Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/UDYBHjSAnkd01MnJ8W_KaL24f6o.mft
File:                     UDYBHjSAnkd01MnJ8W_KaL24f6o.mft (raw, json)
Hash identifier:          DL4A2usd1DE8d/723HLoxTv1OAqTpGo+B8fLeDfPDrY=
Subject key identifier:   07:9E:7B:CA:67:76:43:C6:4D:97:6C:39:A5:F8:54:9E:93:A1:9B:47
Authority key identifier: 50:36:01:1E:34:80:9E:47:74:D4:C9:C9:F1:6F:CA:68:BD:B8:7F:AA
Certificate issuer:       /CN=5036011e34809e4774d4c9c9f16fca68bdb87faa
Certificate serial:       01A0F0E85717A223EB56C23E3CE661189CEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UDYBHjSAnkd01MnJ8W_KaL24f6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/UDYBHjSAnkd01MnJ8W_KaL24f6o.mft
Manifest number:          F6
Signing time:             Wed 30 Sep 2026 06:02:33 +0000
Manifest this update:     Wed 30 Sep 2026 06:02:33 +0000
Manifest next update:     Thu 01 Oct 2026 06:02:33 +0000
Files and hashes:         1: UDYBHjSAnkd01MnJ8W_KaL24f6o.crl (hash: 39fNdYQeN7+eWVdrOiwnaXt7eVdLEWl/xgX40/ADDb0=)
                          2: bEKO1xFyFydQ-qhcqaJLpw9igyY.asa (hash: jR7DlDJeCnwaCJJNmvyvwR2xMQOi7n5oqyxgiOsySVM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/UDYBHjSAnkd01MnJ8W_KaL24f6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/UDYBHjSAnkd01MnJ8W_KaL24f6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UDYBHjSAnkd01MnJ8W_KaL24f6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 06:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f0:e8:57:17:a2:23:eb:56:c2:3e:3c:e6:61:18:9c:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5036011e34809e4774d4c9c9f16fca68bdb87faa
        Validity
            Not Before: Sep 30 06:02:33 2026 GMT
            Not After : Oct  1 06:02:33 2026 GMT
        Subject: CN=079e7bca677643c64d976c39a5f8549e93a19b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:15:bb:d6:cb:0b:79:bb:6c:46:48:f5:62:86:
                    4f:5c:aa:20:ef:13:e4:3a:80:d5:52:28:e1:49:4d:
                    13:59:71:44:7b:f8:66:80:f9:27:89:e8:83:0d:d9:
                    dd:9e:ba:e8:43:53:0c:7f:8d:1d:d2:d9:32:a0:b4:
                    c0:fa:33:91:6d:1c:70:42:be:48:53:d3:c9:55:cf:
                    7b:0e:de:cf:c3:dc:c7:ea:c9:41:7e:3e:c2:0a:2b:
                    5b:ba:61:2a:57:fe:83:fd:c6:20:2f:03:c9:d5:1b:
                    58:de:81:d0:f5:75:51:2d:81:bf:c6:f9:2e:8c:36:
                    d3:53:39:d2:3c:03:f7:bd:b9:df:e4:3b:65:56:27:
                    48:97:89:3b:03:a4:03:e0:cc:16:ab:9d:f6:d8:8c:
                    42:fc:95:87:a2:59:2f:3a:15:52:8e:35:e2:e3:f2:
                    10:b9:a5:07:0e:84:a2:02:a2:18:7c:da:67:58:f1:
                    1a:35:30:63:53:bc:e9:41:92:78:93:41:13:fb:82:
                    a5:aa:23:cc:79:55:a3:30:0d:d9:f0:ed:ca:e2:60:
                    d1:ae:5a:e0:d0:e2:a3:53:ad:62:c6:0e:44:28:27:
                    76:8f:b1:f6:c0:b2:02:ad:7d:c8:0a:00:a7:e2:39:
                    e5:30:d1:cf:c7:e4:bf:11:b6:0f:31:b8:4c:d8:e3:
                    90:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:9E:7B:CA:67:76:43:C6:4D:97:6C:39:A5:F8:54:9E:93:A1:9B:47
            X509v3 Authority Key Identifier:
                keyid:50:36:01:1E:34:80:9E:47:74:D4:C9:C9:F1:6F:CA:68:BD:B8:7F:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDYBHjSAnkd01MnJ8W_KaL24f6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/UDYBHjSAnkd01MnJ8W_KaL24f6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/UDYBHjSAnkd01MnJ8W_KaL24f6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:5d:a5:90:27:63:aa:71:0a:16:2c:62:1f:91:f8:16:7b:20:
         0a:7f:ae:13:fb:40:e8:f7:be:b6:40:3a:84:34:62:f7:f0:7d:
         be:61:f5:b0:b8:09:d3:a2:3b:5b:52:4b:35:21:d5:ac:b7:80:
         4b:df:f3:d0:f4:a6:b0:a7:c7:cf:a7:74:0e:60:f9:e9:32:fe:
         ec:26:a2:95:57:51:ce:05:a8:fe:05:b4:5c:c8:5b:e3:f3:33:
         ab:be:33:f6:69:bb:9a:e1:83:47:8f:1f:7a:67:8b:a5:1a:9a:
         84:b0:14:de:36:fc:77:63:ec:3b:83:ff:87:8a:41:e3:3d:95:
         03:cc:b6:5e:28:0e:03:9c:71:cd:90:c0:d2:1c:a8:30:8e:92:
         a4:ca:bd:f9:af:3e:05:e2:ae:7b:46:6e:c8:48:c9:c5:ef:00:
         e0:a3:79:f0:43:71:04:2b:22:71:84:0c:80:52:1d:45:6e:ae:
         f2:86:49:70:64:71:9c:9f:f0:d6:73:64:9c:a0:34:03:68:ca:
         e7:36:d0:9c:8e:52:ca:a8:fb:a7:50:05:6b:e5:43:cd:4e:88:
         46:1e:ac:cb:e5:81:20:dd:fa:dc:2d:04:1e:b6:ab:7c:b3:16:
         bc:68:c5:56:ca:84:c5:ce:dd:4c:cb:40:5e:b3:69:9a:1c:e8:
         54:3d:be:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:53:56 2026 by rpki-client