Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/uH5a7bmaKXmvirMZP1RhzMEJk7s.mft
File:                     uH5a7bmaKXmvirMZP1RhzMEJk7s.mft (raw, json)
Hash identifier:          9RmV7POvn8LNbFY/hYFSPxUpgxHW0enlh/VmeNkWhqA=
Subject key identifier:   EA:A7:16:DC:95:E4:2A:9A:72:73:BE:CC:36:17:EF:E5:96:F8:47:3B
Authority key identifier: B8:7E:5A:ED:B9:9A:29:79:AF:8A:B3:19:3F:54:61:CC:C1:09:93:BB
Certificate issuer:       /CN=b87e5aedb99a2979af8ab3193f5461ccc10993bb
Certificate serial:       01A0E1750FB62EEBE04386EE72B75C229362
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uH5a7bmaKXmvirMZP1RhzMEJk7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/uH5a7bmaKXmvirMZP1RhzMEJk7s.mft
Manifest number:          EE
Signing time:             Sun 27 Sep 2026 06:02:20 +0000
Manifest this update:     Sun 27 Sep 2026 06:02:20 +0000
Manifest next update:     Mon 28 Sep 2026 06:02:20 +0000
Files and hashes:         1: PF8e_FHLHP2VjtFiiZZrvVvSsLI.roa (hash: e0MfoAAfwbq4ZZJ6qywKn5Vxfb/htSXVtX0d+TDmu3Q=)
                          2: R6M5qpYqqxyZqbcHLnctbf1Dg8M.roa (hash: RqgRuP5NzyvHUqZZDLI5gw5VV1GhQB+IWzarebNgEt0=)
                          3: havRenuAc3sWaFEp_ebH2dbYCIM.roa (hash: 3BZzhi4aYFSabiKQhAbLpfZdvk/co2C3Nc0BqHQrAGU=)
                          4: i8AN6geVF7hp5kMKRq_5tnIP6L0.roa (hash: oBfxy68KZXNPogj6PQRYfnFb/uYEC+FuyX64lWOc4jQ=)
                          5: uH5a7bmaKXmvirMZP1RhzMEJk7s.crl (hash: lXg9OrnkcZQJDViPk823y5vYj7J5lfG9EV9Fr8m0iu8=)
                          6: xsv50bdrlhjVslC-d3EfouTes9E.roa (hash: qOUxvczcP9qEDQf8ITK1cqOoImWNAIXwxpiqhps+Npk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/uH5a7bmaKXmvirMZP1RhzMEJk7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/uH5a7bmaKXmvirMZP1RhzMEJk7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uH5a7bmaKXmvirMZP1RhzMEJk7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:75:0f:b6:2e:eb:e0:43:86:ee:72:b7:5c:22:93:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87e5aedb99a2979af8ab3193f5461ccc10993bb
        Validity
            Not Before: Sep 27 06:02:20 2026 GMT
            Not After : Sep 28 06:02:20 2026 GMT
        Subject: CN=eaa716dc95e42a9a7273becc3617efe596f8473b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:63:f8:37:4c:c7:7a:c9:f8:77:40:f8:96:4d:
                    8e:84:15:3f:84:92:87:ed:8a:31:aa:86:34:dd:42:
                    2b:b9:dc:15:19:b1:a0:96:e5:55:cd:f1:fd:80:d5:
                    ac:eb:e5:2f:46:b3:71:c4:f5:58:71:1d:3c:7e:58:
                    08:d4:42:1a:92:49:38:8a:ce:da:5a:03:5a:40:58:
                    18:fd:a6:b1:1a:61:94:35:91:64:2e:2c:be:c9:54:
                    ff:29:c7:76:8b:6f:fa:66:3c:f6:e2:0d:65:a2:18:
                    0c:46:f6:e0:5c:35:c9:8b:cb:3b:06:88:c6:bd:09:
                    78:cd:40:32:be:65:9c:b5:11:ef:b0:df:ed:22:03:
                    ce:4e:fe:03:a1:8b:29:2e:02:22:d2:fb:dd:99:16:
                    a4:41:63:4e:12:5c:92:9b:ab:41:43:65:55:db:8a:
                    3f:3c:5e:ff:02:2c:b8:05:e7:c0:40:d0:7a:f4:62:
                    c6:49:f5:67:10:00:2f:7d:5d:8f:f0:f8:7f:a6:b1:
                    44:29:59:ec:2c:51:5a:38:f8:67:f0:91:f7:21:da:
                    67:8d:19:3c:57:2f:51:cc:89:7d:f1:b9:36:1f:9e:
                    f3:ac:25:e4:8d:fa:77:76:04:f2:1a:85:c6:53:97:
                    6d:74:ab:4e:a0:8b:4f:eb:09:f8:54:5d:6c:22:dc:
                    ce:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A7:16:DC:95:E4:2A:9A:72:73:BE:CC:36:17:EF:E5:96:F8:47:3B
            X509v3 Authority Key Identifier:
                keyid:B8:7E:5A:ED:B9:9A:29:79:AF:8A:B3:19:3F:54:61:CC:C1:09:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uH5a7bmaKXmvirMZP1RhzMEJk7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/uH5a7bmaKXmvirMZP1RhzMEJk7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/uH5a7bmaKXmvirMZP1RhzMEJk7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:f9:94:8c:15:72:8c:cc:2e:96:2a:78:e2:78:33:e4:38:b4:
         8c:51:e9:e8:bc:82:5b:35:16:78:07:0f:87:11:17:57:09:c2:
         d3:a7:94:7f:2c:da:2c:30:47:04:8c:ea:f2:ee:03:af:d5:50:
         55:db:cb:4e:4d:31:72:f2:b7:56:ad:13:e2:83:9d:1d:8d:ac:
         2d:e1:e9:7f:c7:bf:21:5b:34:ea:a0:15:cd:9d:23:05:ba:f6:
         fb:95:82:27:77:d6:3d:05:66:25:d4:1e:9b:31:57:2e:01:de:
         65:bd:58:8e:ba:f9:08:35:47:cd:76:a1:d8:96:32:70:a1:57:
         32:2a:c0:da:45:0e:bf:19:62:77:05:5f:d9:b6:f9:77:74:a8:
         48:64:96:15:91:b6:bb:b4:1a:cf:b8:2a:c4:09:5c:46:e2:63:
         fc:22:e2:87:01:fb:51:f7:a2:fa:5b:31:53:f6:9b:a1:01:2a:
         7e:3e:fe:bd:1c:f8:e6:3e:ef:8f:8b:bf:b6:5c:66:0a:5e:98:
         bc:d3:8e:28:54:80:9c:3b:86:2e:f2:5e:23:d1:5e:ce:e5:2d:
         de:44:dd:eb:46:e2:3a:ab:c0:a2:b3:23:65:84:bc:8b:37:2f:
         6d:e6:64:40:87:f9:5a:02:c5:d5:e0:76:c9:a2:60:0c:9d:38:
         ba:fd:d3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:29:32 2026 by rpki-client