Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
File:                     UbLEAc5cnogc2aO-jv7GACLaDrY.mft (raw, json)
Hash identifier:          31nUaMbER1Ei6kin5AZAj/PknDzJuY2C9DNxP397pcs=
Subject key identifier:   07:6F:17:40:D3:B3:A4:A5:74:68:42:66:82:AB:59:9D:78:C6:E6:A5
Authority key identifier: 51:B2:C4:01:CE:5C:9E:88:1C:D9:A3:BE:8E:FE:C6:00:22:DA:0E:B6
Certificate issuer:       /CN=51b2c401ce5c9e881cd9a3be8efec60022da0eb6
Certificate serial:       01A0E106B7306A09AF0B21DB889F8EFC3CDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
Manifest number:          051A
Signing time:             Sun 27 Sep 2026 04:01:48 +0000
Manifest this update:     Sun 27 Sep 2026 04:01:48 +0000
Manifest next update:     Mon 28 Sep 2026 04:01:48 +0000
Files and hashes:         1: 7nfjUKMCV_0dkRD9QIxhQ1BPufY.roa (hash: gulW2Fam69TrlFiG88xoJ7S5EpFW5hwd8HZdAINgZRw=)
                          2: 8EkWCJKlGUuYCmtpF6giWaBabGQ.roa (hash: Sqr1KDT12n1Gb1flLKRN7KU4X7Bc8YqBHnVl5nyK2K4=)
                          3: MxZUaOK8Ovtd2YeXUj-uaE88_eQ.roa (hash: Fko89UG8aEMvOTWbfyMIqaGd+GLcrLD58QG0NMQTI3w=)
                          4: UbLEAc5cnogc2aO-jv7GACLaDrY.crl (hash: L55NozRAlVZxxWtuxHmpswOaPIKQ27A6Qlt9iKVmJ/c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:06:b7:30:6a:09:af:0b:21:db:88:9f:8e:fc:3c:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b2c401ce5c9e881cd9a3be8efec60022da0eb6
        Validity
            Not Before: Sep 27 04:01:48 2026 GMT
            Not After : Sep 28 04:01:48 2026 GMT
        Subject: CN=076f1740d3b3a4a57468426682ab599d78c6e6a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3e:f4:a2:dd:d2:9f:70:51:b0:44:07:e8:7e:
                    cc:8a:db:5c:53:51:c2:30:55:56:a8:14:ad:11:c6:
                    ec:b1:48:4e:e8:49:21:fa:a8:59:8a:b5:c5:5c:c3:
                    a2:4c:c0:ec:83:38:b1:c3:4f:00:25:0b:3e:8b:21:
                    c3:d4:64:65:44:dc:68:a4:d0:c3:41:f1:26:97:75:
                    ab:71:63:ba:09:1a:98:99:32:04:3f:59:80:4b:50:
                    ba:8d:b7:ec:d0:22:1c:63:62:be:29:57:bc:e0:78:
                    5a:41:8e:26:fb:4f:06:02:41:3d:75:09:57:2b:06:
                    32:c0:d3:60:69:3c:7e:6e:36:96:22:25:8d:9e:69:
                    aa:fb:ce:d9:a5:d1:1a:eb:50:8d:6f:1c:21:49:af:
                    68:b0:e4:f8:a6:ce:12:ef:a9:4b:b4:47:a1:3b:6e:
                    e2:b5:5a:f2:12:12:d9:9b:75:60:f2:b7:75:95:20:
                    c5:e6:2d:a1:66:db:cf:ca:45:67:c7:7b:5e:51:09:
                    04:47:61:1b:a4:83:91:b8:e6:af:9d:8d:ef:b7:d1:
                    d3:1b:90:e0:ab:ba:79:fe:fb:c7:ef:b1:f5:96:fd:
                    9a:4f:1d:cb:06:de:56:7e:26:c7:7d:bf:60:f9:d1:
                    42:08:fa:32:f3:c6:a0:e0:1b:e3:7c:ca:38:01:04:
                    41:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6F:17:40:D3:B3:A4:A5:74:68:42:66:82:AB:59:9D:78:C6:E6:A5
            X509v3 Authority Key Identifier:
                keyid:51:B2:C4:01:CE:5C:9E:88:1C:D9:A3:BE:8E:FE:C6:00:22:DA:0E:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:4f:cd:97:4a:03:09:50:89:6d:04:d3:21:87:18:26:50:51:
         2b:b9:05:86:7d:eb:87:49:ec:f5:44:fa:e0:04:23:f8:58:39:
         8f:7f:22:5f:d6:9c:87:72:a4:44:ed:ad:ef:50:19:d5:b0:c2:
         98:70:dd:b6:f6:28:c6:ff:e7:0c:89:fc:1f:42:2c:c6:18:b0:
         1f:11:d9:8f:7c:08:03:ab:20:60:9a:d5:e0:bf:c9:ac:76:eb:
         5b:42:33:5f:7b:54:03:61:77:2d:a3:e1:57:9a:cf:50:d5:eb:
         58:7d:bf:07:0b:77:66:fe:ab:f4:72:62:e9:48:ef:d7:f6:f2:
         64:2e:0a:75:e6:1c:48:ee:26:b1:a7:01:3b:dc:72:2a:e4:fa:
         7e:f7:c7:f2:9d:43:a6:b7:43:97:6b:c2:f4:d6:d5:e4:8f:2c:
         a1:82:63:a9:44:65:d9:43:ef:86:dd:a7:56:af:76:c5:d2:e1:
         58:b2:47:f8:35:67:02:9e:2c:68:9b:92:ef:b7:71:08:3f:37:
         e4:5f:89:ae:a2:ac:a1:c6:a2:b8:32:14:3f:dc:24:94:81:2c:
         8d:81:f0:ec:9a:78:06:9b:63:ce:da:c9:10:16:fc:31:96:a2:
         63:6e:71:2f:a0:33:21:66:7d:f8:5c:a0:b8:a9:3c:56:57:3d:
         b1:2b:07:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:11:21 2026 by rpki-client