5d9ec086d9d201ab6da56bd3cfeff243
        Validity
            Not Before: Oct  3 15:01:31 2026 GMT
            Not After : Oct  4 15:01:31 2026 GMT
        Subject: CN=8c3419500e6ea24ed9f6e3593f9f49afe723ecb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:76:8e:c1:b2:96:8f:50:ee:6e:02:a1:11:69:
                    fa:85:aa:8e:89:36:60:c4:19:05:45:65:0f:d5:d1:
                    f7:53:fb:aa:2d:fd:80:36:30:d1:59:38:aa:bf:07:
                    ef:c1:f5:67:41:2e:e6:9d:be:af:66:5b:6a:d2:61:
                    36:a9:f6:eb:50:54:7d:b2:d2:01:84:77:6f:32:8f:
                    11:12:fa:7f:f5:45:bc:10:bd:b5:80:dc:67:45:f2:
                    07:7d:7c:27:c9:71:d5:1d:9e:7c:85:83:d0:df:1a:
                    18:4d:b1:14:83:fd:74:f2:e6:1f:3d:8c:17:f8:77:
                    54:7f:3f:e1:11:a7:71:69:44:2a:54:49:fa:b6:b5:
                    30:d0:34:99:3c:da:44:17:92:b5:b8:7b:da:ed:65:
                    d4:a9:40:ec:47:e4:d5:9b:96:8d:1e:46:16:ca:a4:
                    ae:63:89:de:c7:a7:3f:77:3b:c0:5b:41:67:c6:25:
                    c0:d2:90:3d:a4:71:4a:b0:c3:b8:12:47:e6:9c:9f:
                    33:5b:6c:cf:0e:24:0c:08:a4:33:51:d4:2d:a3:24:
                    da:d0:88:7f:b8:de:44:56:28:f0:98:97:bd:aa:db:
                    52:23:46:48:b1:03:12:6f:4b:65:57:d8:e2:ac:be:
                    fc:b8:f8:c5:f1:bf:fd:c2:62:e4:b3:86:d9:35:88:
                    e2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:34:19:50:0E:6E:A2:4E:D9:F6:E3:59:3F:9F:49:AF:E7:23:EC:B6
            X509v3 Authority Key Identifier:
                keyid:B8:22:DE:6C:5D:9E:C0:86:D9:D2:01:AB:6D:A5:6B:D3:CF:EF:F2:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCLebF2ewIbZ0gGrbaVr08_v8kM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:4f:ae:ba:94:10:18:08:7a:00:61:05:05:dc:e3:53:3f:03:
         9b:76:a0:17:72:d8:f0:5b:65:1d:1b:18:7a:24:bb:6b:74:87:
         b7:8a:15:a9:77:de:7f:22:c3:34:1e:34:2e:97:37:fd:dd:58:
         bf:83:71:ae:2c:bc:6c:e9:7e:76:ef:2a:52:f4:d5:ef:8f:72:
         d8:5e:1d:5d:ce:b6:cb:85:e1:41:b9:08:8c:9e:d6:d7:62:e7:
         e5:a0:70:cf:bd:57:74:69:de:25:ff:e0:ee:42:2d:fd:cc:03:
         84:ee:c6:99:d9:e8:bc:ea:7f:9b:95:f6:b3:8c:2b:10:e6:e6:
         74:c0:79:43:01:eb:84:72:5e:15:cd:4b:56:c6:66:c9:61:f1:
         f2:f5:c8:c6:8b:a5:2c:19:74:c7:16:0b:01:77:84:37:dd:50:
         6e:40:13:01:b7:b7:f5:62:a5:72:ee:b4:5e:9a:11:8b:24:a3:
         f5:7b:1c:5e:79:44:d3:7d:e9:a5:ca:59:0f:9a:5b:13:bd:a6:
         e8:d0:7d:f4:48:e4:10:2a:c7:2f:fd:0a:2f:45:95:3f:c0:33:
         f7:69:74:31:1e:5a:56:bd:75:6b:ef:51:9f:b4:9c:03:be:78:
         6e:b9:3e:73:1c:88:66:d6:55:19:d7:d1:1d:e4:70:ce:f5:95:
         fb:fb:6c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 20:17:52 2026 by rpki-client