Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
File:                     uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft (raw, json)
Hash identifier:          S0+eUGpyGXk6KOzEZeRA2nP4rveJz86I+bFCQ54Ng+I=
Subject key identifier:   63:35:42:18:95:74:BB:F3:1B:45:F9:72:C3:62:0E:AD:31:39:9A:F9
Authority key identifier: B8:E0:F7:98:41:C0:21:0D:95:B4:EF:56:FF:68:44:1C:2A:A9:FC:0F
Certificate issuer:       /CN=b8e0f79841c0210d95b4ef56ff68441c2aa9fc0f
Certificate serial:       01A0D9176685C1AA01B64338F7534E434C6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
Manifest number:          1A71
Signing time:             Fri 25 Sep 2026 15:03:04 +0000
Manifest this update:     Fri 25 Sep 2026 15:03:04 +0000
Manifest next update:     Sat 26 Sep 2026 15:03:04 +0000
Files and hashes:         1: AXJwwgLV20qOfdiRkcLp7cuyLa8.roa (hash: TJd1vyVMSaddwqO1mLObhJwRHoC09A1cxMdzGIXMVxA=)
                          2: JVhM3Ybetfs8u4lZCxCSpx8pJdU.roa (hash: qDG/lBnPGvBdowawU0zXsB0DnTTCTXSKOxuDVEvE+Lw=)
                          3: JciEJIGTlcBIQFyaMf4k2cUulG0.roa (hash: PsuB426mDHmj/nCSN0DLQAoyVz9KEoXVW/4qNh6n7rE=)
                          4: uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl (hash: QspjPHPX0YsXlVZ3OSVf5t31B7IHlhU6TXly60e56QI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:17:66:85:c1:aa:01:b6:43:38:f7:53:4e:43:4c:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8e0f79841c0210d95b4ef56ff68441c2aa9fc0f
        Validity
            Not Before: Sep 25 15:03:04 2026 GMT
            Not After : Sep 26 15:03:04 2026 GMT
        Subject: CN=633542189574bbf31b45f972c3620ead31399af9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a1:18:ab:08:cc:81:06:7d:40:66:22:22:42:
                    88:58:be:3e:86:90:8e:d3:ab:9d:26:22:97:04:67:
                    91:c8:01:5b:e5:81:d0:97:ec:2b:64:ea:06:26:37:
                    dc:e0:5d:e0:ff:65:f1:06:dc:23:08:e5:7c:2e:0e:
                    60:27:8e:d1:67:c9:29:88:9b:50:0e:d7:b6:3d:a8:
                    a3:7c:12:37:f1:e9:0a:2d:0c:b4:84:f3:35:50:d8:
                    ef:b9:97:90:6e:05:b6:68:37:60:09:e3:5b:79:c9:
                    1d:e6:3b:22:f0:f0:9c:df:2b:c3:11:ee:8e:bd:39:
                    c0:59:ad:ca:81:f7:c4:be:c8:41:a5:7c:68:01:ed:
                    c0:4f:e1:ae:bd:13:97:4f:51:f1:1e:21:8d:67:07:
                    54:dd:0c:eb:64:29:3c:9a:cf:6b:22:59:0d:d6:68:
                    39:d4:b0:90:ca:5e:47:de:19:6c:23:2e:4a:be:06:
                    30:a5:8d:93:87:9b:6e:86:1e:00:78:64:bf:61:da:
                    71:af:f9:d1:74:dc:1d:19:dc:57:e0:a0:d7:65:df:
                    af:80:9e:bf:bc:3c:59:ae:32:0c:e0:f7:8c:96:f4:
                    ed:20:b2:ff:8c:26:41:70:27:5b:b4:46:25:b8:68:
                    75:5c:1e:40:41:42:aa:0f:85:6d:75:c1:3d:86:c9:
                    45:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:35:42:18:95:74:BB:F3:1B:45:F9:72:C3:62:0E:AD:31:39:9A:F9
            X509v3 Authority Key Identifier:
                keyid:B8:E0:F7:98:41:C0:21:0D:95:B4:EF:56:FF:68:44:1C:2A:A9:FC:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:29:35:76:6b:15:23:1a:2a:a2:ab:3e:45:6a:cf:0f:73:09:
         82:65:d5:c5:0f:eb:36:03:e1:b5:e7:72:c2:e7:72:10:29:da:
         75:c1:2b:5d:2f:8c:71:12:3a:11:d8:4a:41:77:2e:a9:b0:28:
         75:63:89:29:5c:99:f7:40:c2:4c:d7:3a:30:86:bb:38:53:39:
         57:13:03:c1:6b:e2:f5:08:ff:23:73:07:69:2d:b1:61:4a:c2:
         c7:e6:ce:39:21:49:29:22:1b:be:e6:f0:e3:58:d0:18:f5:33:
         67:e9:a3:5d:cf:1d:1c:e5:9d:e5:5e:61:d6:66:36:5e:e6:c1:
         20:f6:a1:27:a1:2b:07:6b:1d:f4:2c:54:ee:4e:44:bd:71:fa:
         cd:95:ac:51:f3:01:56:ad:20:d7:e5:20:9e:47:72:7d:ed:00:
         9d:49:12:16:6d:57:a0:8e:da:b9:a7:75:5e:b8:ab:b1:0f:90:
         77:7b:d8:75:9c:d7:2e:c1:ae:23:0a:18:70:96:01:d5:03:38:
         82:47:d8:c7:48:9f:18:c0:e9:a5:37:8d:c7:37:5c:3f:08:c7:
         d9:10:96:ac:ff:c2:6c:bd:5f:82:4d:f2:07:17:2f:38:7c:63:
         a1:cc:89:94:10:ae:3b:47:e8:f0:27:e3:40:3e:44:7e:81:e9:
         fd:b4:3b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:17:11 2026 by rpki-client