Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft
File:                     uMiqGHMPSoPihSxWklUau1se5-o.mft (raw, json)
Hash identifier:          LNPsqLfhaaJtLjAm6EEcQ/Ovch1tNsAYlYomLt5HC0g=
Subject key identifier:   65:EE:EA:C0:45:A6:04:AA:C4:44:BC:04:73:0F:B8:85:98:62:B6:06
Authority key identifier: B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
Certificate issuer:       /CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Certificate serial:       01A0D0EE00B763C6B7117547DA5375A5D43D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft
Manifest number:          1A7B
Signing time:             Thu 24 Sep 2026 01:00:53 +0000
Manifest this update:     Thu 24 Sep 2026 01:00:53 +0000
Manifest next update:     Fri 25 Sep 2026 01:00:53 +0000
Files and hashes:         1: 1-FwXe7PZZn8pbfNoA5f3LaxA9Z4.roa (hash: VNrmRdyCEMk5sVsUYPMlRs6jibn3G+c48bYYZcPJruY=)
                          2: 1v0gzSVrdpHJ1kxvOwfKSyYCpL8.roa (hash: cmDo8iK0CyxoS3TeSJaKn0b54YS7ZfZ1R+BFgSwd9T4=)
                          3: BeOlGfd4kyL56CFBTNlFeg1iQCc.roa (hash: 6DQD4VPy7IHhfQDtQNtD6rCp0/TWA+VmwTvJtNQ72aQ=)
                          4: IuF3Oww8F31vgCYdvmVX_Mcdfds.roa (hash: ZdUD8wHqLKgu3jLFYnYVv3d4B4ky6vIxcrxoHDIpU+w=)
                          5: etyrPt1aZEu7O63zljCUb1u_zQU.roa (hash: hrkIclXJJEK/pVdQYztmKRJMv7stBIcGF3RpANQ6FpQ=)
                          6: nmL9EQqvDKrR3Hs40Iu8m1-vIzY.roa (hash: DWKdYwXjR7CbcwQ5T5LM5T6YAURcXQrAsUonMFFVa8s=)
                          7: uMiqGHMPSoPihSxWklUau1se5-o.crl (hash: wD8ZKGKUT9QVfs/5d2Ln92n8SgUfpKHwr/fAet9ZTtE=)
                          8: uyDd6_WnW5b42bW_ImjP5ZvDqpc.roa (hash: OGUiJNuUA+4RM8D8fSwbQDp/GrlNdWNfd8TIRpipQ6E=)
                          9: yP46kIpWtOqNANJHH7Ze_2pu2vw.roa (hash: oclUAkD+j2AdtktvuOa/dXAYpExh9g3kYwl48UqmTJE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:ee:00:b7:63:c6:b7:11:75:47:da:53:75:a5:d4:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
        Validity
            Not Before: Sep 24 01:00:53 2026 GMT
            Not After : Sep 25 01:00:53 2026 GMT
        Subject: CN=65eeeac045a604aac444bc04730fb8859862b606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9c:81:73:60:48:16:f1:cd:f5:cf:46:df:aa:
                    67:cb:01:5f:3b:67:28:b7:98:56:b5:82:ec:b6:cd:
                    6f:5e:c6:62:66:b3:74:47:f5:9f:07:06:d3:19:29:
                    ce:f8:c5:08:48:1c:c5:bc:56:ff:b6:ca:47:7b:ca:
                    20:13:9f:2c:fa:9c:44:20:d0:7e:5b:20:e5:1a:c9:
                    b5:5e:54:ab:a6:2c:84:cd:74:ed:c4:40:16:7d:dc:
                    c2:7d:75:59:39:f6:95:1f:fe:eb:bd:4f:ab:f3:6f:
                    b1:d6:60:76:af:15:d1:ab:bd:39:99:35:15:10:9c:
                    94:b7:16:02:a8:27:27:c5:a5:45:c7:8c:fd:09:91:
                    52:f0:56:59:49:27:b8:42:67:96:f8:ad:bf:6c:c1:
                    09:da:d6:85:1e:86:10:05:17:51:f3:36:18:26:dd:
                    c7:d1:df:49:bc:d1:b8:a7:c0:91:2b:d3:62:09:6e:
                    f7:ec:95:44:ff:c3:20:38:d9:09:ca:17:b6:0c:f3:
                    ef:05:e0:92:2f:84:59:a3:6d:3a:4d:b9:1c:72:d6:
                    9b:67:46:39:3f:5a:70:80:93:2e:9f:3f:ae:72:e9:
                    7b:75:54:b6:1e:3a:d4:2e:70:cb:e7:c5:60:85:4e:
                    2b:94:4b:5c:37:a4:12:f5:cc:e9:ce:8e:7f:28:c0:
                    fc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:EE:EA:C0:45:A6:04:AA:C4:44:BC:04:73:0F:B8:85:98:62:B6:06
            X509v3 Authority Key Identifier:
                keyid:B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:f7:db:83:1d:65:ab:c0:cc:87:31:1e:af:0f:fa:4f:31:61:
         93:32:f1:b3:10:11:39:cb:23:5e:83:75:27:8d:e8:83:6c:b1:
         09:9c:0c:b6:c5:2d:fe:7f:1b:78:3a:1d:9f:37:f3:4d:17:f2:
         c1:4a:bb:94:d8:54:83:05:55:f4:dd:ca:40:e9:5f:70:8b:a1:
         4b:59:91:da:35:02:19:a6:49:65:8e:e0:f2:51:c3:86:72:d6:
         0b:05:ae:62:ed:d1:cb:b1:89:87:9f:4f:75:16:53:7e:d0:e1:
         6e:c9:2d:d6:f5:d2:fb:e6:ed:5f:24:84:c2:c4:e9:2c:52:ed:
         6b:1c:af:af:4f:ae:7f:7c:04:f0:b9:ce:b1:92:6a:61:2b:b2:
         d0:c9:5e:2e:de:b2:80:e6:3e:59:da:16:91:cc:aa:94:f2:8b:
         45:a2:1b:08:6c:7c:4f:cb:fb:7c:44:78:d9:9d:6a:3e:e9:93:
         2e:ca:28:58:14:75:3c:9e:d0:df:53:af:47:52:b5:e8:84:17:
         7d:0f:5b:7d:a1:62:78:27:6d:ee:95:7c:84:ce:34:ac:36:8e:
         21:db:72:4b:4b:79:03:4f:b8:f5:a6:a5:38:7f:9e:62:8a:4d:
         a9:c5:01:c7:6e:76:80:aa:6b:0c:30:cd:80:1d:b5:3c:1d:d0:
         19:2a:28:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:44:55 2026 by rpki-client