Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
File:                     UeK-E5rnec09T-68zTaCgaH156A.mft (raw, json)
Hash identifier:          2rIrSZUEM32bI26cGKHoM0/GmjI8cKxHzrlWoz0vnXc=
Subject key identifier:   1A:00:56:27:BB:64:C8:00:13:95:CE:A1:80:25:FA:C2:81:53:BB:A0
Authority key identifier: 51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0
Certificate issuer:       /CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
Certificate serial:       01A0D9BA7DA29B591CE70C00EAD239FCDD1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
Manifest number:          1A6F
Signing time:             Fri 25 Sep 2026 18:01:12 +0000
Manifest this update:     Fri 25 Sep 2026 18:01:12 +0000
Manifest next update:     Sat 26 Sep 2026 18:01:12 +0000
Files and hashes:         1: Fh1t7rzPIhJXnOEVD4FNHFJov6I.roa (hash: xyxnFW4AuKmT8OTwF87A3TgtZBfvGtO+UCiL5cJIqm4=)
                          2: UeK-E5rnec09T-68zTaCgaH156A.crl (hash: lImp2kZVKP9+uCn/aoTCbS5OSn7Ozau34gcXauzdJ/U=)
                          3: _FC9hMLG7SF2_l0VnWxgvnPruLU.roa (hash: /T+U+cTcUNtTkJxXrz2mxyyoddVM2fTKoj6v8XpQa6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:ba:7d:a2:9b:59:1c:e7:0c:00:ea:d2:39:fc:dd:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
        Validity
            Not Before: Sep 25 18:01:12 2026 GMT
            Not After : Sep 26 18:01:12 2026 GMT
        Subject: CN=1a005627bb64c8001395cea18025fac28153bba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:86:0b:b7:79:da:ee:e1:0a:8c:92:de:e8:a8:
                    04:0c:c7:52:b4:e8:65:ba:a5:5d:7b:5b:df:32:44:
                    42:65:42:ce:e7:fc:dd:43:54:df:d1:e2:e9:4e:e5:
                    f9:5f:7c:7a:a6:60:ec:41:d7:21:d7:6a:1d:0d:34:
                    9d:39:10:0d:c4:2c:c4:52:6f:5c:f0:76:72:2e:4e:
                    8b:56:b7:4f:58:7c:7b:29:f0:4e:c9:bc:d1:09:16:
                    73:df:93:4d:41:54:60:6d:c7:34:0f:66:d3:92:de:
                    1d:2a:58:9d:05:fa:97:b6:19:8e:94:3b:32:eb:e9:
                    57:4c:60:2e:2d:a0:42:5a:8e:bb:fe:16:cf:50:32:
                    df:78:87:80:7f:f0:41:9e:2e:c6:95:fc:d5:56:66:
                    0f:31:30:c2:30:b4:c1:35:fe:9a:80:72:45:d1:96:
                    78:2c:7f:5e:f7:44:96:6a:01:b0:a0:5b:33:16:18:
                    68:6d:9a:06:2e:b0:90:aa:5f:52:30:d7:42:6b:00:
                    67:97:04:67:9d:98:26:f0:7a:fb:9c:68:cd:bb:da:
                    34:6a:c9:bf:98:b1:cb:27:fc:0a:b6:eb:a7:de:60:
                    51:b9:04:80:3e:7e:cf:ac:45:b1:e1:0b:7c:ac:05:
                    41:54:90:d6:d0:48:a6:3a:11:ab:6f:b8:68:9c:ce:
                    49:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:00:56:27:BB:64:C8:00:13:95:CE:A1:80:25:FA:C2:81:53:BB:A0
            X509v3 Authority Key Identifier:
                keyid:51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:bb:1e:f6:5c:a7:24:ed:1b:a6:c5:33:74:2c:e7:bd:32:2e:
         60:3f:11:45:2d:80:83:10:26:17:3e:95:83:22:4c:89:9c:08:
         0b:48:f1:f4:aa:44:a5:10:72:3e:8c:29:31:bb:d1:38:e7:14:
         0a:3d:d8:73:a0:60:b3:a4:91:3d:64:b0:6d:5d:03:f2:b7:b8:
         28:51:f1:29:5a:a6:42:40:76:90:6f:38:46:a5:e5:51:84:39:
         98:da:fa:dc:40:87:9b:50:48:d9:cc:f7:30:e8:c0:a8:ba:1f:
         98:7c:e7:15:6d:a7:2f:29:12:be:07:de:ba:76:51:78:64:f7:
         1d:1e:b5:3a:33:d8:30:b0:49:63:16:61:9e:4c:f0:eb:32:41:
         af:5b:9e:5b:f1:e6:ae:a6:02:1b:0d:83:75:cd:ee:e6:82:4d:
         66:fd:d9:cd:21:2e:a2:83:e3:ea:0b:29:36:42:25:6a:72:b6:
         79:1d:ab:ec:c6:76:c7:b7:2d:69:16:b7:40:c2:d3:c5:62:50:
         03:21:a4:27:26:5e:c4:07:b6:0f:18:0e:a2:e5:1f:8d:97:c5:
         14:90:a1:76:e7:a8:4c:3e:83:09:b6:3c:5b:38:d9:95:de:f7:
         60:b1:08:27:3d:00:8f:56:88:f7:6e:32:8d:ea:2c:94:23:89:
         57:66:c1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:21:50 2026 by rpki-client