Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft
File:                     uaxJ0czcrt2aE_SAPfGu3ObcERI.mft (raw, json)
Hash identifier:          zdQcOGT7IIghX8JglRNaGqPaR34sDgjU4CsTY33GTb8=
Subject key identifier:   28:D0:85:31:22:AE:82:C9:AD:58:4B:1B:4D:9E:6A:C8:72:D7:A9:3A
Authority key identifier: B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
Certificate issuer:       /CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Certificate serial:       01A0DFF3A2C214662CF547667C4964B66B3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft
Manifest number:          11A8
Signing time:             Sat 26 Sep 2026 23:01:21 +0000
Manifest this update:     Sat 26 Sep 2026 23:01:21 +0000
Manifest next update:     Sun 27 Sep 2026 23:01:21 +0000
Files and hashes:         1: 9C4UVhetymj_o9_0fthWslxme_k.roa (hash: eyldnpoei6ydFrc8FHeRLIEUORDlSxUUouGHL///KPo=)
                          2: AJ6V8jm2bzR7l9LijJnNAo2C1So.roa (hash: JLik9PNu5MZ/DV5ew3sUl3oRvlGdo1/prN1/f8zb8rc=)
                          3: AfH1FsJhmlZzLVv0joRFh8JXKtI.roa (hash: C/QZLCrVXN00Tj2Qh4p+y2MkOW5TtBVj68fBG3TFoNA=)
                          4: DKgccFMMgkvXxZPzFyE3jSvly6U.roa (hash: wKYRpl41eTA9ujV+fUMhtA8JIP0ecSyGtcqw+jTJ19I=)
                          5: cujgOoD9oOnPnWNHQ2oaYF56LYE.roa (hash: NshN4mSKtv5QhJOcEymdQSgMRdJApXgkLCaqG2CcUaU=)
                          6: uaxJ0czcrt2aE_SAPfGu3ObcERI.crl (hash: oC6fld27kv92rMDhJcOjYGRk58mTDnjMlO2vuj+9KtQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 23:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:f3:a2:c2:14:66:2c:f5:47:66:7c:49:64:b6:6b:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
        Validity
            Not Before: Sep 26 23:01:21 2026 GMT
            Not After : Sep 27 23:01:21 2026 GMT
        Subject: CN=28d0853122ae82c9ad584b1b4d9e6ac872d7a93a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c7:40:2f:1a:fa:79:04:77:24:e3:6e:2f:a0:
                    85:af:e9:f0:78:bf:62:39:09:41:0c:7a:ca:13:1d:
                    1a:a3:ae:2e:a5:10:01:17:88:b3:62:18:52:b0:81:
                    11:f9:e2:d9:ad:cc:b6:b6:04:2d:b1:5d:93:ee:63:
                    b5:6f:d2:ee:3b:02:c5:52:a1:ac:41:e5:cc:32:78:
                    64:cf:fc:8e:5f:9f:ac:f7:73:a0:09:bd:c0:c9:db:
                    7e:29:c8:c8:55:69:fc:f7:37:17:c9:c7:48:b1:3b:
                    ba:2e:1a:cc:9a:2a:24:99:e1:79:5a:34:68:39:b2:
                    fc:90:e9:b9:f5:c0:93:08:64:a3:bb:43:3c:5d:7e:
                    8b:94:c6:b4:83:9a:95:86:43:00:70:ee:9a:03:73:
                    b6:e5:51:40:ac:57:3b:8d:0a:1c:2d:fd:76:fd:51:
                    83:ca:b3:b9:a2:64:18:8f:c5:1f:d1:b9:63:4e:14:
                    00:47:07:a5:58:f7:22:01:df:65:fa:ee:d3:28:ed:
                    35:71:5d:99:67:85:3e:fa:0e:96:d7:27:7b:b4:21:
                    bf:40:ff:8f:14:9f:9f:67:1d:a9:eb:93:af:9e:0f:
                    1d:6c:33:66:48:08:e0:8b:17:79:b6:1e:f1:44:b7:
                    fc:00:8f:27:76:1f:40:da:07:35:89:e4:ca:9d:99:
                    28:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D0:85:31:22:AE:82:C9:AD:58:4B:1B:4D:9E:6A:C8:72:D7:A9:3A
            X509v3 Authority Key Identifier:
                keyid:B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:34:0f:ad:1d:3e:b6:a1:f8:5e:55:d5:5c:4b:77:cd:46:39:
         1b:75:72:98:bc:a1:34:1b:8e:3d:3c:cc:63:e5:80:2a:66:4c:
         f3:26:27:dd:9f:eb:89:b3:15:aa:6d:6d:21:d6:dc:71:c1:e6:
         5b:4a:ec:c0:55:88:cf:28:c2:aa:3f:40:5b:cb:3e:81:3a:c9:
         7e:79:56:2c:36:d6:b0:c3:af:15:07:b7:c7:09:6e:28:77:6b:
         99:fb:6a:34:67:bf:32:e0:ac:76:b1:b2:9a:77:06:b9:a2:b2:
         fb:eb:35:51:92:9c:c9:e4:81:df:13:c5:4e:f5:df:60:43:b9:
         49:9c:59:bb:05:4e:4e:4c:e2:05:53:ac:25:e1:30:1c:75:c5:
         29:a7:ff:46:63:40:29:47:cf:6f:14:05:cd:33:64:0a:5c:d9:
         2d:a4:56:48:cd:b6:e5:da:49:b6:63:4f:16:8b:55:6f:16:4e:
         e0:f5:68:5b:fc:69:18:84:77:6a:9f:cf:e7:95:fc:cf:e6:a1:
         0a:17:64:69:94:78:16:48:59:78:50:99:c4:08:38:73:52:66:
         a0:db:46:09:e5:11:5b:5a:13:48:25:34:d3:f8:4d:57:24:be:
         0f:7f:91:b7:f2:a8:ea:ef:4a:a2:13:c0:f6:b0:35:0d:7b:db:
         9b:dd:cf:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:11:57 2026 by rpki-client