Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
File:                     uC57gGjErprkykw6ayCWGZp0H_I.mft (raw, json)
Hash identifier:          oowQi1JhVJnrTYbXw3Als156Cv5roUTCPDWQ0UrEGCs=
Subject key identifier:   6E:33:30:0D:A7:03:32:0C:CC:1A:F2:14:F3:DA:01:E2:6B:21:01:97
Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
Certificate issuer:       /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Certificate serial:       01A0FCEBB7A8EB8B0019110519D3687A6017
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
Manifest number:          171E
Signing time:             Fri 02 Oct 2026 14:01:41 +0000
Manifest this update:     Fri 02 Oct 2026 14:01:41 +0000
Manifest next update:     Sat 03 Oct 2026 14:01:41 +0000
Files and hashes:         1: D9vGSctTQ6G39-Tj1KvzWEev7A0.roa (hash: dCtLdzE8AAyiXqvWxFMu+nXlWgdt/7ZcgVwWdiQ4TE4=)
                          2: J85fjuSQxz3wg1fx9HApSpky-cc.roa (hash: UxFrHM/u1QxNZlVa/F5dPFto/GBnUH2xgwkXvxIONS8=)
                          3: JSRjHuE9Dlxbd6kNUCmCyuTjzi8.roa (hash: zf3sZG8UyEv9zaK8C2m/Vb5bOTa/zuVQAu3HlY+cXHI=)
                          4: PGDw99LFu8cUJWnydQ7BWcOhXTI.roa (hash: x69/sh35YI+yTa5z+lbFr8Vns/76h1dYMvcCscIlmMQ=)
                          5: uC57gGjErprkykw6ayCWGZp0H_I.crl (hash: 3B1Qq1RG9WEnzIx17lmMw10HCwBvU3ug87rtQGtVPNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 14:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fc:eb:b7:a8:eb:8b:00:19:11:05:19:d3:68:7a:60:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
        Validity
            Not Before: Oct  2 14:01:41 2026 GMT
            Not After : Oct  3 14:01:41 2026 GMT
        Subject: CN=6e33300da703320ccc1af214f3da01e26b210197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:94:d4:0c:80:f6:e1:c8:7a:a4:ab:f0:f3:a8:
                    7c:17:ff:6f:10:0b:14:04:8a:77:5b:cc:16:2e:9c:
                    8f:6d:67:83:db:f2:5c:e2:6b:e7:b7:8c:da:6e:a1:
                    91:17:ee:94:24:c7:8b:9e:d9:e6:df:c4:22:23:b5:
                    a1:46:18:05:d2:5d:aa:34:a3:a1:20:49:4f:ff:0e:
                    a5:31:c7:77:fd:17:d7:15:66:a6:54:3b:e2:89:d8:
                    43:03:bf:4e:fb:27:ea:fd:5d:8c:dc:8e:50:92:41:
                    b9:e3:da:c4:b5:2f:9c:fb:17:eb:98:f0:ed:63:8b:
                    f4:8c:d3:53:d4:c3:ba:18:22:78:c4:1f:4a:cf:60:
                    02:ad:a6:eb:7a:de:a4:90:13:33:68:68:f1:8a:d4:
                    88:27:1c:39:41:03:4e:f0:63:5d:6b:be:74:f2:43:
                    83:b0:fa:05:e5:94:c9:d5:13:07:6e:31:05:af:69:
                    96:56:f8:ab:ab:f8:bf:c6:a6:b6:26:52:8b:10:65:
                    72:db:27:f1:82:e6:3c:0c:97:61:45:21:54:73:48:
                    19:48:64:ba:04:69:da:34:91:86:d8:35:75:05:68:
                    ff:4b:3b:fc:c5:4b:d3:d3:f4:f7:5b:90:1f:f1:56:
                    b8:6a:eb:5e:18:37:c2:32:5c:8c:41:3a:74:c4:45:
                    36:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:33:30:0D:A7:03:32:0C:CC:1A:F2:14:F3:DA:01:E2:6B:21:01:97
            X509v3 Authority Key Identifier:
                keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:42:1e:ff:9d:35:88:50:70:d0:1b:dc:fa:bf:3c:01:d4:e6:
         5a:0b:c7:8d:93:63:bb:26:9b:cc:27:82:5c:6d:d3:24:87:3a:
         c6:b9:c9:61:a2:42:8d:21:79:1f:7f:0e:91:da:39:95:3b:b6:
         79:a3:dc:5c:cd:42:19:98:95:da:a3:b8:b1:37:1e:8d:fc:81:
         01:06:33:bc:c5:cf:72:27:74:36:3b:b7:bc:67:8d:25:d7:78:
         17:c1:f1:c2:06:df:fe:81:29:9f:27:53:0b:f1:a8:ba:d2:2f:
         f1:ca:e0:75:4e:71:66:4e:24:dc:8a:ba:9d:24:12:83:22:58:
         f6:d8:71:5a:52:c7:ba:92:cf:c2:b8:e1:96:94:ee:1c:c3:27:
         ed:30:84:a7:49:7f:62:17:de:9d:57:e6:ec:0a:fa:63:c2:2f:
         0b:0d:f8:0b:89:bd:07:b8:c2:3b:d5:25:7f:4b:cb:6e:e3:9b:
         79:a2:1d:4e:3f:13:db:4f:b6:dd:2c:6a:64:ca:62:c2:4c:07:
         6e:56:db:bc:a4:47:4e:b7:33:9a:c7:72:df:12:98:c0:66:b8:
         8c:61:02:bb:51:01:33:4b:3c:e8:10:fd:d1:21:f6:45:b3:39:
         0f:bf:47:32:a0:61:2f:a4:64:e9:54:ac:02:a6:a6:58:96:73:
         e7:7d:f9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 07:10:12 2026 by rpki-client