Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft
File:                     Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft (raw, json)
Hash identifier:          ssjm/YJs8HlBOI8o/dBfQYiTmXUqbKk3gjC3YPynji8=
Subject key identifier:   16:74:80:C0:72:B7:A7:A5:91:25:32:F9:8E:9A:53:00:AA:AB:AA:9C
Authority key identifier: 52:2F:98:79:CC:FA:DE:E5:D0:4A:9A:99:73:F5:B2:79:52:97:1B:FB
Certificate issuer:       /CN=522f9879ccfadee5d04a9a9973f5b27952971bfb
Certificate serial:       01A0D45D73A5DDBA85FEED1B6F7F046E86DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft
Manifest number:          162F
Signing time:             Thu 24 Sep 2026 17:01:29 +0000
Manifest this update:     Thu 24 Sep 2026 17:01:29 +0000
Manifest next update:     Fri 25 Sep 2026 17:01:29 +0000
Files and hashes:         1: Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl (hash: CLYRg8Wve5e6H46eZyTPdM1qHCq9ArLtWp5PDpyYAiM=)
                          2: oOmlfKVzpMVENSLkIqqHr9oYYIg.roa (hash: /1cGoeAjRc1hP5Tzk5VY4ttcaNmL4WoxJgl5UoSxmIg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 17:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:5d:73:a5:dd:ba:85:fe:ed:1b:6f:7f:04:6e:86:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522f9879ccfadee5d04a9a9973f5b27952971bfb
        Validity
            Not Before: Sep 24 17:01:29 2026 GMT
            Not After : Sep 25 17:01:29 2026 GMT
        Subject: CN=167480c072b7a7a5912532f98e9a5300aaabaa9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:98:11:a0:8a:35:75:f4:8d:be:02:1b:fc:60:
                    5a:ba:7a:67:45:f2:10:0d:80:c7:68:10:36:3e:6b:
                    40:20:3a:60:3a:7c:00:88:d6:7d:b8:2a:ea:f1:05:
                    68:12:7b:8a:6f:90:0e:19:30:fa:a2:c3:29:bc:8a:
                    68:30:c8:72:a5:3c:41:2c:d5:66:4c:1e:54:5f:d0:
                    e2:4e:63:75:b4:54:b5:37:35:2d:06:6f:62:ea:69:
                    7d:3c:e1:27:55:06:d5:f5:3c:e8:aa:56:0d:c0:a1:
                    f9:17:1e:ee:2b:57:b2:63:d3:ca:d7:49:9d:44:43:
                    7c:37:70:f5:3a:b3:0e:56:5c:2e:92:15:be:e8:3a:
                    dc:bd:e9:e3:0e:cb:99:b9:36:4a:d7:7f:8c:f2:f2:
                    70:23:3f:aa:2d:d7:10:a5:7f:20:8f:08:ee:cd:05:
                    2a:b3:0c:78:38:0c:0a:9b:22:42:55:c7:a2:55:69:
                    42:d0:06:9d:ed:b9:3c:46:98:9d:b6:93:f4:8e:f4:
                    43:72:2b:4a:19:0e:36:3e:2c:2d:28:0c:0b:82:b4:
                    ce:04:0c:fc:21:02:a3:65:f7:a5:ce:90:75:9c:ec:
                    09:df:8b:38:a2:27:7f:d2:81:c9:19:70:5f:10:0c:
                    1c:58:73:09:a0:fc:b4:5b:67:52:60:01:47:1d:fc:
                    8e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:74:80:C0:72:B7:A7:A5:91:25:32:F9:8E:9A:53:00:AA:AB:AA:9C
            X509v3 Authority Key Identifier:
                keyid:52:2F:98:79:CC:FA:DE:E5:D0:4A:9A:99:73:F5:B2:79:52:97:1B:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:6a:d8:53:b5:57:1f:a0:ad:b0:1a:73:21:55:a5:14:99:b0:
         4e:ab:5c:0c:94:cc:c5:c2:6e:97:46:3b:78:54:d4:d6:56:c1:
         6c:63:40:ee:b7:9d:8a:21:f4:31:0d:7f:93:22:88:79:85:a4:
         2b:15:ee:a1:74:98:97:6a:c0:6f:c3:95:08:d1:19:09:35:67:
         16:dd:15:59:f5:b1:a9:e1:08:d1:cb:92:36:1f:1e:e5:1d:90:
         d3:5e:2f:04:04:1e:d7:78:8f:b3:26:b0:d4:1f:3f:80:28:72:
         51:f0:4d:d9:80:70:d6:83:2c:09:5a:a2:bd:49:ef:93:11:c8:
         94:6b:3b:48:9e:06:71:3b:81:46:0c:e1:38:c0:1b:62:28:af:
         4a:c1:75:fe:17:48:13:18:4c:49:9e:8c:b8:d8:6e:18:85:1d:
         83:8a:6c:45:1e:21:a6:6f:75:eb:22:2a:1c:4e:1a:ac:c5:1f:
         55:c6:fe:16:89:f3:56:7a:28:07:81:a0:af:3c:e8:bf:e9:58:
         33:80:e4:28:0b:20:db:f1:6b:53:13:1a:bd:31:b2:99:a4:89:
         31:0e:35:33:db:6a:d0:4c:fd:ca:f7:2f:80:91:35:43:8b:c3:
         e8:7d:a6:f7:e1:de:77:ee:ae:12:ed:10:3c:f9:20:eb:df:e2:
         e9:de:1c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:22:22 2026 by rpki-client