Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
File:                     UiezboKeTYVl7WV0jhsck8zQDO4.mft (raw, json)
Hash identifier:          k7sZItf6uOOWKVSu11MN4bLlP5xWrNLO1LPvSbt1s4o=
Subject key identifier:   79:A4:C3:F5:22:15:37:C9:91:42:F3:08:28:C9:F3:67:A1:51:A1:D0
Authority key identifier: 52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE
Certificate issuer:       /CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee
Certificate serial:       01A0D8727A7F2E6E72F5C33D6305F57887A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
Manifest number:          1483
Signing time:             Fri 25 Sep 2026 12:02:56 +0000
Manifest this update:     Fri 25 Sep 2026 12:02:56 +0000
Manifest next update:     Sat 26 Sep 2026 12:02:56 +0000
Files and hashes:         1: P5QGU51MBWbq811ui2M903jDzeM.roa (hash: cl6QRl57KjA79TtkotpuwrlWUT5toZEw0rnOBUVQkL8=)
                          2: UiezboKeTYVl7WV0jhsck8zQDO4.crl (hash: j2B2rrKYOvuJCp6VTHjm5fUuXpuQP5EYnqFgKpHQHMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:72:7a:7f:2e:6e:72:f5:c3:3d:63:05:f5:78:87:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee
        Validity
            Not Before: Sep 25 12:02:56 2026 GMT
            Not After : Sep 26 12:02:56 2026 GMT
        Subject: CN=79a4c3f5221537c99142f30828c9f367a151a1d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:86:ca:e0:11:0b:db:f3:bb:5a:0f:9c:80:56:
                    4a:37:31:b6:fc:9c:90:c6:4f:81:c7:d7:6c:3f:d3:
                    81:c4:b6:32:d9:da:0d:36:78:9f:03:51:7c:ba:bf:
                    e5:1a:d6:0e:58:3e:60:fe:3d:d0:84:1a:78:f8:69:
                    80:fd:f3:85:b1:57:34:7f:f3:c2:ca:e0:b1:93:eb:
                    4e:15:46:66:f1:ce:9c:c1:00:b8:d5:cb:ae:b6:18:
                    84:2b:e8:08:ad:dd:9f:10:83:75:ee:77:33:97:d3:
                    18:b5:84:0c:ba:be:63:70:22:a7:a6:80:70:46:06:
                    de:52:6d:9a:6f:fa:e1:0a:80:e7:29:36:78:bd:cf:
                    bb:6f:1d:f6:69:23:9f:83:27:01:3d:fb:a6:12:89:
                    ae:23:35:52:b1:19:77:5a:5a:44:46:20:a3:34:df:
                    15:f2:59:22:fe:35:99:a3:a2:bc:fa:fd:bd:c3:a5:
                    f7:69:ad:83:0d:6f:55:64:37:3e:79:1b:ec:04:94:
                    3a:f4:79:3c:a8:ad:8e:83:53:22:9b:44:7f:27:a6:
                    b6:6d:49:15:06:7a:e0:50:5d:c9:4f:83:9d:72:a8:
                    ef:3b:e3:5d:da:cd:91:0c:a5:67:6b:ed:0a:86:01:
                    1c:fe:b2:b3:72:c2:d2:a8:ab:72:6d:5f:d1:53:1f:
                    87:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A4:C3:F5:22:15:37:C9:91:42:F3:08:28:C9:F3:67:A1:51:A1:D0
            X509v3 Authority Key Identifier:
                keyid:52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:0d:cf:bb:27:13:d0:bd:8b:85:99:c0:08:a4:38:bb:1c:2d:
         ec:c1:26:97:6f:ce:2b:8d:f7:f5:f6:bf:16:13:b4:a4:01:06:
         f5:7d:b4:07:8e:1f:b1:24:6e:cb:48:39:0c:72:16:ce:d7:2d:
         10:8f:76:f1:79:18:d5:b6:3a:61:38:10:11:76:3a:c1:76:dd:
         c0:2a:50:11:d7:88:38:f5:e9:5a:0c:0e:0d:98:72:d7:bd:ad:
         02:7f:cb:ac:c9:ec:26:e8:65:7c:dc:ce:7c:16:c1:47:6c:e5:
         f7:ef:ee:2d:13:88:8d:d1:97:ef:20:c5:4d:38:a0:96:bb:f8:
         3a:af:84:0a:cd:68:8d:ca:d3:0d:f1:f3:25:a7:05:fa:48:56:
         d9:46:66:eb:64:a5:ce:f6:4f:2a:6c:66:c2:5b:29:2b:1d:c1:
         f2:d6:c9:50:0e:99:22:69:02:1a:35:54:f9:d7:d7:b3:9a:89:
         29:6a:c2:ad:d9:2e:17:f2:75:a4:98:68:9a:b3:b7:da:ad:59:
         92:4f:41:08:97:10:5c:fa:af:b5:d2:95:ef:de:f4:cc:17:10:
         59:61:ac:70:5d:5c:88:fc:82:c7:61:d4:b0:78:2d:d7:66:fe:
         00:d8:aa:46:00:8e:24:60:c3:52:7a:5a:4b:3a:28:3e:ad:cf:
         83:4e:5f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:47:13 2026 by rpki-client