Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/2d54f2-ed3f-4c23-991b-403f634c7006/1/UBCc6jSKCdOQFwsrUP1PL0-gwHE.mft
File:                     UBCc6jSKCdOQFwsrUP1PL0-gwHE.mft (raw, json)
Hash identifier:          6p5f8j7dnhv6B5O8d45DkcV+4PC4b8LA5L/DxWnXFxQ=
Subject key identifier:   BC:1C:3A:0E:F5:55:F9:1C:6B:A3:6C:DC:FA:87:69:F4:BA:0C:8E:98
Authority key identifier: 50:10:9C:EA:34:8A:09:D3:90:17:0B:2B:50:FD:4F:2F:4F:A0:C0:71
Certificate issuer:       /CN=50109cea348a09d390170b2b50fd4f2f4fa0c071
Certificate serial:       01A0E363B3C159C68EDE7E29380B4858CEF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UBCc6jSKCdOQFwsrUP1PL0-gwHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/2d54f2-ed3f-4c23-991b-403f634c7006/1/UBCc6jSKCdOQFwsrUP1PL0-gwHE.mft
Manifest number:          0171
Signing time:             Sun 27 Sep 2026 15:02:37 +0000
Manifest this update:     Sun 27 Sep 2026 15:02:37 +0000
Manifest next update:     Mon 28 Sep 2026 15:02:37 +0000
Files and hashes:         1: UBCc6jSKCdOQFwsrUP1PL0-gwHE.crl (hash: oTvxDGiL65E7zkB/NhW49RdWS+fGQyQY5Hnm2OzHs2g=)
                          2: VlDvPryAuk2PGBFGwuY-gCe_F5A.roa (hash: TJR1bUgs/pW0JpJ4B506N0MthyLFTUA8QuoRDNEKpko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/2d54f2-ed3f-4c23-991b-403f634c7006/1/UBCc6jSKCdOQFwsrUP1PL0-gwHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/2d54f2-ed3f-4c23-991b-403f634c7006/1/UBCc6jSKCdOQFwsrUP1PL0-gwHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UBCc6jSKCdOQFwsrUP1PL0-gwHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e3:63:b3:c1:59:c6:8e:de:7e:29:38:0b:48:58:ce:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50109cea348a09d390170b2b50fd4f2f4fa0c071
        Validity
            Not Before: Sep 27 15:02:37 2026 GMT
            Not After : Sep 28 15:02:37 2026 GMT
        Subject: CN=bc1c3a0ef555f91c6ba36cdcfa8769f4ba0c8e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:9d:bd:d2:70:b1:4f:c2:f0:54:b9:aa:d1:19:
                    77:90:70:e1:bb:55:00:0e:61:95:17:98:c9:2f:99:
                    0c:07:36:3c:35:06:75:b1:6c:b2:65:62:dd:ec:9d:
                    75:dc:6e:e6:40:06:b6:a1:66:41:85:ed:e2:73:17:
                    84:da:e4:c3:d1:6f:2c:3d:29:2e:b6:59:bb:95:05:
                    6f:fe:11:de:7b:44:8e:8c:72:77:6a:6c:11:72:6d:
                    41:0d:b5:f0:27:64:55:f3:5f:8d:18:ba:77:3f:19:
                    05:0d:df:dc:91:93:d0:cd:46:4c:d3:ed:d9:a3:8d:
                    3d:20:b8:f3:70:1d:34:04:2d:e8:92:95:40:f6:ec:
                    36:dc:a1:de:bc:54:53:51:f3:12:71:7b:6f:cb:c2:
                    57:27:ac:7d:be:2f:8a:96:e1:24:35:05:ec:23:69:
                    96:5f:29:3f:59:56:84:40:88:06:90:f4:0f:7f:fe:
                    4d:04:df:b1:48:de:56:1c:d4:de:3d:ed:55:06:de:
                    79:c9:ef:cd:5c:93:a2:df:75:17:c1:2b:59:c9:df:
                    75:a1:03:ad:ac:ba:44:7f:fb:f1:a7:1a:3a:b1:0f:
                    5f:6e:c1:20:b2:76:e8:62:22:af:a5:0b:66:52:b8:
                    de:36:75:1b:d6:3c:39:1f:b7:11:de:c1:31:12:7b:
                    a6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:1C:3A:0E:F5:55:F9:1C:6B:A3:6C:DC:FA:87:69:F4:BA:0C:8E:98
            X509v3 Authority Key Identifier:
                keyid:50:10:9C:EA:34:8A:09:D3:90:17:0B:2B:50:FD:4F:2F:4F:A0:C0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBCc6jSKCdOQFwsrUP1PL0-gwHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d54f2-ed3f-4c23-991b-403f634c7006/1/UBCc6jSKCdOQFwsrUP1PL0-gwHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d54f2-ed3f-4c23-991b-403f634c7006/1/UBCc6jSKCdOQFwsrUP1PL0-gwHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:44:94:b8:c5:46:93:5a:b1:84:1a:fa:99:98:1a:0a:a2:ff:
         b0:d6:ad:be:3a:e2:ee:79:20:34:ff:4a:37:66:5e:bc:90:5d:
         f5:c5:58:a6:33:26:b3:14:66:f0:f4:f2:4f:d2:7f:ee:06:63:
         3c:fb:61:a5:f7:51:5b:21:ff:12:33:19:11:0d:1e:4b:37:03:
         fe:4f:c1:d8:b4:d8:b7:fe:0a:bb:86:7c:a6:45:86:3c:f3:1f:
         d1:20:2c:fb:4a:a9:83:b6:c9:7f:97:71:d6:4c:34:1c:ce:88:
         72:b8:f5:32:4c:43:fe:91:d3:87:d9:18:e9:e1:69:a6:88:f0:
         ce:03:e1:87:38:e3:af:b1:21:6d:a1:68:da:c8:77:f2:30:26:
         29:81:50:45:f1:20:f4:ad:75:73:e2:29:d7:5e:4f:68:87:30:
         e1:00:af:21:a4:9a:37:a0:e6:9e:91:46:cb:27:df:12:0e:2b:
         46:50:7c:c8:b2:2d:ab:ae:bc:19:ed:de:c0:e4:a2:8d:1f:48:
         c9:d7:f3:ff:45:bf:b4:d0:08:6d:6e:2b:d4:11:56:27:7d:2a:
         0e:38:b1:bd:a6:86:a8:5d:19:5a:98:5b:9e:5c:55:fe:f3:14:
         f6:14:76:d8:57:87:68:4e:04:20:8b:96:c7:87:89:11:18:26:
         11:25:99:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:40:34 2026 by rpki-client