Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
File:                     _u_5L8n-U1R7fjvh-DYIgJxFZsk.mft (raw, json)
Hash identifier:          99ec1ORUPN1vVFkEkfijI1wZChDAPmQofuNUrNNE3LY=
Subject key identifier:   29:EE:50:D6:3F:F2:0C:40:1B:60:51:2D:F5:5A:12:BA:12:16:F0:41
Authority key identifier: FE:EF:F9:2F:C9:FE:53:54:7B:7E:3B:E1:F8:36:08:80:9C:45:66:C9
Certificate issuer:       /CN=feeff92fc9fe53547b7e3be1f83608809c4566c9
Certificate serial:       01A1035B362B398C0555F7BE3006C65808BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
Manifest number:          0B20
Signing time:             Sat 03 Oct 2026 20:01:11 +0000
Manifest this update:     Sat 03 Oct 2026 20:01:11 +0000
Manifest next update:     Sun 04 Oct 2026 20:01:11 +0000
Files and hashes:         1: Dr3OacsNKO2WTdv7Q8llg_soZvA.roa (hash: KbhoDJ9dQsBvDj3nKAtLQGpRyI1OX7thvD73xgl+H2g=)
                          2: _u_5L8n-U1R7fjvh-DYIgJxFZsk.crl (hash: 7QF/KDYUPnXjmSx7c8trG1HtmbVqAF4F47yNq+xKaoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:03:5b:36:2b:39:8c:05:55:f7:be:30:06:c6:58:08:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feeff92fc9fe53547b7e3be1f83608809c4566c9
        Validity
            Not Before: Oct  3 20:01:11 2026 GMT
            Not After : Oct  4 20:01:11 2026 GMT
        Subject: CN=29ee50d63ff20c401b60512df55a12ba1216f041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a4:5d:97:58:db:eb:ac:06:b7:77:88:54:a5:
                    b8:64:dc:f8:75:62:51:c7:ae:0b:b6:a1:1b:6a:26:
                    ad:59:81:2a:43:29:e3:fd:67:5c:02:a6:37:66:3f:
                    97:73:1b:cb:50:f4:34:98:e2:41:66:d3:3d:fa:f2:
                    c7:f3:ac:7b:28:ad:45:80:d4:3d:29:f5:fe:de:a5:
                    86:ad:01:d4:7f:39:03:ef:56:41:07:93:dc:7a:6a:
                    4c:e7:10:eb:d0:6c:46:d0:28:2b:d5:18:5f:2f:c3:
                    41:5e:cb:b6:a4:ce:cf:cc:64:2c:44:be:a5:51:fc:
                    65:ae:88:6c:2b:5b:f5:41:dd:11:31:37:34:25:ee:
                    61:02:06:68:9b:62:4d:e7:79:a8:5b:46:6b:d2:03:
                    0c:f6:a9:3c:9c:ee:63:d2:89:1d:87:e2:85:8c:55:
                    f5:9e:a7:f8:91:f1:73:34:b2:0d:72:ae:ab:51:09:
                    06:59:68:f4:7d:35:84:08:a6:0c:21:b7:fb:4c:75:
                    fc:55:1c:7b:f8:4a:d0:61:02:15:16:41:99:2d:80:
                    87:a9:54:21:28:96:b2:da:55:31:af:c7:f6:00:98:
                    72:e0:23:5a:8b:cc:3e:45:47:cd:64:d2:7c:91:a7:
                    86:31:be:63:71:1a:72:46:70:34:d9:2b:49:d4:8d:
                    e8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:EE:50:D6:3F:F2:0C:40:1B:60:51:2D:F5:5A:12:BA:12:16:F0:41
            X509v3 Authority Key Identifier:
                keyid:FE:EF:F9:2F:C9:FE:53:54:7B:7E:3B:E1:F8:36:08:80:9C:45:66:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:5e:da:91:40:45:90:ae:cd:0b:af:23:d2:0a:5f:d5:b7:f9:
         5c:3b:1c:49:2a:bd:db:ef:b8:7d:cc:e2:ec:f1:d5:ca:e0:8d:
         07:b9:ce:61:92:4c:82:6d:ae:2b:3b:39:29:2f:be:e6:e2:0a:
         2e:0b:3b:c8:48:10:6c:c2:8b:c8:35:ad:40:70:f9:e9:a9:01:
         d5:7a:a0:b2:fa:9d:3d:aa:64:a8:f9:4a:e7:68:da:d7:b7:6d:
         95:35:64:e0:34:6d:36:67:a7:7f:09:92:f4:d3:7f:f1:11:07:
         11:8e:c0:1d:47:e1:c3:80:28:68:c6:d6:7d:a1:04:2e:14:6f:
         aa:9e:f1:f4:ee:c2:e9:cb:07:b8:31:0b:36:89:b8:56:d7:a9:
         0d:9d:ac:bf:23:ca:e9:45:65:82:ee:51:68:bf:8a:27:34:20:
         ae:ad:54:f2:b9:83:14:5b:dd:f2:b2:15:1d:f3:b7:1d:13:d7:
         f5:80:87:36:91:18:10:0c:64:c3:7a:40:c5:1d:f3:82:31:cb:
         47:4f:5d:89:3a:d1:3f:78:57:95:19:e6:e3:a7:27:28:7e:90:
         1e:c9:bb:c4:de:90:57:84:7d:be:f1:94:b9:d7:e8:2f:76:a2:
         4f:ab:33:c2:68:1b:02:37:eb:4b:1d:a4:3d:fd:b9:c5:f1:70:
         e6:1f:3f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:13:53 2026 by rpki-client