Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
File:                     UxR_m8-R0qz49DW6ULgFBUXNH48.mft (raw, json)
Hash identifier:          JSsaXvhySqdVyH4t8KEJn1eFaiG72aq5vKwhCt/Vc6I=
Subject key identifier:   0F:05:F1:BC:2D:CE:12:26:41:8E:FC:F1:BA:11:4A:4C:22:01:5A:BE
Authority key identifier: 53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F
Certificate issuer:       /CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f
Certificate serial:       01A1DD5E16DE7FB705C7E18FA7F8503C3182
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
Manifest number:          0707
Signing time:             Sun 15 Nov 2026 04:01:33 +0000
Manifest this update:     Sun 15 Nov 2026 04:01:33 +0000
Manifest next update:     Mon 16 Nov 2026 04:01:33 +0000
Files and hashes:         1: JG0kWB2lcANSZ4icVMdox6PnmQU.roa (hash: S3i14g9db5TMp6vh+BHfXGO+xfDTvXvHBvOwS1Pp8sE=)
                          2: UxR_m8-R0qz49DW6ULgFBUXNH48.crl (hash: I3erUx4Flcm/T+lx67snqVjjViAGB0+7y7JeAz+c6hE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 04:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:5e:16:de:7f:b7:05:c7:e1:8f:a7:f8:50:3c:31:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f
        Validity
            Not Before: Nov 15 04:01:33 2026 GMT
            Not After : Nov 16 04:01:33 2026 GMT
        Subject: CN=0f05f1bc2dce1226418efcf1ba114a4c22015abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:11:76:6f:f9:db:89:19:01:44:fc:d9:3a:29:
                    f3:0c:8c:71:5e:88:f4:ee:a6:b8:12:b0:b8:4f:d4:
                    55:f2:38:83:a9:d0:21:a8:44:7d:dc:76:08:9b:fd:
                    75:d0:8d:24:28:a6:13:6a:2b:94:ba:6d:0f:f1:92:
                    f5:f5:6b:7c:48:2e:2e:14:33:9d:73:9c:95:48:a4:
                    af:7c:eb:17:11:fd:98:6d:7e:71:0b:88:6c:54:2d:
                    5d:62:ba:be:bc:b9:97:0a:44:8c:8f:3d:b7:7b:ec:
                    55:76:7c:d0:03:d3:2c:e4:8e:86:9c:3b:5e:ac:f4:
                    aa:1b:f0:67:c5:8d:3b:90:a8:9d:50:08:06:f7:b4:
                    52:0a:16:ce:2e:86:d0:e3:c1:01:ae:d7:53:5f:3b:
                    c9:0a:c4:f5:a0:90:28:28:e6:dd:97:49:df:aa:74:
                    90:0b:dd:62:e2:2f:3a:2a:a7:4f:ce:9c:2c:8b:71:
                    a3:fb:04:16:e0:fc:c6:e6:42:79:36:c3:a1:11:28:
                    1a:c4:42:66:dc:42:2b:f5:a5:a8:7f:70:dc:5a:78:
                    34:c6:22:9a:0f:11:1d:ae:3f:4b:f1:89:47:c1:28:
                    f2:4a:4e:c4:27:ef:b3:ea:39:98:eb:68:c5:31:df:
                    c7:94:74:ab:38:eb:c9:75:39:89:9a:06:5c:b4:33:
                    e1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:05:F1:BC:2D:CE:12:26:41:8E:FC:F1:BA:11:4A:4C:22:01:5A:BE
            X509v3 Authority Key Identifier:
                keyid:53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:f4:4f:08:d9:24:d8:15:8e:db:24:7f:9c:b4:3d:77:4a:79:
         f8:d0:91:b0:cf:29:29:94:50:1e:7e:a1:74:2d:21:d3:45:bb:
         3a:6a:3e:3f:bf:80:25:d4:98:f2:4c:c4:9d:5f:6a:b4:63:23:
         3e:3f:18:00:58:e4:4c:6f:9a:8b:d7:d9:91:4a:0e:c7:c1:fb:
         5e:e2:d6:f9:9f:e4:a2:56:0c:01:40:09:ef:45:08:81:33:8b:
         77:9d:c5:01:3f:ed:e9:48:45:be:5a:64:22:eb:72:e3:12:34:
         a1:25:52:aa:18:c8:f5:4c:92:45:93:3d:76:57:35:58:f0:e5:
         c2:ea:9f:67:35:92:15:77:4b:2e:94:47:3f:a1:68:a4:de:8a:
         bc:43:fe:ed:92:19:6e:5e:92:28:1e:64:dd:47:10:b5:81:30:
         e2:7e:82:e3:16:32:0c:3a:14:8f:a0:07:a7:67:14:0d:fe:73:
         25:96:0a:a1:e3:d7:89:32:90:4d:2c:09:cd:4e:4f:89:1d:8d:
         3c:8b:e0:30:4c:b5:ab:11:ae:cd:98:a2:af:6f:62:44:cd:1b:
         e4:cc:c6:d9:32:81:38:18:4e:9d:41:16:9c:da:67:d7:fa:82:
         44:b9:61:a5:1b:b8:7d:e1:68:49:98:7b:0e:61:2d:1a:5b:3e:
         2a:d5:b1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:02:57 2026 by rpki-client