Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
File:                     Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft (raw, json)
Hash identifier:          cusCoFU8N9EvzCw7Tyt7e/CBVXKiqEgS+zf6OEoATr4=
Subject key identifier:   ED:9B:26:B9:C4:C5:53:25:36:2D:28:19:2C:D8:B2:D3:EB:B2:B6:B0
Authority key identifier: 51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32
Certificate issuer:       /CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
Certificate serial:       01A11116FCA03BBBEB57E752E2F3BF4B08F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
Manifest number:          13B8
Signing time:             Tue 06 Oct 2026 12:01:21 +0000
Manifest this update:     Tue 06 Oct 2026 12:01:21 +0000
Manifest next update:     Wed 07 Oct 2026 12:01:21 +0000
Files and hashes:         1: Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl (hash: E0imjFzZUwrzWgAbgYzjJKs3V/kAVUGGgLPbt3YqlVc=)
                          2: bN1bEc4HqYXvavKXD6ssUfBHAew.roa (hash: YH+C7Jl70iieB5lOKkDQudIPzyOFnd5wp6oB5jVYQHo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 12:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:11:16:fc:a0:3b:bb:eb:57:e7:52:e2:f3:bf:4b:08:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
        Validity
            Not Before: Oct  6 12:01:21 2026 GMT
            Not After : Oct  7 12:01:21 2026 GMT
        Subject: CN=ed9b26b9c4c55325362d28192cd8b2d3ebb2b6b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:19:9e:05:29:bf:c8:d1:0d:e6:b0:b2:4b:b1:
                    fe:0b:bb:b0:6c:b4:e4:90:54:23:43:58:6c:2c:50:
                    e3:3b:31:32:d8:2d:97:ae:8a:1c:35:de:b3:7d:18:
                    cc:e3:23:9b:38:29:08:b3:1b:f0:98:12:5b:d7:b6:
                    0d:61:0c:59:76:6c:16:11:9c:dd:89:51:97:4f:6c:
                    d8:9f:38:5d:f0:ce:72:c1:71:f0:cd:b9:7c:9c:23:
                    5a:18:53:e5:9c:8c:f1:ab:da:64:5f:19:78:53:07:
                    2b:f2:d2:6a:51:f4:1a:71:45:02:d6:48:0d:d6:89:
                    a2:4c:e8:ba:58:67:37:2e:6d:1d:3c:a7:51:be:91:
                    3c:29:93:b4:c5:85:75:8c:69:7e:ae:8d:af:3f:7b:
                    5d:d4:9d:c6:58:c4:38:6f:f8:c1:e0:5e:4a:d3:67:
                    9b:e2:21:1c:59:8e:5e:32:0e:84:9c:f6:89:51:04:
                    c1:2d:22:33:43:72:c2:d1:46:f4:4a:17:f5:41:95:
                    18:12:93:c0:b1:6d:ed:f3:8a:c5:18:cd:f7:65:46:
                    64:65:8f:62:6f:90:a8:5b:4b:bb:19:8f:ba:92:ea:
                    1c:22:7e:41:d9:fd:f9:5e:bb:51:02:a2:cf:7d:8d:
                    bb:0d:8d:b2:cb:d3:72:0d:9e:e6:67:0e:6b:5d:3a:
                    71:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:9B:26:B9:C4:C5:53:25:36:2D:28:19:2C:D8:B2:D3:EB:B2:B6:B0
            X509v3 Authority Key Identifier:
                keyid:51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:ad:cd:16:55:9a:9a:13:cf:94:d1:2c:ab:3d:67:4d:e0:1b:
         05:27:36:fe:52:d2:41:a5:00:d4:d0:43:d0:ab:d3:af:81:e9:
         45:16:b0:ef:5d:ca:fb:34:96:a5:2b:ca:9b:21:de:88:e3:6a:
         dd:5c:7f:31:90:08:3f:a3:32:0d:5a:96:86:d5:82:80:e3:0a:
         dd:0c:95:d3:ce:cd:a6:29:23:70:4b:ef:a1:1b:24:bf:bd:d3:
         23:e2:90:82:d2:65:cb:47:da:a9:85:f7:86:91:88:80:fe:df:
         90:02:14:be:ac:f0:b3:93:df:ce:cd:f7:f7:0d:59:ac:23:40:
         f9:5b:de:7a:a1:20:de:10:17:c6:60:b4:72:96:dc:c4:33:5f:
         df:f2:27:65:b4:26:f7:7a:3e:22:a9:c8:a9:e6:61:f2:77:8d:
         14:29:ed:20:e9:78:36:7c:47:05:2d:23:79:ac:f7:dd:0a:06:
         b4:59:25:a0:59:25:a3:05:b6:82:13:26:ea:04:91:27:54:31:
         54:42:26:3b:ae:be:cc:c3:34:3a:ea:e7:2e:f8:89:0a:5c:01:
         85:90:fd:d1:24:88:63:0e:77:99:ae:4b:fb:d1:c1:48:55:17:
         0e:3e:b6:c6:36:ea:30:22:47:58:d7:9e:72:f9:8f:b1:c4:a6:
         04:3a:86:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:12:04 2026 by rpki-client