Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft
File:                     ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft (raw, json)
Hash identifier:          BTphebzo27QG8vcwD7eqZNq2fexotFbZ/9S/lNc+t+s=
Subject key identifier:   E6:09:20:E0:4C:62:AD:AC:79:1E:1B:FC:25:11:72:7B:30:B8:57:AD
Authority key identifier: 50:B0:E7:15:71:47:A9:0C:E3:74:60:B7:19:CB:76:06:94:AB:54:14
Certificate issuer:       /CN=50b0e7157147a90ce37460b719cb760694ab5414
Certificate serial:       01A10E15067B65E5E5B088E93C4C5E2E9884
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft
Manifest number:          0393
Signing time:             Mon 05 Oct 2026 22:00:21 +0000
Manifest this update:     Mon 05 Oct 2026 22:00:21 +0000
Manifest next update:     Tue 06 Oct 2026 22:00:21 +0000
Files and hashes:         1: ULDnFXFHqQzjdGC3Gct2BpSrVBQ.crl (hash: j5sl+BqDh62ynjfB5qQt3SatX+sR0+I90m4hxPgubsM=)
                          2: YTZnwgX1fpqLaA8u7GzOIk6ue1k.roa (hash: mBjPd/UyUtpVQP57vDWgcX+PhPNfMg70eOHjoJqEsnc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 22:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0e:15:06:7b:65:e5:e5:b0:88:e9:3c:4c:5e:2e:98:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50b0e7157147a90ce37460b719cb760694ab5414
        Validity
            Not Before: Oct  5 22:00:21 2026 GMT
            Not After : Oct  6 22:00:21 2026 GMT
        Subject: CN=e60920e04c62adac791e1bfc2511727b30b857ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2c:54:8b:fe:29:aa:b2:db:14:44:a6:e8:bf:
                    73:50:e9:3c:b1:ff:ff:62:c0:d7:ec:d8:49:83:42:
                    a0:8a:ba:16:94:93:9e:55:6c:a9:22:6a:69:d2:a7:
                    9e:87:b1:bb:84:53:8e:35:7e:94:ba:57:45:92:34:
                    e6:81:51:33:0e:78:dc:7c:a7:3e:ab:25:5e:a0:77:
                    b3:51:d6:d4:d3:d5:45:53:66:3a:2c:dd:b9:52:eb:
                    8b:b4:10:d6:73:02:89:08:d8:0f:8e:f3:56:be:fe:
                    5a:18:25:ab:4c:b9:f0:d7:73:48:c7:47:8b:96:22:
                    db:74:d2:5e:f3:e4:24:6f:05:b0:72:c9:9e:3d:b0:
                    ac:4f:5a:42:c0:28:e3:b3:9c:b2:a0:ec:07:5b:34:
                    3b:e0:b6:a4:b0:ee:49:1a:23:22:e8:44:59:76:a6:
                    98:01:bc:34:ee:e1:2f:ea:1d:3e:8c:3e:dc:85:b9:
                    31:8c:f9:58:d3:28:ea:35:0d:8a:22:ab:7e:24:e6:
                    60:11:7b:c9:bb:ad:f0:1e:49:14:34:a1:24:16:1d:
                    a4:08:03:73:55:4f:02:fc:4a:9e:b1:ec:fa:c1:eb:
                    f7:02:90:6b:89:a9:bf:aa:aa:7b:26:74:95:6d:73:
                    da:dc:76:36:6d:ad:ac:48:c9:86:ee:8d:46:8a:f6:
                    07:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:09:20:E0:4C:62:AD:AC:79:1E:1B:FC:25:11:72:7B:30:B8:57:AD
            X509v3 Authority Key Identifier:
                keyid:50:B0:E7:15:71:47:A9:0C:E3:74:60:B7:19:CB:76:06:94:AB:54:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:ef:d6:cc:87:8e:78:75:2d:82:c9:a1:50:53:a9:19:91:b5:
         2a:e0:60:da:9b:b8:4d:a2:57:5f:84:f2:65:20:9a:2a:ce:d6:
         ad:53:d2:17:7d:2e:2b:ec:96:d7:e1:9d:42:4c:c1:c6:9d:4f:
         92:0c:29:3b:0e:99:ff:cf:31:8b:f1:87:75:f4:82:94:06:99:
         a2:8a:2a:80:42:00:82:52:f4:df:70:96:4a:52:6a:18:15:56:
         4b:35:19:85:ba:c8:d9:43:ce:3e:62:85:08:d2:ea:19:c6:c5:
         39:7f:dd:75:22:80:b9:29:62:b1:dc:c8:73:1f:21:38:b2:bd:
         3e:07:61:79:b4:02:de:9f:55:4b:77:d5:96:c8:80:32:04:e5:
         52:a6:b3:6d:ad:9a:1b:42:ae:e6:49:d6:c9:d9:85:f2:1f:15:
         4f:6d:f1:ae:4d:9e:7b:fc:b8:39:29:a1:cc:c2:8f:7d:86:2c:
         3f:e2:9d:2f:28:5f:0a:ff:9e:b1:9f:e4:33:29:22:c4:d6:f5:
         e4:e7:17:65:7d:6a:23:6c:ef:3c:47:19:a9:dc:9f:55:c5:b8:
         d5:d6:9b:5e:c8:a8:4b:fc:4e:94:26:4c:2e:52:5c:a4:29:46:
         6a:bf:b5:b5:34:d9:4b:23:b4:b5:6d:18:98:47:66:75:72:be:
         5d:05:35:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 07:45:17 2026 by rpki-client