Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
File:                     UYqkmTdA34rTjZLMDBByNObfoFw.mft (raw, json)
Hash identifier:          Cf1ymdE1GSG75jpCTx5/0o6TsP2IgdPGHANLYULu/qw=
Subject key identifier:   5D:14:5D:39:8F:7F:16:6F:54:0D:53:ED:C6:08:99:3D:4C:DC:3B:0F
Authority key identifier: 51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C
Certificate issuer:       /CN=518aa4993740df8ad38d92cc0c107234e6dfa05c
Certificate serial:       01A0CFA42B14072F404EF49F537E71DCA0AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
Manifest number:          1A69
Signing time:             Wed 23 Sep 2026 19:00:37 +0000
Manifest this update:     Wed 23 Sep 2026 19:00:37 +0000
Manifest next update:     Thu 24 Sep 2026 19:00:37 +0000
Files and hashes:         1: 2i94ZuY5RqzqlX-gSjCu8vj-qbE.asa (hash: gi+NyJlUA+ulIOoyHfXiyv3PvckTspemiq3BV9plHVw=)
                          2: 8S8fbH48Zt1BGehjiX35Ir6CDR8.roa (hash: QGuQT9cDWohDuhPq0Uc6XDo1ZAygMT/59WjQcx/USTE=)
                          3: UYqkmTdA34rTjZLMDBByNObfoFw.crl (hash: CuqWrQGqd/Y8F3t4CHGwpcrBSZrc28WBwYSnu/SCZ7w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:a4:2b:14:07:2f:40:4e:f4:9f:53:7e:71:dc:a0:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=518aa4993740df8ad38d92cc0c107234e6dfa05c
        Validity
            Not Before: Sep 23 19:00:37 2026 GMT
            Not After : Sep 24 19:00:37 2026 GMT
        Subject: CN=5d145d398f7f166f540d53edc608993d4cdc3b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:34:29:be:b8:ba:2f:61:d6:34:2a:8d:0e:c7:
                    da:c6:c2:dd:80:19:0a:3d:5a:f8:d5:9a:90:2c:17:
                    c2:32:f7:e7:d5:e7:1b:b5:6f:9a:a3:39:cd:b4:4c:
                    0a:2a:f3:c7:01:c8:10:2d:99:08:3f:1d:97:96:72:
                    41:07:da:e7:91:a9:bb:c5:28:05:a3:59:35:d8:81:
                    1f:9b:2a:d7:68:e9:37:b0:86:d9:78:d1:ab:c4:11:
                    8f:f3:41:64:f7:91:2e:1f:f6:aa:5c:58:0e:76:40:
                    53:2a:6e:79:e9:9d:af:64:d6:df:fd:93:36:73:47:
                    4c:b0:e3:93:87:b3:be:8c:6a:32:21:06:de:ac:ac:
                    ca:4e:62:b9:77:23:13:7c:4c:3e:41:0d:8d:54:a2:
                    f0:f9:0e:a8:77:e2:fe:34:56:f7:45:46:97:8f:d5:
                    34:de:84:62:73:4e:f2:9d:cc:bc:ff:db:d5:c2:4f:
                    86:53:75:b0:59:6e:c3:72:b0:7e:53:2b:99:11:aa:
                    a9:18:b3:a9:bc:c9:bc:27:62:dd:cd:b4:06:25:c8:
                    14:54:79:86:37:35:22:69:4f:27:3b:7b:01:02:2f:
                    78:b1:0b:6e:aa:b5:74:7d:32:36:f2:b1:a2:6a:5e:
                    51:ac:06:70:8f:67:ac:bd:9a:2d:fe:9e:9e:21:e8:
                    80:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:14:5D:39:8F:7F:16:6F:54:0D:53:ED:C6:08:99:3D:4C:DC:3B:0F
            X509v3 Authority Key Identifier:
                keyid:51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:be:70:a9:bf:05:19:d1:1a:6e:e8:a9:27:21:68:b8:a6:ba:
         9f:40:1d:ca:ea:cd:69:bd:68:28:f5:f6:31:70:49:d3:c3:4a:
         2f:94:3f:f0:65:da:13:41:f2:74:10:da:26:f7:e4:9a:53:d9:
         45:fb:04:09:2d:cb:d9:f5:78:12:32:3a:ad:95:83:0a:38:19:
         d0:94:dd:ce:2f:b5:a7:e8:53:b4:e1:2f:2f:3c:8e:8e:da:99:
         de:f5:cb:15:14:47:21:df:24:0b:71:36:25:82:12:d8:ca:83:
         ef:2c:0f:a2:0e:94:8f:4a:31:5c:0a:4c:72:6c:90:8b:57:2f:
         9c:12:33:a0:42:4a:9f:04:12:a5:3b:e3:5e:05:cd:21:53:85:
         12:c7:94:86:e3:5c:f4:22:3a:fd:32:28:e7:95:e6:7f:44:5c:
         92:20:d0:2e:27:15:82:4b:7e:e3:78:54:be:be:bf:00:1e:8d:
         88:14:5f:d4:d8:2e:5f:34:7e:71:48:3d:60:bd:46:99:30:3c:
         1b:f3:d4:3e:cf:7e:cf:be:c8:04:c6:42:7b:14:ed:0c:d8:c9:
         98:4e:0a:0c:1d:f0:a1:0e:28:00:f9:54:01:0b:3d:4d:21:22:
         47:9a:f0:61:36:90:50:e1:c9:f4:68:6b:e1:93:2a:39:e9:27:
         ee:9a:69:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:31:03 2026 by rpki-client