Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
File:                     UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft (raw, json)
Hash identifier:          ThXceG+uqTCO41yCat+PlRI48HbGw9RjfRFRMMxXVBk=
Subject key identifier:   2A:ED:A4:5D:FD:1C:FD:F1:2D:D9:A6:BA:5D:80:E8:46:28:E2:4A:36
Authority key identifier: 50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
Certificate issuer:       /CN=509df728d1b46634054972d2945fda58073b5762
Certificate serial:       01A1DC82A969FF85ED8787FAA3C29CB57242
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
Manifest number:          1AFC
Signing time:             Sun 15 Nov 2026 00:01:52 +0000
Manifest this update:     Sun 15 Nov 2026 00:01:52 +0000
Manifest next update:     Mon 16 Nov 2026 00:01:52 +0000
Files and hashes:         1: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl (hash: CBh3hPwGt9mHTWjHfxvj7b/hRRNDIEXUc1KUH3sJjU8=)
                          2: YiTZyM0LJDlibzSScA19n-r_1NA.roa (hash: xUwCbyrQAmjQ9KEmQXtJqtnkqDlVNHnF+1vzDoqaWUE=)
                          3: iLi7f9ZUhRFIePAx_CbpyKFYVLY.roa (hash: +jK5YhwAWuiSD7jiuyksRnOSQ26Q7wRKEX5irQTiJO4=)
                          4: jaFu9pBfM8muxEa6Z1M7bqPV5TY.roa (hash: D7hQEIQMJfA1ZdopDczTPfE2hg2zaIc0IFSTi8hUD0k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 00:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dc:82:a9:69:ff:85:ed:87:87:fa:a3:c2:9c:b5:72:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509df728d1b46634054972d2945fda58073b5762
        Validity
            Not Before: Nov 15 00:01:52 2026 GMT
            Not After : Nov 16 00:01:52 2026 GMT
        Subject: CN=2aeda45dfd1cfdf12dd9a6ba5d80e84628e24a36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:50:d7:de:10:b6:bd:c7:43:65:68:d2:3c:e3:
                    fe:55:d3:e4:4f:62:d3:b9:af:14:76:32:3b:5c:3b:
                    51:ef:6a:ac:cc:79:62:1d:35:dc:ff:2c:15:4e:d7:
                    45:70:f5:00:a1:32:05:73:e9:a0:5e:87:75:e4:6e:
                    6b:f4:8c:0c:7d:7b:19:0f:c3:a4:7a:29:97:03:59:
                    de:84:f5:05:44:2e:27:86:ce:1b:0e:88:1e:fd:59:
                    0e:a6:6c:52:7c:51:87:97:9e:4f:d0:e7:2a:18:4a:
                    2b:05:42:22:53:2d:29:ec:23:12:85:24:ea:6f:2e:
                    a0:80:83:07:b2:49:9d:f0:a5:03:e2:b7:8d:19:8f:
                    14:b8:3b:a6:61:e7:fe:1a:4a:5b:83:24:a7:a9:d9:
                    20:2f:f1:d3:f8:ab:29:43:fe:a5:2b:9a:1b:d7:54:
                    41:58:65:9f:86:02:2b:41:7a:aa:bf:f6:7d:a4:7e:
                    b4:67:c3:7d:31:23:ae:db:14:8f:66:f9:0b:93:bb:
                    fc:58:ea:b9:d5:f6:c8:21:9c:ef:e6:19:1c:85:bd:
                    2a:98:05:e8:54:71:83:51:dd:dc:fe:bc:e7:da:b5:
                    70:4e:47:c4:8c:c2:7b:8b:8a:38:be:3c:0b:7c:04:
                    b2:3c:45:f8:d5:c5:e0:0b:5e:3b:f6:11:c9:3f:45:
                    13:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:ED:A4:5D:FD:1C:FD:F1:2D:D9:A6:BA:5D:80:E8:46:28:E2:4A:36
            X509v3 Authority Key Identifier:
                keyid:50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:6f:a7:2a:28:83:f3:2f:ed:f0:aa:87:a4:11:94:28:18:a2:
         a4:e7:ba:2c:a3:7d:c2:9d:96:d8:46:10:a6:a7:21:d0:3b:e7:
         2d:38:27:84:86:d8:cc:72:ac:01:43:f0:ec:8a:59:86:c6:d2:
         7c:0d:55:15:b6:65:d0:06:f1:45:84:d6:2e:80:27:54:ba:73:
         ca:73:fb:73:97:75:e7:11:fc:a0:f8:74:04:c4:b2:79:5b:3e:
         d2:63:bc:51:0a:8f:7b:00:7a:10:68:bb:e8:bb:f1:26:17:59:
         fa:99:bd:5a:65:32:b3:b2:3d:c1:2e:39:4a:ce:21:e0:29:d3:
         23:b4:6c:9f:30:49:b4:82:a6:d2:d8:51:a9:47:37:e4:98:af:
         96:a0:b8:69:e7:bb:ae:a4:9a:5d:ad:e6:bf:ac:a2:dc:c5:6b:
         dd:d7:00:9d:c2:d3:4b:dd:c7:84:d7:38:0a:f0:f4:c2:ff:7b:
         a8:6d:44:24:43:2b:91:7f:8b:0c:f9:1b:87:f7:24:53:2b:a0:
         0a:dc:15:36:57:d3:da:2a:4d:25:1e:2a:34:df:5e:a6:d7:cb:
         23:60:53:17:ee:cd:1e:ee:80:6d:da:c0:df:d0:10:14:b3:34:
         ee:4f:b9:0e:59:c6:f0:df:36:10:cc:fb:e1:78:5e:db:da:3f:
         60:14:09:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:41:01 2026 by rpki-client