Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
File:                     u5tW2NluvLX8-H3i7CtSwZTM-fk.mft (raw, json)
Hash identifier:          UWiXOz41hai5DQlhADIdSxK6dB6u3EnnM0varT91oRY=
Subject key identifier:   FA:DE:77:90:10:D9:ED:2A:82:44:6E:0D:90:77:AF:A7:AC:E9:60:4D
Authority key identifier: BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
Certificate issuer:       /CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Certificate serial:       01A0E1E1B589E589DA472EE585700C224965
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
Manifest number:          1A8C
Signing time:             Sun 27 Sep 2026 08:01:00 +0000
Manifest this update:     Sun 27 Sep 2026 08:01:00 +0000
Manifest next update:     Mon 28 Sep 2026 08:01:00 +0000
Files and hashes:         1: 9S-B0D9lnDF21-usrbJC4P6zxPM.roa (hash: ZnhdVeDDKZrqSSXA3q/cojKHxXaNDDWFxkadx20lHYg=)
                          2: OSKY092K7Rd69JqqbL4WMk5Xd4U.roa (hash: NVRC2Db3R3ftV/bNbwEakNLpneFf6ZR1jTLt2dsBXng=)
                          3: SztDQUTdgK2SUjFi9wkDzBiBMLc.roa (hash: a/GE3Z5i97PSSD8tZRN4CE8oTOTKNEOJuyhCdmF0QKE=)
                          4: su0W0RbnO6Z7fs_hQWfi82HBmZE.roa (hash: FaaXZ+UIdTUUGuM2AjeOCtg4amoifIyvo78+2woAaSI=)
                          5: u5tW2NluvLX8-H3i7CtSwZTM-fk.crl (hash: nNMGdtB1GJvLMYkPzbmgzki3IrNNY/A0X/JflL7uh+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 05:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:e1:b5:89:e5:89:da:47:2e:e5:85:70:0c:22:49:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
        Validity
            Not Before: Sep 27 08:01:00 2026 GMT
            Not After : Sep 28 08:01:00 2026 GMT
        Subject: CN=fade779010d9ed2a82446e0d9077afa7ace9604d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4b:1b:33:cc:26:43:e3:b5:60:b3:8a:ac:ed:
                    a8:ed:38:4a:af:82:de:d3:1a:1a:eb:9d:de:f7:4a:
                    30:85:5f:ca:bf:91:64:99:da:c7:8e:4d:72:03:ec:
                    02:04:dd:0b:c9:54:b8:27:1f:0f:4f:bd:51:b8:8b:
                    a3:6f:85:24:9d:48:db:40:b1:5d:b1:50:21:4f:86:
                    7e:63:6b:ba:69:65:d2:dc:38:a3:5e:0a:11:87:85:
                    c3:c9:f4:58:9d:62:57:84:21:8d:ac:12:83:04:10:
                    73:db:41:71:bd:d6:1c:89:67:34:d9:cb:47:76:1a:
                    cb:6c:ab:55:fe:d3:72:4c:72:45:04:c7:86:c4:cd:
                    6d:e5:60:c4:af:59:75:c8:09:fa:3e:43:fe:92:23:
                    57:36:39:48:1a:2d:52:ba:7b:40:30:6f:da:b6:68:
                    4b:27:ab:c3:bd:2c:72:ed:26:2d:11:eb:17:d7:b9:
                    12:be:bb:82:9a:70:23:a8:58:9e:64:2d:0e:4d:3d:
                    a5:77:75:be:ff:50:97:cd:31:51:8c:a2:df:e0:c5:
                    6c:88:4c:61:65:e8:24:d5:6f:9b:69:7f:4b:7c:8c:
                    9f:76:40:e7:3b:97:58:67:b8:d5:57:72:94:33:90:
                    ae:1f:9c:b1:2b:53:2a:f8:70:bd:32:70:97:c7:38:
                    fd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DE:77:90:10:D9:ED:2A:82:44:6E:0D:90:77:AF:A7:AC:E9:60:4D
            X509v3 Authority Key Identifier:
                keyid:BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:4a:13:07:8b:0d:61:54:b3:06:dc:77:74:7b:89:52:9c:45:
         ba:02:27:65:5e:1d:79:3d:ad:e0:ab:04:03:bf:c0:d9:91:12:
         7e:63:7c:6d:80:76:0b:c2:82:04:ce:39:69:e9:95:6b:ed:5c:
         bd:74:43:e4:ec:3b:dd:c1:d0:25:b8:e6:21:22:46:6a:94:ff:
         9e:32:c8:e6:dc:a7:13:14:42:97:f6:19:0b:fc:46:34:7c:c0:
         11:96:25:0f:66:79:ca:1d:b1:84:cf:71:f0:e8:28:ed:46:45:
         7d:5a:d6:c2:92:5d:d9:c0:f4:2a:a7:50:51:8c:5b:bd:e7:26:
         7e:81:2c:18:55:9f:1f:ef:ea:07:26:48:78:b2:f3:d6:93:71:
         a0:47:d1:83:84:bf:75:48:39:db:94:bf:6a:ec:68:a6:ba:3b:
         d5:39:e0:06:99:db:9c:d7:3a:de:d9:6c:c6:7e:ca:64:3e:47:
         77:63:82:29:9b:bf:99:47:55:a7:5b:ff:55:11:b7:6e:c7:29:
         2d:10:0b:c5:be:5a:7a:a2:60:04:24:0b:38:28:57:6c:20:3e:
         e5:78:49:35:db:97:8a:59:68:ae:7a:f0:62:2c:7d:4f:c9:61:
         b9:88:2a:51:bf:bd:2c:12:2d:f1:9f:b4:39:45:a2:bc:57:70:
         3b:49:f6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:32:04 2026 by rpki-client