Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
File:                     um1Gt2v9bUK71XXi8m_OE2ubam0.mft (raw, json)
Hash identifier:          vauIhjNgApt4shW6McGUTUZ0b+LmjltXJXD8ZFxrXTM=
Subject key identifier:   A8:5D:D2:A2:0F:06:43:5A:42:8E:87:BD:3B:AC:AA:A6:D7:F6:3C:F1
Authority key identifier: BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D
Certificate issuer:       /CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
Certificate serial:       01A0D3EF39C81DE9F3B0FBDA5E8B5D96DAF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
Manifest number:          1A6F
Signing time:             Thu 24 Sep 2026 15:01:05 +0000
Manifest this update:     Thu 24 Sep 2026 15:01:05 +0000
Manifest next update:     Fri 25 Sep 2026 15:01:05 +0000
Files and hashes:         1: Bm7KXTZG-GzrmHMle85VbaK0lEc.roa (hash: eP4Z4Xyrl9duYpmeFr1kOXcCCxjk6AkZ57/buELWekE=)
                          2: YkorEnKm6LzRmwWsxcFNFH1cULo.roa (hash: r2RXMf3T6ozI4KhQ/ydf8YGQ149Sw8bA5XoNMW2hS0A=)
                          3: fpbZgKklTRGbUlBw5VfG2XolpT4.roa (hash: VEiVSo2qKOGnxDIsrhNTfOH5xMpm4xzV14ZuiE7aVXQ=)
                          4: fwb4YpE_ObhkPJOOtInq4VZSkFQ.roa (hash: ejLh2AtjPL3jxNb43Lf5+3Lqqs/Okt+3XnJA445dp+0=)
                          5: um1Gt2v9bUK71XXi8m_OE2ubam0.crl (hash: BG5SqUqt77mrAGvmV4jzCsm9t5q3zZWZC4IkZO5qanQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:ef:39:c8:1d:e9:f3:b0:fb:da:5e:8b:5d:96:da:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
        Validity
            Not Before: Sep 24 15:01:05 2026 GMT
            Not After : Sep 25 15:01:05 2026 GMT
        Subject: CN=a85dd2a20f06435a428e87bd3bacaaa6d7f63cf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5c:cf:52:cd:0b:08:b5:ea:a9:b1:56:75:57:
                    a3:1c:5e:6c:02:c2:0c:55:2b:6e:29:d8:3c:3f:8b:
                    41:31:ea:58:03:d4:e8:84:39:07:5b:16:1b:32:dd:
                    1c:b6:a2:93:c6:e6:ff:1c:ad:ce:3b:0d:0a:0f:6f:
                    01:56:79:f2:db:2c:86:5b:0d:e6:86:5c:50:da:eb:
                    3b:21:7f:e7:92:69:b3:9e:7b:dd:be:81:5a:8f:db:
                    07:8e:3e:e3:92:55:b5:db:d5:f7:f9:01:06:c0:b2:
                    af:6b:2a:9e:7b:d4:7e:4c:61:d4:4a:26:59:0c:c7:
                    0a:ca:a2:c4:86:99:88:64:a2:c9:2e:df:b7:77:8c:
                    96:52:4e:79:1d:dc:c7:d4:2b:e4:12:67:54:35:be:
                    4d:a8:78:37:f0:c8:78:73:da:58:25:c0:90:3b:ba:
                    3f:c3:de:ac:20:e2:c5:b5:be:a2:8b:e3:58:94:bf:
                    60:94:ac:a5:2f:b7:aa:1a:8d:24:7e:82:4c:d5:f7:
                    cf:25:13:6f:1c:66:d0:f8:44:d2:eb:7e:ae:7f:8d:
                    2c:79:99:a7:61:22:12:1d:f6:48:fd:30:f6:4a:87:
                    51:10:6d:cb:87:41:92:54:61:a4:5e:94:2a:74:b5:
                    30:fa:f9:3a:2d:1a:a7:a6:90:60:c8:bc:24:11:1c:
                    7c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:5D:D2:A2:0F:06:43:5A:42:8E:87:BD:3B:AC:AA:A6:D7:F6:3C:F1
            X509v3 Authority Key Identifier:
                keyid:BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:35:c5:25:6a:e0:4f:f9:f3:e6:3f:f9:e5:ba:1d:60:ac:55:
         ad:05:bf:81:14:32:0c:bc:a6:90:83:71:f8:d0:d4:78:56:d3:
         0c:71:4b:36:73:af:92:02:3d:f9:6b:7c:8a:71:8b:24:dc:5e:
         14:26:73:bc:7d:eb:da:c9:e9:f9:f0:fa:c8:1e:c3:fb:e6:da:
         3b:68:5a:1a:64:59:45:2c:80:58:3c:99:b4:99:fa:88:8c:8e:
         92:f5:76:0c:36:9f:b3:2d:35:4e:9c:3c:ed:73:23:76:31:d9:
         10:6e:f8:22:ea:88:2e:48:50:39:cd:e5:3b:e2:5f:48:1d:a9:
         75:c9:fa:81:d1:88:44:2b:89:26:d8:e6:52:9e:11:36:bc:a0:
         d9:ad:98:84:07:5c:b9:0c:a0:95:9e:5a:77:e8:69:ee:04:02:
         f2:b3:a0:7e:92:b3:7a:56:5e:9d:a9:8d:fd:47:5b:31:05:21:
         ff:5f:f9:c4:86:87:8b:0b:d7:1f:4e:86:6a:0a:c4:7b:de:12:
         ae:02:ca:51:6e:17:53:f7:c7:5e:1f:37:bc:88:a1:8e:23:4b:
         c9:30:d9:c8:f0:b6:60:99:8d:dd:a0:59:73:d5:95:e1:28:41:
         84:57:a1:4c:8e:08:34:61:12:dd:dd:6a:28:54:52:d3:ed:c0:
         4b:ca:c9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:03:33 2026 by rpki-client