Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.mft
File:                     uW6LbXPy84VImW9mYhMwqNcQhSk.mft (raw, json)
Hash identifier:          31jprIlUSjIQ0bbdaT3f8XaMgVLxgYKol2kAKd+uehk=
Subject key identifier:   DE:BC:DC:42:63:06:90:08:C6:60:6E:D3:D1:38:5F:21:E7:6B:D2:FC
Authority key identifier: B9:6E:8B:6D:73:F2:F3:85:48:99:6F:66:62:13:30:A8:D7:10:85:29
Certificate issuer:       /CN=b96e8b6d73f2f38548996f66621330a8d7108529
Certificate serial:       01A0D75F91BEF9FF9F9EDC3B18AAF05CDB87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uW6LbXPy84VImW9mYhMwqNcQhSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.mft
Manifest number:          1A76
Signing time:             Fri 25 Sep 2026 07:02:39 +0000
Manifest this update:     Fri 25 Sep 2026 07:02:39 +0000
Manifest next update:     Sat 26 Sep 2026 07:02:39 +0000
Files and hashes:         1: G4rPRPH0TevWDN4JhwggPa4i_ew.roa (hash: vucNfqDoD46iq3ADWrbmOLpg+GWhl8NHwQXonzDbGUE=)
                          2: JHMmDbVRrRsKn48GITbyHSYvb4k.roa (hash: JTG+SkQZDZHDvGwrOeoKbRRR7PNa8rHubeMF5VYtzkQ=)
                          3: ZnUp6stV5socGkmCtp3XXdwZNt4.roa (hash: pcLU5hRWx9tbU/nzWNHzQ9gO7KrRDtWeT3kX5BEAeI0=)
                          4: mxGPtlml0cC3fgCiKtLv-Fjx0tg.roa (hash: BPcVgU4gGWv1T2VHL8hZhWOkWk8wdsCpDTIDhtWwrK4=)
                          5: uW6LbXPy84VImW9mYhMwqNcQhSk.crl (hash: 4JzvclvgYXJlszIVHVOymt7aF+KtRe/pDn3fPVVAS4g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uW6LbXPy84VImW9mYhMwqNcQhSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 07:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:5f:91:be:f9:ff:9f:9e:dc:3b:18:aa:f0:5c:db:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b96e8b6d73f2f38548996f66621330a8d7108529
        Validity
            Not Before: Sep 25 07:02:39 2026 GMT
            Not After : Sep 26 07:02:39 2026 GMT
        Subject: CN=debcdc4263069008c6606ed3d1385f21e76bd2fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fb:ae:fc:d0:95:76:80:6f:ec:10:ad:85:b9:
                    53:ba:a6:f5:a0:e8:97:44:eb:13:28:9b:ca:fe:2f:
                    71:5f:c6:e2:f8:29:1b:fd:97:b6:7a:bf:d3:1b:f0:
                    5f:24:38:33:6b:0e:d1:51:48:d8:08:a9:87:9f:4e:
                    ef:67:76:96:4d:67:a1:c4:45:52:35:aa:5d:61:b1:
                    ad:17:68:63:1e:3d:c5:6b:d8:67:83:22:15:74:06:
                    4d:d2:41:f4:e4:65:8b:08:8b:a3:d5:ad:c4:8c:09:
                    78:71:6c:fd:45:74:e0:ae:36:b9:bf:ef:4f:71:98:
                    2c:b7:12:74:3b:10:77:68:54:f4:95:4a:14:e9:42:
                    6b:e1:4b:21:89:2e:d3:9d:4d:53:01:9a:c1:35:b3:
                    76:cd:a4:c6:8e:e0:9f:59:a3:08:31:9d:aa:5f:bd:
                    8a:25:a3:4b:29:ae:11:11:74:b5:2d:a8:9f:d9:ad:
                    0c:04:56:f8:1c:df:1d:2c:73:e9:76:cd:ea:0e:43:
                    ee:b7:5b:ad:8e:07:f8:e4:f5:5a:76:8b:6e:8d:12:
                    eb:5e:e4:fe:a2:17:e0:26:aa:2d:17:6a:91:3d:0d:
                    00:e0:ec:6d:60:e0:fc:01:a8:ef:d8:b1:1c:0c:fc:
                    58:7a:2d:39:b4:05:79:6f:55:25:b6:e8:62:aa:06:
                    54:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BC:DC:42:63:06:90:08:C6:60:6E:D3:D1:38:5F:21:E7:6B:D2:FC
            X509v3 Authority Key Identifier:
                keyid:B9:6E:8B:6D:73:F2:F3:85:48:99:6F:66:62:13:30:A8:D7:10:85:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uW6LbXPy84VImW9mYhMwqNcQhSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:ba:eb:5e:a1:32:ac:f4:3d:0e:a4:71:a6:37:23:3a:62:a0:
         03:db:7a:a8:92:6c:54:a8:fc:bf:ab:5a:1a:67:89:53:c6:0b:
         e1:6e:fa:1e:c1:89:fd:12:9d:16:d7:9f:0f:c4:b6:0c:4c:53:
         c1:35:ed:a2:a0:a2:e0:9a:67:18:10:c6:3a:07:36:4b:d5:71:
         19:07:73:cc:dd:1b:9d:9b:d2:5c:25:2f:83:9d:8e:33:d7:74:
         54:5e:2d:22:e8:c3:c1:a1:d7:e5:af:7b:d3:9b:9a:75:5d:fc:
         fb:8b:64:79:84:76:0b:f8:f2:5b:f4:0c:48:c7:e5:11:aa:5c:
         f2:a3:50:cf:97:8f:2d:a7:a2:ce:c2:18:1f:15:aa:40:f4:e3:
         4a:b4:f9:28:14:b8:c2:78:9e:1d:ea:82:ee:d3:bc:f4:9e:03:
         fc:b9:b6:e6:f8:1b:67:c5:8c:d5:90:85:2b:09:51:d5:02:c2:
         d2:d5:ea:46:2a:2a:48:7d:b8:85:d7:d2:12:91:cf:f6:7b:cb:
         74:62:54:7d:cf:f8:3a:ea:8a:77:d2:91:a3:a2:45:d9:8e:04:
         ea:01:57:12:a8:73:cf:0b:c6:80:fa:f9:79:01:cc:2c:41:68:
         cc:97:41:4d:17:ee:ba:35:ec:6a:4e:0b:52:19:28:86:7b:02:
         ed:21:88:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:26:35 2026 by rpki-client