Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.mft
File:                     UDmdRDW7hfrpEKvjjmhTMgTf1gs.mft (raw, json)
Hash identifier:          32D6ITMz/WmknPq49YSjH44wMHdmxsnTKrBxIwAQHv0=
Subject key identifier:   1F:AA:55:84:DD:3F:35:F5:47:72:13:57:52:40:30:1C:D6:8D:CA:65
Authority key identifier: 50:39:9D:44:35:BB:85:FA:E9:10:AB:E3:8E:68:53:32:04:DF:D6:0B
Certificate issuer:       /CN=50399d4435bb85fae910abe38e68533204dfd60b
Certificate serial:       01A1DD94C322BFF36D133376980B20E20C02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.mft
Manifest number:          1AF6
Signing time:             Sun 15 Nov 2026 05:01:16 +0000
Manifest this update:     Sun 15 Nov 2026 05:01:16 +0000
Manifest next update:     Mon 16 Nov 2026 05:01:16 +0000
Files and hashes:         1: GaGDncuQddyUxnzn8D0gEmgcUEE.roa (hash: 5ThaU+xDf9Ra2G+8uR4FvGW5DGrRvoM6yThrW6Rng8I=)
                          2: KCWWQiwpRHcCp-WmG9X3RegXgvs.roa (hash: GUTf882QMqY1JyQACTlFxulzKh2ZRBTS6bUDnTJot/M=)
                          3: UDmdRDW7hfrpEKvjjmhTMgTf1gs.crl (hash: E3xnv+EAChWxI4+QNckJqqsSi5GymWIfGS2jU2G6uZQ=)
                          4: WwUB93Gr8k-I55GxLnhwZBpiHFM.roa (hash: Fc4ZaIQ3OsIJPhk84Db43cUOe3LGAVjIVWLFEY3eFTM=)
                          5: p0HbPFfnwggjbYCEugxFJ_HG2yI.roa (hash: drTL/DJEGCCNAe04lSPkR1n9D8oRXBBImBv5kVogkjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 05:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:94:c3:22:bf:f3:6d:13:33:76:98:0b:20:e2:0c:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50399d4435bb85fae910abe38e68533204dfd60b
        Validity
            Not Before: Nov 15 05:01:16 2026 GMT
            Not After : Nov 16 05:01:16 2026 GMT
        Subject: CN=1faa5584dd3f35f5477213575240301cd68dca65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:99:06:e4:35:9d:2e:38:ac:a2:66:91:f0:d6:
                    36:47:08:5a:34:f1:c9:af:bf:d4:71:7d:ee:2a:96:
                    0a:6b:5e:9e:e3:b8:de:fe:2d:be:68:8c:07:d1:7f:
                    22:7f:54:bf:02:5e:d9:24:08:54:be:ad:63:fc:43:
                    39:de:1a:bc:35:1a:40:48:6d:77:ff:2a:fb:4f:8c:
                    34:02:c9:d5:45:12:11:31:a1:16:0f:f6:ca:a0:6b:
                    4b:d1:6a:e6:a5:10:22:9f:f3:4c:3c:9a:b5:93:ed:
                    24:28:6f:af:62:b1:62:b7:7f:c1:b2:a0:fb:2c:e7:
                    78:43:c3:1d:f2:21:89:59:80:35:0d:56:71:f1:9c:
                    f3:79:d3:50:8f:3e:fb:bd:bb:a7:7a:10:46:2b:36:
                    6a:98:1d:77:63:21:47:92:d3:9d:56:52:fa:ab:c0:
                    0f:0f:a8:6a:94:00:70:8a:a4:bd:87:84:ec:20:65:
                    2f:77:86:32:98:f6:87:95:84:87:dc:9c:f5:e6:d5:
                    50:b2:68:d1:73:0c:b7:8d:00:07:e1:32:95:04:65:
                    f3:36:40:ac:e5:b9:e1:07:17:11:65:40:39:fc:9c:
                    58:b8:fe:10:37:2d:3d:33:32:41:e9:34:02:bc:ba:
                    db:41:42:e7:5f:5e:37:3e:7f:12:70:35:29:c4:8b:
                    8b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:AA:55:84:DD:3F:35:F5:47:72:13:57:52:40:30:1C:D6:8D:CA:65
            X509v3 Authority Key Identifier:
                keyid:50:39:9D:44:35:BB:85:FA:E9:10:AB:E3:8E:68:53:32:04:DF:D6:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:83:f5:6b:d7:d3:b5:88:5b:59:0e:fd:6e:ff:d2:64:c4:18:
         7d:da:18:f7:67:fb:1e:83:6e:52:40:a7:db:d2:48:bd:95:c3:
         9c:f2:16:1d:d2:60:41:93:63:35:89:aa:83:8d:db:61:61:d6:
         12:b4:18:47:fa:ef:2d:a7:3b:fa:59:d7:06:8d:d6:46:9c:34:
         c4:2e:aa:f5:e9:0e:e9:d5:17:93:8a:4f:52:ab:cc:6c:a3:cd:
         48:71:5b:73:75:9b:5f:f0:6a:8a:eb:6e:f3:cf:62:cc:90:91:
         c7:cc:5e:0f:86:ed:c8:5d:16:e3:ae:b7:b1:22:a7:f7:56:b9:
         d3:e6:8f:19:b4:b7:50:69:53:78:bb:40:9b:fd:a3:0c:47:b8:
         be:91:03:5a:c2:3a:bc:ce:0c:b2:7a:47:29:01:fa:29:4a:0c:
         36:2c:98:66:04:ef:56:47:3e:6f:c4:83:ce:0a:58:7d:a9:5a:
         49:2d:46:05:a3:42:fc:1e:16:e8:ce:24:5a:63:b5:0b:25:c2:
         94:00:ac:34:c4:ad:7d:b2:79:af:6e:5f:3d:eb:cb:58:48:5f:
         0b:16:24:9b:32:d4:8e:9c:94:5b:cb:b5:e2:8d:74:e3:18:8d:
         a3:19:e5:a8:a5:15:7c:9a:fc:45:99:28:7e:87:c1:0c:0d:4a:
         22:66:ae:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:01:40 2026 by rpki-client