Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft
File:                     UioivM096CZa_VX5gw_8Acg69yY.mft (raw, json)
Hash identifier:          c2rV67RexErEiMbFoTlbOpUOSraJeyvaQ56lT7t+G18=
Subject key identifier:   76:FB:8D:77:E9:C2:C9:D2:3C:2C:E2:EC:3A:61:8D:E1:52:D7:66:C4
Authority key identifier: 52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26
Certificate issuer:       /CN=522a22bccd3de8265afd55f9830ffc01c83af726
Certificate serial:       01A0D9BB9DEE9C52E79568EAE53AE4970562
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft
Manifest number:          1935
Signing time:             Fri 25 Sep 2026 18:02:26 +0000
Manifest this update:     Fri 25 Sep 2026 18:02:26 +0000
Manifest next update:     Sat 26 Sep 2026 18:02:26 +0000
Files and hashes:         1: JwD5lu0otqTMwfEAo1IGQBl5m2Q.roa (hash: 3lo1vZFHg/0VBofJBP7YITQIAttbUpYpy/FL0alINSo=)
                          2: UioivM096CZa_VX5gw_8Acg69yY.crl (hash: WK5ba6491SaYq95tiF5CV+onPIGFTPgM1WHeORoScEU=)
                          3: _-cN-sAbrViLwmycVeqjqlvUMm4.roa (hash: noKzUYWAtrL71gb87r5bxvuWL2VHpxYOGDrkOQNEG/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:bb:9d:ee:9c:52:e7:95:68:ea:e5:3a:e4:97:05:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522a22bccd3de8265afd55f9830ffc01c83af726
        Validity
            Not Before: Sep 25 18:02:26 2026 GMT
            Not After : Sep 26 18:02:26 2026 GMT
        Subject: CN=76fb8d77e9c2c9d23c2ce2ec3a618de152d766c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5d:e6:49:78:73:ff:b7:bc:69:07:f6:49:e6:
                    82:2b:b0:42:85:9e:fa:78:91:6c:c5:a4:24:fa:3f:
                    4f:23:1e:eb:a7:a1:2f:a5:35:1e:d2:6e:cf:a9:f5:
                    02:c5:13:62:e2:b8:de:7c:30:a0:07:7a:88:bf:80:
                    c1:a0:88:1e:ff:be:2e:7f:7a:74:62:00:5b:65:6d:
                    75:7c:b5:1f:a9:2b:6a:e2:9c:83:4d:8b:31:c0:bf:
                    46:d2:47:37:fd:5e:6d:0c:f9:19:73:a6:27:d8:38:
                    bc:15:b3:9f:8c:77:45:fc:ad:c5:dd:dc:55:95:51:
                    b6:4d:bc:c8:af:ad:48:59:f3:2c:0c:de:bd:c6:6d:
                    67:e6:0d:77:aa:5e:97:36:82:74:e1:d5:9f:58:83:
                    f4:5c:e6:b1:02:d6:f2:a3:bf:7e:af:04:24:59:6d:
                    4d:8f:f8:6b:f8:94:8f:15:f8:9e:1d:9c:e8:5e:90:
                    6f:9b:d1:82:e4:3f:2d:dd:ce:74:dc:73:fb:c1:f6:
                    79:fb:03:7a:e7:12:50:ee:e3:16:1a:25:c2:96:83:
                    4a:86:38:8b:a6:3f:c5:02:1a:69:22:fd:99:b0:4b:
                    ac:48:79:3d:74:22:4c:9c:15:3f:39:87:72:ac:dd:
                    44:b2:a8:86:c5:a6:f6:3b:47:30:d7:a2:5e:02:8b:
                    e6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FB:8D:77:E9:C2:C9:D2:3C:2C:E2:EC:3A:61:8D:E1:52:D7:66:C4
            X509v3 Authority Key Identifier:
                keyid:52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:41:6b:0e:d1:9f:a4:06:94:43:92:15:ff:69:b3:93:65:ff:
         7b:7a:7c:92:83:a3:f8:49:86:29:76:de:aa:f7:4c:d7:dd:f3:
         ad:26:46:23:b2:c9:2b:67:e6:f2:4e:e3:50:65:a7:5e:35:31:
         96:43:e1:a6:58:d8:78:7f:a5:2e:98:02:23:c5:d0:52:f2:64:
         73:20:08:8d:03:47:ed:75:60:58:45:db:b4:e8:6e:5d:49:c9:
         8e:f9:3b:8e:ad:da:d8:ee:f2:71:a5:38:df:eb:da:2e:27:71:
         7b:bf:50:dd:06:92:b8:6c:14:aa:1f:f2:fb:f6:59:03:b7:a8:
         25:b5:64:82:79:e0:5c:ad:65:7e:55:01:c6:b8:fa:c2:5c:a1:
         e3:16:cf:b5:25:4a:f0:e5:fc:82:c7:ce:25:c8:a4:98:30:9a:
         fe:71:de:7b:fb:fd:05:d9:22:04:a2:cb:02:a1:c9:13:aa:98:
         37:f7:89:41:92:1c:24:16:f4:6f:52:cd:72:37:56:05:44:d5:
         0b:79:72:70:61:b4:10:32:8c:01:4c:de:d1:32:b2:06:6e:28:
         9b:1a:85:bd:ac:0d:03:cf:8e:30:d3:1f:57:fa:31:5b:58:ae:
         18:26:65:99:6d:19:b6:fd:e8:6b:af:59:0e:9e:72:f3:f2:23:
         1c:6b:6a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:15:23 2026 by rpki-client