Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
File:                     UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft (raw, json)
Hash identifier:          TAaEdHhjF5Ev/yrG+vkLPd0SydQ91CPEcs0dckVrsxs=
Subject key identifier:   21:45:1E:83:DF:62:4D:62:EF:17:EF:60:01:86:1B:CC:08:35:8F:EB
Authority key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
Certificate issuer:       /CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Certificate serial:       01A0F90E99CF19E6123FFCAAB2FE76F4E55C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
Manifest number:          1A8E
Signing time:             Thu 01 Oct 2026 20:01:18 +0000
Manifest this update:     Thu 01 Oct 2026 20:01:18 +0000
Manifest next update:     Fri 02 Oct 2026 20:01:18 +0000
Files and hashes:         1: 0d6SiGZ_3HskVJZrwW4LAUnPhVk.roa (hash: sH5j+6BmvxKro4kCtZa6p73msltGzoMgNQq57Mh0jXE=)
                          2: GBJMnjMbFvL5E-lL9i3lBFi6nWY.roa (hash: SL+iSObRv/yIgCUc1iePoCbQgwvJ0km8l952y/nYPkY=)
                          3: IY7fhcpZn8V1nFJzcjkAB2G_wy8.roa (hash: kypNUV6hOKnyhwHaYDOZf/jJOmWZK2acEUl1kQxKdoM=)
                          4: UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl (hash: hLre2EjiTFDXjq2727OghFhPk9BsmnnprQ+OBtYNBS4=)
                          5: ZDSwaO2zu2qpiNoQdfHO9f__qXE.roa (hash: /yuwN8mjkUUOdBbxmmKWCbuEc9CKVHYeB+reIdnpnsM=)
                          6: qfnbY9JngbTP144k13tCg-IRl3w.roa (hash: 9MKZ2wZQrvJYgyQxGjaYnWmRu2eM+70F1EApasiltnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 16:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f9:0e:99:cf:19:e6:12:3f:fc:aa:b2:fe:76:f4:e5:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
        Validity
            Not Before: Oct  1 20:01:18 2026 GMT
            Not After : Oct  2 20:01:18 2026 GMT
        Subject: CN=21451e83df624d62ef17ef6001861bcc08358feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a2:90:7e:4d:bd:de:8b:81:41:24:81:31:87:
                    ac:46:a0:54:ad:a2:82:ae:08:c2:ec:3d:db:0a:e0:
                    53:9c:29:1d:84:d7:bd:28:ed:8d:f1:eb:b7:ca:8c:
                    a9:97:87:9c:9c:d7:69:60:ed:a8:8e:f9:3b:45:36:
                    a7:83:34:99:20:9e:e2:13:c7:fe:64:f4:8e:bc:b3:
                    9e:c4:e6:fa:4d:e3:28:b0:78:66:df:1e:bd:c1:35:
                    17:80:48:d6:d2:b6:5a:0d:6b:1c:61:52:48:0d:0c:
                    d3:69:af:0b:6c:bc:af:b7:3c:1f:7f:42:a8:99:dd:
                    00:81:ce:7c:be:00:6e:2f:42:20:3c:fe:61:d9:98:
                    0e:18:5b:ae:8e:18:0f:8f:e4:9b:69:1e:e2:57:b7:
                    bc:67:4b:d8:c7:7d:ed:37:cd:20:8d:d2:24:ef:8a:
                    b6:2b:d7:67:10:8f:1a:93:06:c0:b0:26:55:86:c6:
                    30:c8:6c:eb:ca:96:8e:d6:cf:bb:60:97:79:79:61:
                    32:a3:36:06:a4:7c:61:b2:b9:a0:4d:20:4f:54:da:
                    35:02:47:3b:68:74:40:ac:4f:b1:b0:5e:5b:c1:01:
                    f5:09:d8:2c:19:7c:0b:85:09:92:ac:9c:25:43:28:
                    1b:71:ed:c7:3e:77:b6:90:d5:ea:9c:74:3d:8f:27:
                    69:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:45:1E:83:DF:62:4D:62:EF:17:EF:60:01:86:1B:CC:08:35:8F:EB
            X509v3 Authority Key Identifier:
                keyid:52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:7e:a7:62:fe:ea:f3:37:09:ff:b7:2e:56:3f:3a:36:82:45:
         12:bc:d2:10:a0:53:10:a1:f5:b0:be:35:f2:25:ff:0d:67:90:
         4c:36:e3:02:81:a0:89:29:fb:26:33:f8:9f:ad:29:d6:f0:97:
         0c:90:a8:7c:3c:1a:fe:c2:04:38:78:0f:72:f1:f0:58:a8:0f:
         fb:98:1b:cf:68:26:0f:cd:50:b4:12:1e:5a:52:4d:bb:ba:03:
         da:e1:87:5d:59:d9:0a:00:44:f9:10:ae:7c:95:3a:f6:63:7b:
         63:ca:f6:f4:6b:fd:8e:6f:d5:a6:2f:41:e8:b5:29:a6:a4:a7:
         65:d3:76:47:fa:09:6e:3b:ee:da:43:41:c8:2a:62:76:b2:07:
         4a:6a:35:ac:50:ac:d4:f1:ae:52:3b:5e:cc:3b:07:15:96:1a:
         e6:06:ce:20:cd:81:c2:2b:79:97:6b:71:fa:f4:d6:0d:fa:19:
         d0:68:b3:c4:ae:ba:78:a1:10:22:f6:e9:d3:c9:fa:c5:15:12:
         24:10:9e:e9:89:1e:a9:19:6c:9c:f2:f9:17:7b:bc:da:aa:cb:
         54:14:8f:91:11:87:81:5a:ff:ac:f1:a5:69:81:89:ab:08:b6:
         07:7a:bf:3b:7e:d4:9b:7d:d7:52:9e:0c:ee:48:4c:29:e5:25:
         55:d8:33:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 08:34:09 2026 by rpki-client