Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
File:                     um1Gt2v9bUK71XXi8m_OE2ubam0.mft (raw, json)
Hash identifier:          27VHy4iQvl2Hjmhi8hjxpvgtWHs9TZJIW4yD3qTvsFk=
Subject key identifier:   BA:AA:CA:92:52:92:07:34:5B:E1:52:37:F5:5F:B1:0C:AB:B0:92:B0
Authority key identifier: BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D
Certificate issuer:       /CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
Certificate serial:       01A0D200344456DD11FB1A85B87FF2D060EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
Manifest number:          1A6E
Signing time:             Thu 24 Sep 2026 06:00:23 +0000
Manifest this update:     Thu 24 Sep 2026 06:00:23 +0000
Manifest next update:     Fri 25 Sep 2026 06:00:23 +0000
Files and hashes:         1: Bm7KXTZG-GzrmHMle85VbaK0lEc.roa (hash: eP4Z4Xyrl9duYpmeFr1kOXcCCxjk6AkZ57/buELWekE=)
                          2: YkorEnKm6LzRmwWsxcFNFH1cULo.roa (hash: r2RXMf3T6ozI4KhQ/ydf8YGQ149Sw8bA5XoNMW2hS0A=)
                          3: fpbZgKklTRGbUlBw5VfG2XolpT4.roa (hash: VEiVSo2qKOGnxDIsrhNTfOH5xMpm4xzV14ZuiE7aVXQ=)
                          4: fwb4YpE_ObhkPJOOtInq4VZSkFQ.roa (hash: ejLh2AtjPL3jxNb43Lf5+3Lqqs/Okt+3XnJA445dp+0=)
                          5: um1Gt2v9bUK71XXi8m_OE2ubam0.crl (hash: /A2kL4YdufsR3eYJfCuVhrLGlq+MGpHkywTLbFWt2nk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:00:34:44:56:dd:11:fb:1a:85:b8:7f:f2:d0:60:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
        Validity
            Not Before: Sep 24 06:00:23 2026 GMT
            Not After : Sep 25 06:00:23 2026 GMT
        Subject: CN=baaaca92529207345be15237f55fb10cabb092b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:76:e3:d2:84:0e:d9:6f:8b:66:b1:e1:0a:31:
                    cd:e7:6b:e6:87:6d:9d:76:88:73:b6:26:5b:c4:92:
                    fd:f8:75:98:5b:d0:a2:5f:99:0f:7c:d0:15:c0:e1:
                    ca:d2:85:54:b3:0e:da:c9:16:53:80:75:e5:54:73:
                    85:7e:f9:cc:df:5d:ea:0e:7c:a7:1a:16:1c:c0:6f:
                    a5:4c:f3:da:6b:e1:ea:00:4f:17:48:46:76:12:3b:
                    c2:2b:7d:8a:43:9e:f6:e3:3a:d9:3c:5f:e8:07:8b:
                    04:0e:9f:bd:4f:b0:8e:45:cf:00:05:65:3b:c0:f6:
                    46:1a:eb:66:02:c5:0f:bb:0e:0c:fc:61:f6:c9:b5:
                    31:fc:9d:c4:fd:82:4e:cd:5d:9d:eb:12:12:15:3f:
                    12:bf:53:74:94:56:79:4b:b1:ac:e3:69:45:00:7a:
                    fc:3f:f3:62:18:13:31:6c:ea:7f:1d:31:df:83:08:
                    c5:08:2b:be:49:b8:99:00:d5:d6:74:33:41:c3:b1:
                    7e:56:f6:06:e7:47:49:04:b9:fd:6d:b0:00:b7:5e:
                    77:09:c5:8b:db:58:72:e9:fc:41:3e:41:ac:ef:bf:
                    d8:ec:91:8f:a0:d9:72:ec:06:03:4c:b4:db:62:d7:
                    89:90:4b:22:ba:44:72:7f:8a:10:36:4d:1f:c2:b9:
                    e0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AA:CA:92:52:92:07:34:5B:E1:52:37:F5:5F:B1:0C:AB:B0:92:B0
            X509v3 Authority Key Identifier:
                keyid:BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:f9:6a:76:ea:6e:ae:6a:5a:b7:61:6f:f6:89:12:c3:13:f6:
         25:2d:1a:a8:79:85:58:64:b8:87:55:a5:ff:41:b5:d2:39:dd:
         79:e2:3b:57:db:5c:d2:3b:94:7e:eb:8a:73:1b:4b:bb:55:54:
         7c:6c:40:21:0e:8f:d4:d2:f9:c1:01:26:ad:2e:71:db:86:e8:
         01:6a:d5:2a:91:02:f6:07:c5:09:40:09:2a:ec:f9:61:6a:84:
         c3:18:93:23:4b:13:28:64:f9:62:3a:d8:da:be:36:97:03:aa:
         79:75:0b:d5:cc:3e:ad:02:11:83:30:0f:60:3d:ef:6e:a7:05:
         13:42:96:99:0b:ba:6f:39:90:19:71:f8:2d:fc:ed:2b:8d:9c:
         58:b9:a1:f7:51:8b:79:8a:0f:b7:e3:31:2c:fe:02:97:ee:b5:
         79:5d:a8:aa:13:48:01:8d:2f:19:f3:79:ca:ec:14:02:ff:a1:
         9d:d6:3b:bf:b6:8c:d8:13:2a:28:db:93:7a:ef:13:79:1d:05:
         3c:64:21:01:78:8b:95:99:7e:98:04:32:83:53:8d:e8:45:d4:
         03:5b:06:c3:af:7e:7b:7e:f1:9b:ab:93:58:56:a8:f0:8c:4c:
         bc:36:75:a2:6e:8e:8e:49:c0:b2:d9:03:aa:e9:22:1f:6a:50:
         9e:3a:59:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:34:28 2026 by rpki-client