Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
File:                     U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft (raw, json)
Hash identifier:          RMgLNLWsO+rbd15PNgvT/JNA4v4JeJaE4bM0ciZU1rs=
Subject key identifier:   33:08:A4:A1:63:34:A1:73:D1:71:AA:7D:DA:9E:BF:FD:49:7C:32:32
Authority key identifier: 53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
Certificate issuer:       /CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Certificate serial:       01A0DACD77940B1F1776316A8BE07DF4DEB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
Manifest number:          0ED2
Signing time:             Fri 25 Sep 2026 23:01:33 +0000
Manifest this update:     Fri 25 Sep 2026 23:01:33 +0000
Manifest next update:     Sat 26 Sep 2026 23:01:33 +0000
Files and hashes:         1: 4HfkizsQs4eGY47ORrzuQrrCbpg.asa (hash: gLyBFzmKeoRu/u4+RBvoS+hMhayU8vtpUsID14ZlHDM=)
                          2: RTU6VofFZkwFIunmV0I-5I8oeHk.roa (hash: qhsuUJ7AU4eP2XOXpcbSiz+ICmJsl3rcfd5Kjo6p8AI=)
                          3: U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl (hash: N3175wpkd1/tSH+L/bKKAM+yR/Jnfz5MGR175PIEPUI=)
                          4: nr6yHLuwHJ6lw5JAwW5qDlsOfpA.roa (hash: iorIqxAuAmSRl6sCok02BcX/HwiRBqyHoRRMc0hDdTA=)
                          5: txFn_1w2AEjDCv0xGCqMhMdB6Ik.roa (hash: QZ5s1i5lWCJAEXaeHEkM7u2xMiicds/V8SZeoAg+i98=)
                          6: yrqi6IRlcDIv3grXoPIY4FbOeoA.roa (hash: ALG9r0dMs7ceV0uJepoVr46+adHsA89Wj6LXqqE3rOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 23:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:cd:77:94:0b:1f:17:76:31:6a:8b:e0:7d:f4:de:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
        Validity
            Not Before: Sep 25 23:01:33 2026 GMT
            Not After : Sep 26 23:01:33 2026 GMT
        Subject: CN=3308a4a16334a173d171aa7dda9ebffd497c3232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:04:f5:33:8d:d5:73:33:1a:e8:6c:0f:d5:c7:
                    e6:53:74:6d:5c:bd:24:a2:a7:b3:ff:c4:7d:99:f7:
                    04:ed:e6:7e:62:77:36:5b:82:48:5f:6a:2d:06:18:
                    3d:0f:d6:5b:af:c3:88:13:43:57:cc:7c:c4:ba:1e:
                    6a:db:85:cc:1a:7b:fb:5b:ab:47:40:77:67:a7:2e:
                    2b:3e:ac:f9:91:7f:92:24:fa:08:7b:e9:af:94:62:
                    e4:89:04:e1:1e:7d:1d:06:72:9f:00:00:2b:8b:57:
                    07:f2:28:b8:bc:c9:4b:ae:0e:86:23:52:38:d8:19:
                    cf:48:45:fd:90:c3:49:fe:be:49:50:1b:dc:66:97:
                    6b:99:ea:6a:d9:ed:7b:a6:65:f5:29:df:61:d7:09:
                    89:e6:54:cd:cf:5d:bc:b3:26:53:3c:76:cc:1e:db:
                    d7:f8:dc:27:68:74:eb:19:3e:0b:14:14:b1:eb:d9:
                    4c:54:0e:79:66:04:d3:bc:20:72:a8:23:41:17:be:
                    16:da:32:83:c4:0e:97:84:b1:e2:a1:77:66:b8:aa:
                    07:41:c9:f4:69:e6:dc:17:83:0f:3c:2f:b0:d3:1c:
                    15:e2:93:68:ec:c7:b5:24:5a:73:31:39:54:0f:ab:
                    1d:5e:9a:cc:cb:1e:f2:4b:a2:ab:4f:65:28:f9:20:
                    09:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:08:A4:A1:63:34:A1:73:D1:71:AA:7D:DA:9E:BF:FD:49:7C:32:32
            X509v3 Authority Key Identifier:
                keyid:53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:d4:e9:ba:eb:7a:40:31:6f:36:c7:93:64:4c:8e:db:dd:bc:
         a0:c4:13:2e:9b:cc:c6:d1:bf:ff:bc:24:17:ea:5a:e2:dc:11:
         fc:4f:b3:ad:cc:13:31:55:e5:0d:56:b4:e5:bb:7b:e5:8b:3f:
         fa:4c:a0:d3:15:a4:0f:3a:c4:cc:9c:19:d0:11:90:d6:36:84:
         f2:63:d2:7d:60:0d:4f:79:41:c2:ca:9a:57:97:23:6a:f7:25:
         fc:2c:65:07:a7:ff:8c:c7:36:ad:77:b1:a7:8e:3d:42:df:c2:
         be:9b:62:e2:55:d4:e0:ae:09:59:03:03:a5:9e:2f:a2:f3:0f:
         52:1c:dc:27:e1:ef:d5:39:5f:6f:38:ac:48:f5:4c:81:4a:fa:
         f9:76:3b:16:af:fd:63:ca:6c:0f:fc:a3:2a:94:b0:74:30:d5:
         07:0a:66:89:0d:7d:03:ad:f0:59:39:65:02:35:c1:89:b0:f7:
         61:28:1d:8f:3b:68:9c:2d:9b:55:16:fd:3c:82:f2:e2:b4:46:
         9c:71:95:84:52:f4:8a:5d:c5:9a:84:c7:44:49:63:e6:a1:96:
         34:c6:0d:2f:35:d8:c3:ef:e2:89:f5:c5:a6:b0:b3:a2:94:64:
         86:ea:46:69:fc:10:8e:ed:81:fa:14:12:b3:a0:15:3e:77:2d:
         ae:ad:13:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:59:06 2026 by rpki-client