Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
File:                     UxIuA6hBuIeJY6__9pXKT5_QaCw.mft (raw, json)
Hash identifier:          9qo9Zy+90yUy4BeSVKE9DjSybM+D5awe2EQXW8XDbK8=
Subject key identifier:   FC:F3:24:7F:E9:3A:53:DB:0A:01:9B:7B:55:51:96:EB:64:B4:D4:93
Authority key identifier: 53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
Certificate issuer:       /CN=53122e03a841b8878963affff695ca4f9fd0682c
Certificate serial:       01A0E02A912B0DEC71BFD9B9C1C73EA751AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
Manifest number:          1388
Signing time:             Sun 27 Sep 2026 00:01:21 +0000
Manifest this update:     Sun 27 Sep 2026 00:01:21 +0000
Manifest next update:     Mon 28 Sep 2026 00:01:21 +0000
Files and hashes:         1: UjFdhEdt4WKlDSIUUurW21paKp4.roa (hash: fDRm4GJe+GCEFChs7oH68Gzn9XNFPr0wdWmaIX+37oo=)
                          2: UxIuA6hBuIeJY6__9pXKT5_QaCw.crl (hash: ar50tNg9N3dyIga02WQdiyMlgCB3V04Vr027s5JR8W4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e0:2a:91:2b:0d:ec:71:bf:d9:b9:c1:c7:3e:a7:51:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53122e03a841b8878963affff695ca4f9fd0682c
        Validity
            Not Before: Sep 27 00:01:21 2026 GMT
            Not After : Sep 28 00:01:21 2026 GMT
        Subject: CN=fcf3247fe93a53db0a019b7b555196eb64b4d493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c6:30:51:c4:d1:cb:30:42:f1:e4:2c:6c:f9:
                    3c:28:89:b1:df:60:e8:2f:48:b1:4d:f2:d4:f9:3d:
                    b3:3f:2b:cd:c2:8a:b8:09:de:5e:1a:6e:b4:70:c6:
                    8d:62:1c:f8:48:62:3a:42:08:75:ab:49:34:ef:b9:
                    f3:dc:05:ef:89:66:47:cf:5b:55:23:27:2d:ac:7d:
                    af:46:b6:db:d5:8c:b1:04:0b:71:19:68:e4:0e:23:
                    3e:0f:75:b9:07:71:3c:0e:ac:6c:12:46:8c:0e:f0:
                    fe:d1:8d:60:ae:27:ca:e9:bb:29:87:c1:c3:68:e3:
                    93:88:6d:e6:e9:f3:ec:bd:f8:a8:c1:72:00:cd:a7:
                    30:34:a5:6a:13:53:46:2d:56:cb:d6:f0:89:84:38:
                    36:2b:8c:2b:b4:aa:f1:cc:9e:63:8f:3d:d5:65:0e:
                    01:a4:77:10:9f:4f:87:d1:12:e4:63:d1:1b:99:34:
                    24:14:80:5b:e7:88:b9:57:cf:87:f8:d3:01:49:43:
                    5c:39:5b:1b:81:a3:c9:34:86:91:2e:92:bb:62:9a:
                    e2:be:d2:db:20:34:8b:26:d6:11:b9:bf:9f:a0:7f:
                    7e:c0:92:9f:ba:2a:85:96:4e:69:f3:83:32:65:46:
                    dc:b9:ae:64:76:2e:a1:2f:87:69:87:9c:e6:2c:13:
                    0c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F3:24:7F:E9:3A:53:DB:0A:01:9B:7B:55:51:96:EB:64:B4:D4:93
            X509v3 Authority Key Identifier:
                keyid:53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:e4:b0:84:20:38:24:80:19:a5:80:f5:b0:7f:3f:95:34:54:
         d4:7a:35:c9:6a:0a:c0:a8:4c:84:04:3e:89:4c:b8:30:42:2d:
         36:21:23:0a:ba:45:96:d0:cf:d1:4a:a5:90:d5:c8:2a:cb:31:
         66:eb:9e:3e:bc:b4:8b:f4:fc:79:70:62:b1:bd:c1:f2:59:aa:
         5e:54:4a:3b:61:cc:dc:12:5c:d6:5d:12:dd:9c:ab:eb:85:ee:
         be:e3:c7:79:f8:8f:2a:22:e6:dc:75:9e:c2:b2:3d:79:1b:56:
         de:c6:58:12:bd:27:ab:f4:73:57:da:68:3a:2a:55:64:6c:cc:
         dd:66:06:31:b2:44:b2:44:49:f8:aa:45:81:e3:e5:0b:73:ff:
         92:dc:1a:01:85:9a:87:5d:be:1d:c8:e6:0c:ee:aa:4c:f0:39:
         c3:b3:71:a8:ad:13:13:70:d9:39:28:14:83:2d:b6:5e:b4:08:
         db:a6:ce:ed:44:02:81:bf:05:ff:c7:7b:2a:a7:8a:25:2b:b2:
         0a:a9:9d:bf:1d:0d:0d:00:a4:54:64:ea:57:2e:d3:53:b8:ca:
         d0:26:66:a1:3a:de:db:5e:d1:05:db:9d:c8:1a:92:a7:cf:fa:
         62:4c:a2:41:9c:98:9d:19:f8:d3:65:77:87:99:d5:b2:5f:96:
         81:e0:d6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:12:00 2026 by rpki-client