Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft
File:                     UAqdaSWQfcZs55keuULmgLE5E6k.mft (raw, json)
Hash identifier:          BIRfEBzNxpq1cPDPepbEp6rsXzAoRGYRa2uG+7jZ0gA=
Subject key identifier:   0C:15:9B:55:5A:7D:A3:43:95:0B:B2:77:8B:37:C1:F8:38:E6:3A:C5
Authority key identifier: 50:0A:9D:69:25:90:7D:C6:6C:E7:99:1E:B9:42:E6:80:B1:39:13:A9
Certificate issuer:       /CN=500a9d6925907dc66ce7991eb942e680b13913a9
Certificate serial:       01A0D3B875DC267D4F18261FCC80EAACC71E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UAqdaSWQfcZs55keuULmgLE5E6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft
Manifest number:          01B3
Signing time:             Thu 24 Sep 2026 14:01:16 +0000
Manifest this update:     Thu 24 Sep 2026 14:01:16 +0000
Manifest next update:     Fri 25 Sep 2026 14:01:16 +0000
Files and hashes:         1: UAqdaSWQfcZs55keuULmgLE5E6k.crl (hash: FrOLCOdqtnRkziY0D1Du5LSNjeLfSu9+WkRvbI5HVtM=)
                          2: XTRFNK15Srj4Dxkx9BJpGhvon9c.roa (hash: 2JtlFPv4dLd8U4gLpBv5lJb7jlDjsUb3MwUWDpaLfmA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UAqdaSWQfcZs55keuULmgLE5E6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:b8:75:dc:26:7d:4f:18:26:1f:cc:80:ea:ac:c7:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500a9d6925907dc66ce7991eb942e680b13913a9
        Validity
            Not Before: Sep 24 14:01:16 2026 GMT
            Not After : Sep 25 14:01:16 2026 GMT
        Subject: CN=0c159b555a7da343950bb2778b37c1f838e63ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:18:6f:2f:48:1e:9b:a1:84:29:55:23:bc:06:
                    62:59:59:e6:50:fa:0d:d5:c0:87:79:dc:26:a6:97:
                    dc:f5:f2:56:18:49:f5:4f:d2:81:82:b2:4b:b3:aa:
                    dc:71:38:05:9e:41:0e:00:2b:16:81:e6:52:79:58:
                    3e:94:9f:3d:7f:d5:cc:f9:71:8e:43:90:ff:b6:93:
                    dd:60:84:11:3b:80:29:46:cf:20:4d:fb:14:b2:c0:
                    03:ce:04:63:30:61:0d:c8:16:99:d2:c8:91:2f:c5:
                    38:86:36:c7:5a:0d:dd:05:b8:f2:28:bc:75:57:b0:
                    b0:27:00:fb:a0:0c:1a:55:16:b1:1f:65:70:fb:17:
                    c6:74:2b:a6:05:4e:95:fc:8d:5f:ce:88:61:69:58:
                    4a:a7:36:8a:21:8b:70:6e:c6:9a:cf:61:8c:d3:46:
                    75:41:41:b7:bb:7a:6b:4a:54:f1:33:c3:bb:60:d4:
                    0e:ea:02:ca:23:a8:43:b3:b4:b1:0e:03:c5:74:9a:
                    14:ab:7f:e6:b8:d4:00:5d:d1:38:39:a7:0a:70:fa:
                    4c:8e:9a:ab:38:6a:e5:ba:15:01:bd:c1:69:7f:68:
                    87:48:45:e2:e6:3f:44:dc:3b:81:e5:ab:69:cd:1a:
                    9c:b1:85:cc:18:31:da:f2:95:a3:48:d5:d4:21:a0:
                    d3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:15:9B:55:5A:7D:A3:43:95:0B:B2:77:8B:37:C1:F8:38:E6:3A:C5
            X509v3 Authority Key Identifier:
                keyid:50:0A:9D:69:25:90:7D:C6:6C:E7:99:1E:B9:42:E6:80:B1:39:13:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAqdaSWQfcZs55keuULmgLE5E6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:f9:2c:24:aa:97:dd:d4:4a:0e:de:98:95:08:d4:29:17:d7:
         f6:6c:d4:56:bb:a8:26:54:e2:9b:ae:d1:aa:55:40:1b:06:7a:
         f7:d1:71:38:fc:3b:38:0d:7e:0a:00:75:8b:64:f3:ae:24:fc:
         5b:b6:63:50:9d:ed:8e:13:13:d7:fd:ab:58:f2:39:ae:4a:bd:
         9c:e7:1d:e2:f1:a4:ea:bd:94:b5:0c:6a:a5:42:40:14:2f:46:
         33:ee:7f:80:22:38:1c:70:1c:da:7a:8f:ce:d0:a4:7b:6f:3f:
         7f:fe:a3:a8:e0:f7:96:7d:a8:c8:f0:0a:f7:ea:8f:7b:6f:57:
         eb:eb:5f:5e:1f:0f:3b:f4:84:77:63:9e:02:41:6b:e9:c0:f3:
         55:46:6b:3a:b0:af:6b:d3:12:38:5a:7a:ea:e9:ab:48:89:c1:
         3b:ce:a3:b2:30:48:36:9e:6f:c1:94:fd:8b:ff:15:33:40:a7:
         ad:e6:a4:19:93:7f:06:f9:e9:c0:f5:43:18:2d:0a:a1:ef:82:
         8e:c4:f7:9d:ab:f1:92:2e:4b:31:c3:cb:61:df:05:b9:1d:67:
         5f:0b:26:52:ad:7e:e4:9b:d3:21:bc:37:a9:ba:d8:9b:e5:ae:
         be:88:03:4b:fa:84:f5:fb:11:0d:b6:5c:ce:84:05:2a:01:fe:
         bc:27:72:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:03:31 2026 by rpki-client