Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
File:                     ug1zjdKP8lSUVs5m50SJg3L8UD0.mft (raw, json)
Hash identifier:          jUCNyrgj/8AEWKQrUPG9pH2QUQPrXobulErju/VbGcA=
Subject key identifier:   96:D3:A0:BF:D2:32:01:E5:D3:0A:39:E2:E6:0F:76:4F:F6:A1:72:54
Authority key identifier: BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D
Certificate issuer:       /CN=ba0d738dd28ff2549456ce66e744898372fc503d
Certificate serial:       01A120C134C38251C432BF67F249737EA906
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
Manifest number:          1A97
Signing time:             Fri 09 Oct 2026 13:01:35 +0000
Manifest this update:     Fri 09 Oct 2026 13:01:35 +0000
Manifest next update:     Sat 10 Oct 2026 13:01:35 +0000
Files and hashes:         1: AlKyY1UFKLIiSwkNxpsgmdrM60E.roa (hash: RVsM/xgSLkhzfMVV3ZGsMCowRm3BI62GEPj6ptHzyso=)
                          2: FG47vsukPFFVqGR7bOnjAT2rp7w.roa (hash: awpRf5Q5mKob7svn8oYO+jlkoCbAPExf5Adoe8FOrnc=)
                          3: G6A1KhUGyTv_ayk63fXoZcf-2FU.roa (hash: FvWxPy4xmiHLhgfYS33DaG1bqGpWvGhVoY87fJXbboE=)
                          4: ug1zjdKP8lSUVs5m50SJg3L8UD0.crl (hash: xRBH5XjBLFSphfdkEubWcrdX43JXYX1BqwGXP5B7LY0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 08:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:20:c1:34:c3:82:51:c4:32:bf:67:f2:49:73:7e:a9:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0d738dd28ff2549456ce66e744898372fc503d
        Validity
            Not Before: Oct  9 13:01:35 2026 GMT
            Not After : Oct 10 13:01:35 2026 GMT
        Subject: CN=96d3a0bfd23201e5d30a39e2e60f764ff6a17254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:14:be:0b:2a:e1:4b:b3:ab:89:85:5c:b9:53:
                    eb:50:34:04:39:5a:ac:f6:cf:77:03:cf:92:b4:a9:
                    31:1a:f2:25:33:65:fa:2d:54:a5:9b:7f:94:ae:d0:
                    d9:54:f8:c0:12:a9:9d:c3:04:58:e8:ed:76:9c:d5:
                    e2:82:7c:31:f5:e7:eb:87:38:cd:67:9e:18:61:d5:
                    38:18:9d:79:d3:b6:9f:b0:b7:58:2d:d1:6c:03:6f:
                    17:fb:79:66:d7:ac:d2:5c:44:26:91:5a:da:70:9c:
                    1d:cb:23:49:75:67:04:50:bc:eb:7a:e7:d1:56:06:
                    fb:0b:df:fa:e9:a0:1c:8d:8b:71:b3:9c:a4:8b:82:
                    b9:fa:fc:13:ab:d4:32:08:93:5c:9c:ca:22:b2:6d:
                    1f:08:1f:96:b8:23:eb:c1:75:9f:2e:49:34:46:b5:
                    d7:4a:fd:d0:8a:8a:94:b5:59:9c:05:2f:65:39:e8:
                    24:a7:17:55:9b:47:52:7e:f2:c0:67:24:08:ff:c9:
                    13:c5:e1:5b:31:5c:ae:20:43:f8:a0:ce:26:15:4a:
                    4e:9d:e8:3a:45:46:bb:f1:85:47:60:b4:9d:1d:e6:
                    3d:b9:92:cf:31:4f:1e:d3:55:74:63:b6:8d:58:51:
                    4e:a4:4e:c6:d0:e2:6e:4f:56:c8:21:3f:50:62:0f:
                    23:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D3:A0:BF:D2:32:01:E5:D3:0A:39:E2:E6:0F:76:4F:F6:A1:72:54
            X509v3 Authority Key Identifier:
                keyid:BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:ba:ac:bf:b5:d9:a5:ef:b6:c6:2e:61:af:6f:19:d0:59:8f:
         d5:32:10:2e:16:ce:0c:87:e9:e6:c0:33:16:a3:99:f1:b4:a7:
         cc:bf:92:85:6f:10:78:b8:2e:5b:04:d4:1c:2b:f1:e7:32:10:
         e8:7c:1c:1c:1b:85:f9:a7:c4:b8:2c:45:61:ab:18:55:4a:76:
         24:08:62:75:07:07:e7:87:c8:06:72:aa:d0:d8:7a:67:1d:3c:
         56:7c:e6:9d:54:d8:fb:40:07:ec:97:c3:f3:9a:3d:39:18:f1:
         fb:53:53:a4:ec:f8:0f:4b:d7:b4:a1:8c:fa:4d:dc:78:a4:45:
         b8:8a:35:29:01:e7:5a:98:d8:b8:eb:d9:ab:35:61:46:33:14:
         ce:4e:3d:71:04:6a:e8:9c:eb:28:b1:b8:50:b9:61:c8:8b:00:
         0f:76:aa:0d:9b:8d:a5:7a:2a:e2:2f:fc:f9:61:43:e0:bd:98:
         8b:75:f2:f3:24:e4:34:0d:af:92:ea:93:a1:e5:0d:3d:54:cc:
         86:8c:a0:99:b8:46:46:0e:6a:93:9f:73:3e:eb:b9:63:73:1c:
         50:07:d6:d0:74:06:37:7b:98:37:af:1f:c0:bc:43:25:e7:71:
         2e:03:d3:a0:e6:c4:fb:4d:10:4c:ce:46:cb:9b:90:6d:5a:57:
         3d:20:4c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:32:14 2026 by rpki-client