Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
File:                     UltwWpHbww7RDrciK3eXuDTgGGM.mft (raw, json)
Hash identifier:          v1SeGBGAUA8fj6ijWSPzJudVOt/mj7BzJV/3djKss0M=
Subject key identifier:   1F:E5:0A:06:4C:3D:44:DD:8A:1C:FD:46:8A:90:A5:38:44:CE:61:00
Authority key identifier: 52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
Certificate issuer:       /CN=525b705a91dbc30ed10eb7222b7797b834e01863
Certificate serial:       01A1DCB95E8A923D535BF21008EC2F0BCC8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
Manifest number:          1AFE
Signing time:             Sun 15 Nov 2026 01:01:37 +0000
Manifest this update:     Sun 15 Nov 2026 01:01:37 +0000
Manifest next update:     Mon 16 Nov 2026 01:01:37 +0000
Files and hashes:         1: KlL1K6iOrdNgSybgFClw1upWqbU.roa (hash: W7OttyGx9EuMgenKXewm+r+hTp3kZdfJ3JB/6T3yysg=)
                          2: NqoPs-D12-884odkfg7xB3i3Be4.roa (hash: DsuKILouEzDU3Bip7myO5HxEJ4IKowBV+lI11XXZp/I=)
                          3: UltwWpHbww7RDrciK3eXuDTgGGM.crl (hash: w5mG+RJfDMgsuilWM4uBVsgqa+YsFoJvcf9aiYL2lEU=)
                          4: pa_3nrQU9sw7OgTjd5yx0VmvRCA.roa (hash: RO+47JjxuCYnZ9Bz/vNN2VIRL6JJUsDg7rwYhEHWFsY=)
                          5: tDxg4EDB8G_V5Y7A-uQD8KacDTY.roa (hash: 4PEk4ywaUm/VPH9pCNb29DRHvcCWI/rCMrxfFkXErWs=)
                          6: zNKUtHAFTtLYqLumLGcRzG27f7Y.roa (hash: 872Fq4m0qhsFSDlfogdNcIFhv8haNEfuUjtryb/YTr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 01:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dc:b9:5e:8a:92:3d:53:5b:f2:10:08:ec:2f:0b:cc:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=525b705a91dbc30ed10eb7222b7797b834e01863
        Validity
            Not Before: Nov 15 01:01:37 2026 GMT
            Not After : Nov 16 01:01:37 2026 GMT
        Subject: CN=1fe50a064c3d44dd8a1cfd468a90a53844ce6100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e9:10:56:ac:13:dd:97:59:18:bf:f8:23:b3:
                    2a:22:33:3a:58:62:64:29:75:33:f0:ba:a9:5e:cb:
                    b7:44:7a:47:76:c8:cb:6d:62:29:e7:13:bb:59:3e:
                    95:a3:15:dc:ed:95:d9:b4:09:4c:c2:06:6c:f7:6b:
                    3d:86:b4:47:4c:a6:cd:15:a2:57:04:dd:b5:18:56:
                    e0:69:73:e4:05:af:36:a8:36:69:03:03:e9:1d:58:
                    d9:ef:a4:4f:0a:29:0f:1b:83:34:9a:b8:f8:7a:bb:
                    18:b7:a5:1f:77:9c:23:93:0e:9b:25:dd:3a:dc:25:
                    73:d4:18:ef:1d:74:b7:ec:2a:e5:3e:77:3a:5e:86:
                    3d:09:b8:2e:21:40:9c:92:22:14:82:41:0f:b8:51:
                    13:88:2f:f1:aa:8b:8e:74:80:a4:8e:d0:52:be:c4:
                    ea:8c:a8:f3:ac:bd:31:31:23:7f:74:ab:45:34:dd:
                    ee:fa:35:0b:06:58:02:30:84:29:4a:1e:81:69:3b:
                    10:0b:3e:38:75:7f:d5:44:b9:8e:98:e1:0e:ca:86:
                    53:2d:cc:ad:f5:2a:a4:0c:47:f3:1f:af:a1:a5:4e:
                    bd:e6:7e:c1:bf:66:e5:97:82:d6:5a:d8:12:56:49:
                    89:3e:d5:12:46:71:76:f2:c4:c3:49:03:1e:15:aa:
                    ed:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E5:0A:06:4C:3D:44:DD:8A:1C:FD:46:8A:90:A5:38:44:CE:61:00
            X509v3 Authority Key Identifier:
                keyid:52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:c4:b4:3d:dc:05:fc:0f:28:52:11:70:cd:1b:b0:d1:ff:91:
         cd:27:cf:ed:cc:d7:2d:bf:b7:d3:ae:13:85:9d:76:46:82:0f:
         3f:e1:3c:1f:d9:ab:e7:25:90:d0:4b:1a:d7:3c:e4:d4:70:be:
         28:f8:ad:ca:3b:eb:05:be:18:70:45:1b:a8:46:4d:50:ba:b5:
         b9:45:a0:ab:f6:4c:07:75:57:25:e0:11:83:48:44:2f:e3:20:
         38:1c:8d:52:43:0d:db:f6:d2:fd:07:62:8b:ff:86:f3:87:e6:
         3a:80:f4:cc:43:7e:53:56:68:ac:2e:1b:ee:74:53:35:ba:9a:
         4c:51:ac:91:24:ec:f3:1f:ec:94:21:f8:18:84:35:93:c2:11:
         63:7b:b9:73:17:36:33:87:25:87:bc:b0:16:7c:67:05:db:57:
         c3:85:84:21:68:cd:6e:0b:ee:63:37:3e:1a:0d:23:e4:61:19:
         11:81:cf:1f:15:6a:ac:7c:d6:bb:6f:aa:cc:73:59:a7:d5:8b:
         44:da:60:d0:a6:a7:3d:15:38:70:1b:56:65:16:cc:de:9f:0e:
         5c:87:8c:aa:22:90:be:7d:e8:27:50:24:62:55:a3:e0:79:90:
         ad:5d:54:03:3b:11:2c:c4:74:0e:e7:c3:66:29:77:1b:dc:a1:
         dd:9c:55:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:59:29 2026 by rpki-client