Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft
File:                     UyQUSSuyz6QI_1c6oGj8-aXneO4.mft (raw, json)
Hash identifier:          uO/W3Z6RULDnGUE72FZV+7nj0uKcQkW2y/tJLH0/pac=
Subject key identifier:   9C:B8:5C:83:02:98:FB:5C:DF:66:76:2E:97:20:E2:26:0F:F8:46:FC
Authority key identifier: 53:24:14:49:2B:B2:CF:A4:08:FF:57:3A:A0:68:FC:F9:A5:E7:78:EE
Certificate issuer:       /CN=532414492bb2cfa408ff573aa068fcf9a5e778ee
Certificate serial:       01A13DEEC6C825EB2D879678B651012C49EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UyQUSSuyz6QI_1c6oGj8-aXneO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft
Manifest number:          13F5
Signing time:             Thu 15 Oct 2026 05:00:20 +0000
Manifest this update:     Thu 15 Oct 2026 05:00:20 +0000
Manifest next update:     Fri 16 Oct 2026 05:00:20 +0000
Files and hashes:         1: 1-vw_YpjLtL2osMGBDqhaMbBPjy0.roa (hash: y1eYYcI99eIq1QFUMBnmXcbeI9owv4tyUVDJFPBTheQ=)
                          2: UyQUSSuyz6QI_1c6oGj8-aXneO4.crl (hash: GWiZsRNXQPMOqyx5Wlx9UDnAOsZCVmOQoZTHasjTNyo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UyQUSSuyz6QI_1c6oGj8-aXneO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:ee:c6:c8:25:eb:2d:87:96:78:b6:51:01:2c:49:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=532414492bb2cfa408ff573aa068fcf9a5e778ee
        Validity
            Not Before: Oct 15 05:00:20 2026 GMT
            Not After : Oct 16 05:00:20 2026 GMT
        Subject: CN=9cb85c830298fb5cdf66762e9720e2260ff846fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:21:94:23:96:19:1f:ac:ad:63:1b:15:80:e3:
                    a6:5b:b8:b0:f7:5f:45:96:2a:2e:80:8e:84:a0:7e:
                    b2:38:3e:e8:01:2f:82:8f:de:60:89:92:78:92:99:
                    d8:13:72:40:f5:fa:f7:f4:e3:63:1c:eb:4d:93:82:
                    f4:94:65:4c:6a:2c:5e:bc:af:5d:ca:b3:4c:e7:4e:
                    6d:55:9f:d3:73:6b:1a:5f:c3:74:63:83:bc:30:d0:
                    f3:81:dc:e0:be:b6:99:2a:d6:b3:82:70:ee:9c:31:
                    20:55:13:05:1a:a6:a2:15:f2:a0:f1:02:ec:af:e3:
                    a9:f6:50:07:32:b4:fd:7a:94:8a:e6:7d:d2:dc:54:
                    30:34:95:67:93:7b:9b:7f:df:98:c1:a2:99:d7:29:
                    d6:e9:75:24:48:95:7f:7e:06:96:91:a3:72:73:c9:
                    e6:cc:2a:d9:a8:2e:4e:47:f5:c2:f9:55:48:77:a7:
                    a5:43:e1:0e:b4:36:dc:60:d4:dd:98:cd:1f:10:a3:
                    77:27:ca:78:a5:0f:e8:f3:74:e0:38:a9:b9:2e:3e:
                    21:7a:8a:20:ac:dc:84:c7:be:22:62:0a:60:55:50:
                    3e:86:9b:e7:10:55:b1:b0:db:2e:3a:53:53:cb:5d:
                    fb:e8:14:b7:43:6b:48:75:04:b0:92:d7:2e:16:72:
                    97:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B8:5C:83:02:98:FB:5C:DF:66:76:2E:97:20:E2:26:0F:F8:46:FC
            X509v3 Authority Key Identifier:
                keyid:53:24:14:49:2B:B2:CF:A4:08:FF:57:3A:A0:68:FC:F9:A5:E7:78:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyQUSSuyz6QI_1c6oGj8-aXneO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:c0:9a:a1:e8:d3:76:70:1a:b4:62:a5:46:b8:8b:37:da:6e:
         47:4a:ea:e2:25:d6:89:5c:e1:05:0e:fd:1c:d2:b4:03:45:68:
         7b:cf:4c:3a:ec:cf:32:3b:ed:9e:07:f6:3f:c6:d4:27:a0:8f:
         31:3b:9f:47:71:00:30:c7:fa:53:83:73:84:6d:d6:72:42:87:
         b8:be:33:b5:81:ae:ee:5d:21:d3:19:0f:06:00:65:cc:e6:54:
         f2:88:76:9f:a9:13:97:56:5a:94:ee:fe:f0:bc:c0:1f:9b:8f:
         7f:cb:a9:8c:ca:18:de:6b:d2:0d:10:86:94:81:5f:f6:7b:ba:
         a6:7f:eb:4e:1e:95:5f:08:79:50:2d:e1:5d:ca:53:99:f3:bd:
         a6:c7:17:4b:a5:98:7b:17:11:9d:a6:cc:3b:f6:a7:66:6b:5b:
         13:19:55:a4:82:e8:90:c1:8d:ff:66:a0:c6:c4:81:46:48:a3:
         df:33:3e:aa:da:eb:0a:c7:aa:6f:bf:41:e5:34:4b:7c:05:81:
         af:98:d7:76:bc:e6:88:9c:11:da:7e:06:e1:67:9c:90:e3:2a:
         47:52:2e:49:0d:3f:55:0a:2d:e6:4d:86:d1:0f:82:58:f5:fe:
         c2:1a:e7:36:68:73:9c:bd:00:d7:a1:00:b2:59:9c:69:b2:3e:
         30:55:27:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 08:12:42 2026 by rpki-client