Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
File:                     UfKdGEvMUP5lTd70AV3hfSRv0qM.mft (raw, json)
Hash identifier:          Xv8vXDW8hiHcDv+Rm4E59iZMaifZWXmifHSU7+0EVOs=
Subject key identifier:   30:33:86:17:61:79:4E:F9:15:48:66:01:03:92:48:D4:46:D6:FF:01
Authority key identifier: 51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3
Certificate issuer:       /CN=51f29d184bcc50fe654ddef4015de17d246fd2a3
Certificate serial:       01A0D4CAEF5AA1343A5F65486F5D500B8653
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
Manifest number:          0468
Signing time:             Thu 24 Sep 2026 19:01:04 +0000
Manifest this update:     Thu 24 Sep 2026 19:01:04 +0000
Manifest next update:     Fri 25 Sep 2026 19:01:04 +0000
Files and hashes:         1: Md5gEySjLzH0cjn7UYFWEoKX_oo.asa (hash: l0GilubfWDqDj0QwAujo4MRPBvzm9C+U8ouoOT9mSu4=)
                          2: UfKdGEvMUP5lTd70AV3hfSRv0qM.crl (hash: xQ/GNwzv0VcI1wNvCLUSOpCYho0LBaPGipDBsZ7PKt4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 19:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:ca:ef:5a:a1:34:3a:5f:65:48:6f:5d:50:0b:86:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51f29d184bcc50fe654ddef4015de17d246fd2a3
        Validity
            Not Before: Sep 24 19:01:04 2026 GMT
            Not After : Sep 25 19:01:04 2026 GMT
        Subject: CN=3033861761794ef915486601039248d446d6ff01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7c:f3:ce:90:51:fd:90:fc:13:3e:ac:2c:86:
                    23:8b:ad:1a:f5:1b:ba:0b:6b:fc:f9:2f:af:e5:e9:
                    f4:0e:24:19:80:e2:9d:81:a9:6e:90:2f:e2:1e:d7:
                    92:c1:17:9b:5f:73:f6:80:ec:da:7d:ac:63:97:94:
                    43:4e:a2:d6:c8:32:ee:74:9e:c4:04:6e:6d:92:9e:
                    a4:69:e4:a3:26:6a:7f:d4:12:31:87:a4:7c:d7:03:
                    90:d4:b4:3b:79:fe:55:7f:5f:d3:91:e5:87:f1:b8:
                    b0:5e:e2:49:07:e5:cc:ae:f0:24:d7:c4:d4:af:6a:
                    aa:5f:b5:87:a7:b1:c2:c5:8e:74:c0:57:eb:21:e9:
                    62:49:23:43:b3:6e:e4:c2:12:29:e1:c1:b5:a6:8a:
                    56:97:57:19:d3:91:92:78:49:69:14:31:21:39:0a:
                    cf:18:dd:fe:9a:d2:63:cf:7f:69:7b:98:e6:2c:f5:
                    b0:ba:38:91:50:36:f5:0b:9b:c5:55:fb:26:9a:a8:
                    d6:e7:e5:02:c4:65:49:dc:a4:0d:26:de:2a:83:3e:
                    c6:90:0e:c7:e4:f5:c1:41:52:eb:ed:59:54:ed:75:
                    0f:5d:2c:20:f7:25:b9:7a:67:c8:fa:4b:29:e0:71:
                    dd:7d:d4:66:9a:0b:12:c4:eb:1a:b0:ba:2d:00:0c:
                    82:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:33:86:17:61:79:4E:F9:15:48:66:01:03:92:48:D4:46:D6:FF:01
            X509v3 Authority Key Identifier:
                keyid:51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:cc:1e:20:df:18:13:b6:44:e6:99:97:bf:b1:7e:7b:a5:94:
         d5:99:55:f0:8d:62:a9:69:81:88:2f:5b:60:0a:1c:b8:21:b0:
         cb:12:24:17:72:29:57:bd:b2:c3:44:34:4c:ca:4f:82:0d:fe:
         f3:0b:4a:f0:56:d1:50:33:ae:41:69:24:33:9d:da:4b:e8:a8:
         f3:1e:ec:f9:9f:33:f3:fc:ae:fb:74:71:f1:6b:9e:79:03:5a:
         42:c9:de:c9:e5:55:bb:7e:e9:51:09:71:97:76:e5:e6:ac:71:
         bc:c1:21:f4:93:33:4c:cb:08:e0:7c:e2:6a:ee:ec:f9:fb:a5:
         cf:2c:a0:67:a5:31:46:22:44:1b:cd:c8:c0:7b:41:6f:f9:47:
         3c:6b:70:f2:76:d7:e0:de:38:b5:99:a0:63:8c:ae:cd:bf:ea:
         e1:94:ee:3c:a5:a4:a1:66:b3:6f:88:86:97:54:90:1b:77:3c:
         02:9c:27:2a:02:a6:63:b4:78:28:3b:68:a3:2a:71:69:68:a1:
         3b:1f:dc:53:83:43:98:b4:2d:74:e5:ea:84:a0:71:bf:ee:e6:
         54:6b:c1:7d:51:18:f2:62:3e:ce:ec:06:8d:79:82:2f:5d:12:
         f7:b6:9d:1b:24:70:e1:04:42:35:f0:55:6b:56:81:05:bc:3b:
         2f:fd:72:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:47:00 2026 by rpki-client