Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
File:                     UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft (raw, json)
Hash identifier:          DPEq44wHno8kcGGYLhuLaPPuJkT91aewxw7jTy1Vg1g=
Subject key identifier:   18:E1:86:09:BD:3F:A7:00:F4:F7:0B:1A:34:81:C4:97:B2:49:30:1D
Authority key identifier: 50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33
Certificate issuer:       /CN=50c9da1483fe3993d1985260619735c4cfd38033
Certificate serial:       01A0F11E56D6ED7B136E0DB45CDC2CAF97AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
Manifest number:          1A7D
Signing time:             Wed 30 Sep 2026 07:01:32 +0000
Manifest this update:     Wed 30 Sep 2026 07:01:32 +0000
Manifest next update:     Thu 01 Oct 2026 07:01:32 +0000
Files and hashes:         1: R5_iJAHMim0AgymJSQ6r4wQbiHw.roa (hash: EQeRHkG43biXk81xozYoB7VEoug0HoUQn327W+HkcVI=)
                          2: UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl (hash: 8cWhEW1LsJ5yRt0NDTHAwbL4G6anJlt5W2VWmOVogtM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f1:1e:56:d6:ed:7b:13:6e:0d:b4:5c:dc:2c:af:97:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50c9da1483fe3993d1985260619735c4cfd38033
        Validity
            Not Before: Sep 30 07:01:32 2026 GMT
            Not After : Oct  1 07:01:32 2026 GMT
        Subject: CN=18e18609bd3fa700f4f70b1a3481c497b249301d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:08:b9:db:b8:fe:f1:0f:13:38:39:95:49:0d:
                    9e:4c:c1:18:e1:3f:ea:ac:0f:e6:64:a8:85:38:2c:
                    10:03:ec:ea:e8:d7:b6:47:d2:66:77:63:1c:20:cd:
                    c6:e4:db:07:d2:1f:64:b1:65:cf:ef:d5:67:16:2f:
                    89:c4:ed:78:e3:ec:27:30:2e:8c:c5:b9:81:de:b4:
                    36:8c:6e:c2:ff:d5:c9:60:17:23:fb:73:6c:6a:b4:
                    7a:4e:80:b8:c5:f6:c4:ba:06:4e:4f:5d:57:45:51:
                    49:19:45:b4:9b:61:a4:84:a2:3a:a3:59:60:1a:90:
                    3b:b8:d1:e3:cb:f0:2e:61:77:63:44:59:a3:cc:10:
                    6a:3b:d0:de:2b:16:0a:f4:57:09:c1:2a:a6:65:70:
                    43:25:99:01:84:79:1f:c8:12:b9:ea:c2:36:2a:06:
                    30:3b:96:e9:4a:32:2c:f3:49:7a:e3:de:4d:bd:e9:
                    11:f3:ab:9a:35:3f:7d:e1:cf:26:85:6f:ff:89:d4:
                    04:bc:1f:bf:c3:fe:55:1b:6d:71:b1:f9:91:7a:06:
                    1d:03:14:af:26:36:cb:82:75:e8:01:4a:b6:88:55:
                    e4:40:ea:cd:d0:3a:27:02:32:b9:86:28:df:c2:07:
                    aa:3f:43:8c:48:81:b6:60:1c:b7:43:af:24:9e:bf:
                    56:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E1:86:09:BD:3F:A7:00:F4:F7:0B:1A:34:81:C4:97:B2:49:30:1D
            X509v3 Authority Key Identifier:
                keyid:50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:da:00:9d:10:06:ee:be:91:01:79:b7:49:fa:d4:af:da:ae:
         bf:15:00:d0:0a:e6:d1:5d:44:1d:4d:49:f7:7e:6c:0e:5f:05:
         63:69:d6:2a:1f:39:1c:dd:e2:69:de:1a:43:6e:dd:d9:06:f8:
         9a:6a:c6:64:1a:fb:ab:db:c1:01:b5:a7:a7:84:5b:c6:12:34:
         aa:b4:7f:ef:7f:29:ce:9b:46:4c:80:cb:f4:51:a4:a1:1b:ed:
         04:2d:79:f4:f5:72:80:c0:76:6d:77:a7:eb:c8:9c:c5:fc:a4:
         e3:85:bd:09:dd:3f:ca:c0:d2:fb:70:ff:14:4d:c0:82:f1:81:
         99:22:73:f7:06:95:13:1d:2f:c6:83:59:2b:bf:b1:c9:13:a9:
         20:4a:38:46:27:24:05:e6:77:47:78:8e:f8:0d:24:72:ea:af:
         c8:b9:7e:f0:9c:88:36:be:01:76:95:99:02:33:63:46:c0:5f:
         54:3f:91:85:1b:2e:1c:ec:24:95:e9:e8:d3:11:62:66:34:e7:
         1d:c4:c1:59:09:fc:3d:4c:9e:1e:b6:3c:49:4f:e3:27:7a:af:
         08:30:4f:ba:a7:de:ef:77:89:32:85:72:d3:00:e3:da:1f:57:
         91:8d:6f:3b:57:da:db:d3:a6:98:e1:ec:f5:0e:39:3d:fa:32:
         13:3c:a8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 11:58:02 2026 by rpki-client