Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/UDYBHjSAnkd01MnJ8W_KaL24f6o.mft
File:                     UDYBHjSAnkd01MnJ8W_KaL24f6o.mft (raw, json)
Hash identifier:          t6IxCjUCTGqyuVv7r+fSMC37jnZNGykT8c6++yOO160=
Subject key identifier:   55:37:65:A4:19:49:70:E6:A3:69:70:BF:CF:C5:D0:E4:38:99:DA:AD
Authority key identifier: 50:36:01:1E:34:80:9E:47:74:D4:C9:C9:F1:6F:CA:68:BD:B8:7F:AA
Certificate issuer:       /CN=5036011e34809e4774d4c9c9f16fca68bdb87faa
Certificate serial:       01A0E174D9BDEA58D9BF563C3441F4F79403
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UDYBHjSAnkd01MnJ8W_KaL24f6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/UDYBHjSAnkd01MnJ8W_KaL24f6o.mft
Manifest number:          EE
Signing time:             Sun 27 Sep 2026 06:02:06 +0000
Manifest this update:     Sun 27 Sep 2026 06:02:06 +0000
Manifest next update:     Mon 28 Sep 2026 06:02:06 +0000
Files and hashes:         1: UDYBHjSAnkd01MnJ8W_KaL24f6o.crl (hash: UK9vv6fM54oBjD53Cj1M5ey23T9Ze9HFndIfQWv2pkc=)
                          2: bEKO1xFyFydQ-qhcqaJLpw9igyY.asa (hash: jR7DlDJeCnwaCJJNmvyvwR2xMQOi7n5oqyxgiOsySVM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/UDYBHjSAnkd01MnJ8W_KaL24f6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/UDYBHjSAnkd01MnJ8W_KaL24f6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UDYBHjSAnkd01MnJ8W_KaL24f6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:74:d9:bd:ea:58:d9:bf:56:3c:34:41:f4:f7:94:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5036011e34809e4774d4c9c9f16fca68bdb87faa
        Validity
            Not Before: Sep 27 06:02:06 2026 GMT
            Not After : Sep 28 06:02:06 2026 GMT
        Subject: CN=553765a4194970e6a36970bfcfc5d0e43899daad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:85:96:79:d1:ed:00:46:c2:42:16:c2:cf:cd:
                    02:d0:5c:4c:75:10:4d:e2:cf:76:79:3c:0f:12:97:
                    4f:66:59:ff:8a:41:ae:f3:4d:90:12:5d:67:53:19:
                    58:23:22:30:46:0b:7f:30:b5:94:7f:e4:b6:86:65:
                    83:92:09:2d:d1:60:aa:4f:b0:07:22:33:56:44:44:
                    01:24:f5:54:02:ce:a2:d9:c5:48:34:89:2b:e9:6c:
                    05:93:52:a8:1a:07:65:dc:fc:2b:06:fa:cb:b7:df:
                    c0:85:69:fa:e4:36:04:12:2e:01:45:e6:d7:69:c6:
                    83:bb:a5:b6:fa:8c:e3:2c:e4:b6:39:60:36:cf:c0:
                    93:d7:4c:93:6f:ce:73:87:e1:17:7c:e0:55:ee:f5:
                    10:79:f7:57:a3:c2:83:7c:f1:9e:29:29:b1:9f:02:
                    96:e4:b0:e0:9c:0e:d7:62:d3:cb:2a:c7:8a:15:17:
                    1f:62:87:3f:f2:76:12:9a:e4:55:a7:be:fd:ca:53:
                    1f:b8:7f:52:58:e0:33:8e:95:8d:26:da:c2:92:9a:
                    ab:88:dd:38:3a:8b:f9:83:2c:5b:35:00:db:5e:eb:
                    90:64:9d:83:da:80:43:78:89:7c:da:0c:c8:f7:0d:
                    68:b9:8e:70:2a:90:57:2b:17:90:7d:89:b6:da:30:
                    91:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:37:65:A4:19:49:70:E6:A3:69:70:BF:CF:C5:D0:E4:38:99:DA:AD
            X509v3 Authority Key Identifier:
                keyid:50:36:01:1E:34:80:9E:47:74:D4:C9:C9:F1:6F:CA:68:BD:B8:7F:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDYBHjSAnkd01MnJ8W_KaL24f6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/UDYBHjSAnkd01MnJ8W_KaL24f6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/UDYBHjSAnkd01MnJ8W_KaL24f6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:b3:32:d2:ef:38:74:33:8f:f0:58:6f:b3:04:9e:1a:81:c5:
         91:86:3a:96:c0:56:18:67:5e:c1:a8:26:46:f0:a7:09:ec:cb:
         56:45:16:ec:8c:75:0c:7c:61:cf:77:59:87:f9:4c:f9:53:df:
         bc:11:79:76:cc:e4:6b:36:dd:c3:8a:c5:02:b0:05:f3:30:d3:
         5a:21:ea:4b:72:7c:62:92:bc:43:ed:ae:5e:3c:1b:e0:95:b3:
         9b:57:1f:80:d9:78:77:94:42:f2:b0:04:78:cd:6a:e2:01:5e:
         ec:dc:49:d6:79:df:c8:12:0b:25:1d:6a:37:cf:77:11:bf:b7:
         cc:eb:b0:ac:2d:95:79:ee:44:dc:8f:80:e6:bc:5d:13:5d:4b:
         02:7b:2e:97:b2:e8:3c:c5:8f:d8:1e:7e:e5:b9:3c:93:37:37:
         08:65:4e:69:b6:b8:6a:5b:05:f5:f4:47:2e:b6:d7:c2:eb:72:
         0c:14:f0:a4:69:74:e3:d7:67:2c:5e:7b:b6:f3:8e:98:69:11:
         5d:a5:81:ba:af:a3:e5:8c:69:bd:24:cf:f2:05:93:4e:c9:17:
         10:13:9f:98:02:4c:14:db:21:23:cb:8a:61:e4:5b:14:20:29:
         14:b4:6b:0b:f9:5b:cb:c2:ad:92:83:38:98:aa:b4:c7:98:7a:
         db:e0:d4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:13:31 2026 by rpki-client