Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft
File:                     UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft (raw, json)
Hash identifier:          OFfv3P+WI4RxsoZiovAVQTxt0A0HGRuq2wCaB02bwFw=
Subject key identifier:   6F:B2:4B:A1:66:52:EC:B2:78:D9:41:61:BF:64:98:4A:10:1A:90:AE
Authority key identifier: 50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98
Certificate issuer:       /CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
Certificate serial:       01A103247F0AE47FDECB27535015366139DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft
Manifest number:          1A92
Signing time:             Sat 03 Oct 2026 19:01:25 +0000
Manifest this update:     Sat 03 Oct 2026 19:01:25 +0000
Manifest next update:     Sun 04 Oct 2026 19:01:25 +0000
Files and hashes:         1: I29tnh5zFuEBGOl7uALiyjAvvnU.roa (hash: wczJss7Ctnal49eXtKYXNAoNN3MoeRhE2AwTAK7AghA=)
                          2: MQJyHdCQqrR49YtqfP5n2nCmdBc.roa (hash: tayylzbDzrQ2vAXY3YULZKX+Mr7ci8knVpJFx/AOaaM=)
                          3: UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl (hash: WHd/ceGzLwDSCbRneTGZTtkcd06IZEAVZs6hMmuNiGc=)
                          4: VDLlDzAUnpp3yY9jYEhslsSDEio.roa (hash: U4N6I7gKlIzNINdJyuTqu3g1hmT4TUUCZ4OMW8ayoD4=)
                          5: jSW60U-IDuUsjOlqZECJM6Mt8QM.roa (hash: wz6ZP0fktYKLcRgNv3R96YBySJmIs8qgZe1Q2mMxP04=)
                          6: nFg91YiaQ2-Tr7y1XCO0Puttl2U.asa (hash: QXOVWWm9dncorP4wh3O78MC+y4H/vue+TeNihB5tTtI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 19:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:03:24:7f:0a:e4:7f:de:cb:27:53:50:15:36:61:39:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
        Validity
            Not Before: Oct  3 19:01:25 2026 GMT
            Not After : Oct  4 19:01:25 2026 GMT
        Subject: CN=6fb24ba16652ecb278d94161bf64984a101a90ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:04:f6:01:ba:17:db:63:2b:0a:7a:a6:a8:3a:
                    e8:dc:d5:2a:34:fa:06:48:a6:d8:80:5e:bd:1b:23:
                    81:76:ee:18:72:6e:2a:be:27:f4:c4:b4:0b:a3:b7:
                    44:69:dd:f6:99:04:cc:76:05:bf:b9:6f:9f:34:15:
                    86:1c:e8:14:84:99:f6:96:dd:38:df:b4:07:cf:ef:
                    26:16:69:f7:74:47:03:af:fc:3d:01:da:64:36:a6:
                    69:1b:1c:a1:a8:90:d0:8c:46:18:a7:47:b3:3b:ad:
                    a1:e4:66:ff:c0:66:a0:ad:53:00:bf:56:bb:24:3f:
                    51:d8:b3:bd:9d:4d:56:e0:b2:2b:d5:66:5b:2d:ca:
                    4f:ad:82:68:a9:39:78:d5:6b:a6:e6:a9:1c:9c:26:
                    de:4d:40:b8:9a:c0:53:09:b2:12:2a:22:15:9e:2c:
                    22:80:ea:4b:bb:74:1d:38:76:99:c3:97:dd:70:59:
                    1c:86:48:0b:c8:bd:c2:4d:ec:d8:3c:f5:7d:fb:d1:
                    d6:51:c2:e2:97:9d:0f:f3:96:df:b9:83:cb:8e:dc:
                    d2:08:5a:5d:8d:af:c4:af:37:51:d7:dc:54:8d:83:
                    18:4f:78:93:18:0d:38:65:82:08:28:eb:81:af:7c:
                    08:2d:8c:8a:34:2f:2f:76:68:01:0c:24:b3:bb:f4:
                    eb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B2:4B:A1:66:52:EC:B2:78:D9:41:61:BF:64:98:4A:10:1A:90:AE
            X509v3 Authority Key Identifier:
                keyid:50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:f3:bf:18:87:a0:c8:3c:91:32:fa:f2:86:7d:6f:89:8e:7e:
         31:11:cf:b0:cf:ec:24:0b:46:1d:25:af:ce:3c:64:4e:ad:11:
         1d:c8:9f:af:6a:41:49:e4:fa:b0:85:69:23:f3:f4:94:26:95:
         c4:19:12:6e:03:52:d2:e4:76:33:d4:33:7e:c5:ce:f8:d8:9f:
         fa:97:47:a9:6d:0a:75:71:1d:73:93:3c:69:b1:ee:e2:4b:f5:
         96:17:e7:da:d7:b9:8b:3d:d1:0b:10:54:d5:00:5d:07:e3:be:
         c9:0f:30:25:5c:14:57:10:1a:3c:e0:f2:24:4d:40:cc:1c:e0:
         db:6e:02:fa:f5:ec:7a:40:4c:e8:fb:c4:5b:13:34:6e:41:d4:
         db:e7:75:78:8f:05:9b:52:05:cd:64:b3:e3:cb:79:ba:77:cc:
         fb:42:11:c8:38:dc:e8:ca:97:0a:68:43:d7:dc:aa:83:c5:53:
         3a:80:f0:5a:ed:65:54:5f:7c:30:de:e8:e3:77:5c:19:ba:b6:
         9d:25:63:ab:c6:9b:e4:36:08:2a:3b:f0:9a:61:04:e7:c1:59:
         62:9c:6c:80:af:f4:23:d9:95:8e:0a:77:ae:da:b6:a4:4e:87:
         65:94:04:5b:fc:27:94:6d:88:dd:1b:20:65:95:77:03:43:aa:
         5d:b3:1a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 01:01:40 2026 by rpki-client