Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
File:                     ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft (raw, json)
Hash identifier:          dEdmd2YtnWvxHjPoZ1gorIyZ/KNoPk90CZEA82EBnzw=
Subject key identifier:   C2:5A:61:9C:A7:CC:51:A1:54:92:5E:14:2F:43:2B:C0:8C:17:AB:C5
Authority key identifier: BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94
Certificate issuer:       /CN=ba515836af300f7c71f71dd18b9c3f51c252bb94
Certificate serial:       01A0DA5FA2BFAD2EAD5F250F358BCDECBA2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
Manifest number:          1134
Signing time:             Fri 25 Sep 2026 21:01:35 +0000
Manifest this update:     Fri 25 Sep 2026 21:01:35 +0000
Manifest next update:     Sat 26 Sep 2026 21:01:35 +0000
Files and hashes:         1: DhAYsKxO8WwtTQM9qN9EaLihdkc.roa (hash: ITzy4zYg5ewXMnbWQKg/M27oXczLD0pz5gjZoCMokoc=)
                          2: ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl (hash: YvbRvUgoDNc/oz5FNeK5c9YNktSk9nwdRPj+45BG7Uo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:5f:a2:bf:ad:2e:ad:5f:25:0f:35:8b:cd:ec:ba:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba515836af300f7c71f71dd18b9c3f51c252bb94
        Validity
            Not Before: Sep 25 21:01:35 2026 GMT
            Not After : Sep 26 21:01:35 2026 GMT
        Subject: CN=c25a619ca7cc51a154925e142f432bc08c17abc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f1:d3:db:67:fd:fb:6a:1a:a6:50:a0:5a:00:
                    90:43:77:1f:2f:a0:b9:ff:4b:52:2c:09:db:9b:66:
                    85:74:6f:d5:eb:55:e9:73:dc:4f:c1:ef:fc:f3:ba:
                    0d:ee:31:30:88:8f:36:86:57:d3:03:f5:26:b1:de:
                    45:b4:db:87:28:eb:27:47:a5:2a:52:93:a6:1a:51:
                    6c:91:39:19:3f:74:2d:49:10:b0:3b:ad:ac:d2:d6:
                    d2:89:93:97:54:79:68:c1:23:c4:00:bc:b6:41:11:
                    2c:21:93:94:79:cb:55:e4:25:71:42:3a:0a:53:a3:
                    2e:96:50:c1:f4:84:96:da:28:b4:eb:75:61:e5:f1:
                    0b:33:7f:16:9f:cc:3f:4c:ed:0b:f7:72:be:4e:2b:
                    b5:74:0e:fa:35:75:21:7a:ab:8d:63:29:b1:41:70:
                    51:ca:0c:b3:6f:cb:6e:fc:6e:df:ea:3e:c1:60:4f:
                    7b:58:ed:fd:2a:26:d1:60:97:5c:0a:86:c8:b1:77:
                    34:c2:f6:09:bf:94:d5:ce:ca:4c:a8:47:2e:f7:8e:
                    09:bd:60:82:6b:10:70:12:46:a7:8c:10:de:a8:76:
                    48:36:b0:c6:5c:ba:ef:3b:42:4b:66:ef:3a:b2:82:
                    06:0d:42:72:c4:a4:52:32:a0:6e:9d:d5:65:af:56:
                    c7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5A:61:9C:A7:CC:51:A1:54:92:5E:14:2F:43:2B:C0:8C:17:AB:C5
            X509v3 Authority Key Identifier:
                keyid:BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:5a:16:4a:b7:47:35:3c:70:b3:39:2e:46:91:8d:51:3c:8b:
         f3:b7:93:e1:cc:ad:a1:bb:31:f9:ce:57:d0:e2:e8:1b:7b:dc:
         30:14:68:9f:c2:b3:69:0b:e5:e2:c9:17:75:40:2e:d3:cd:38:
         76:76:ef:1f:72:2f:65:85:6b:c8:0a:7c:57:2a:d3:3e:78:d6:
         17:5e:71:7c:2c:1d:27:ba:ae:43:0b:56:86:c6:9f:f7:6d:79:
         5b:73:9f:91:38:e3:90:da:b3:5e:83:53:35:b7:70:fd:b9:45:
         e1:ea:3d:d3:ef:74:33:5f:e4:03:b2:f6:5a:64:79:3b:45:d3:
         e4:07:37:25:25:48:20:9e:a5:45:62:5e:ab:be:59:e3:68:c2:
         29:83:9e:9a:0f:a5:07:bc:cb:8c:82:64:90:e1:7b:b0:7d:1e:
         bd:79:c2:29:07:14:58:2e:88:92:2b:51:9e:3d:66:bf:4b:f8:
         43:24:3d:53:b9:4c:eb:41:dc:3e:3f:7c:5f:35:c6:44:d9:43:
         ac:3f:c2:c0:4c:cc:8d:30:c5:49:dc:73:32:08:cc:a4:59:36:
         4b:d6:01:42:e7:bf:a3:05:e6:56:5f:0d:e3:e1:75:62:bc:d0:
         f8:e5:e9:c4:25:6c:89:2d:a0:55:fe:1a:db:0a:ba:14:27:88:
         33:9f:e9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:34:16 2026 by rpki-client