Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft
File:                     UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft (raw, json)
Hash identifier:          xiK3vZPh+q6RT4PLVqT9aRoAiVQpI1oBtztsp9UJh6c=
Subject key identifier:   5F:65:87:57:D7:89:F9:FB:82:2B:09:8D:5B:02:97:1A:2D:1E:08:2D
Authority key identifier: 50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
Certificate issuer:       /CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Certificate serial:       01A0DC84F3E16E81FD0FAC2A04116C9D2C92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft
Manifest number:          1A95
Signing time:             Sat 26 Sep 2026 07:01:35 +0000
Manifest this update:     Sat 26 Sep 2026 07:01:35 +0000
Manifest next update:     Sun 27 Sep 2026 07:01:35 +0000
Files and hashes:         1: 189-AMpP1NIU3eX6E6TgSKDQxCw.roa (hash: 6qdFChm/yc6IeFFl2FMtTFYStfg0kPnB4dIgZqsOhNs=)
                          2: 7M-hWDkDn5Y2lJqJLzhCYzFSMBc.roa (hash: KXN7U8564EfllgkcnSlbq0Ol7VdnYcZ9gKliZSfccKY=)
                          3: Iz81YeF4Yaopqn4t0LL3OA1IuQs.roa (hash: U7q18MGaToAHycayT/bTwS2UUHwaN8gc3zIyXx5SQn4=)
                          4: UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl (hash: l7ldAQ+sWn5yRb5OT99bWPKQDksHqe85hXWS39Ken8o=)
                          5: VQiElCspYygojHZx1e_d787gq8M.roa (hash: cYsGyxOGTSDbkK7Bo8Dcbyj6xyiZ7rpceD54Wi9Pnvo=)
                          6: XonmnFu_hl5fLd1NFTkRdlszSzs.roa (hash: nis1JSWNkVlYV4JdLmei0R+V1a6IX6+JXGHy2zIU2ZA=)
                          7: tO23-qMAsDBtU6MpF4WNQK1Xeg0.roa (hash: iFIhOTOP6nzdiLHdfwCuFc8wGiIOLQ6R04Q5J4q3fuk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:84:f3:e1:6e:81:fd:0f:ac:2a:04:11:6c:9d:2c:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
        Validity
            Not Before: Sep 26 07:01:35 2026 GMT
            Not After : Sep 27 07:01:35 2026 GMT
        Subject: CN=5f658757d789f9fb822b098d5b02971a2d1e082d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c9:2f:d8:f3:0c:19:8b:64:c8:1d:74:fa:6b:
                    c4:b9:7a:7d:93:66:5c:b6:c9:6a:e4:80:1c:cc:39:
                    e7:1c:74:a4:8d:62:f5:94:aa:af:2b:fd:b3:39:49:
                    4a:15:dc:39:a4:99:bb:88:4b:b0:23:98:c5:e7:07:
                    31:c9:1e:16:46:6e:65:8c:20:24:48:dc:02:97:5e:
                    e2:17:a1:5e:c3:43:38:69:73:82:68:5f:fe:13:ad:
                    75:ab:13:ac:fe:12:79:5f:3d:bf:c8:3f:99:bd:9c:
                    a0:f7:37:7b:b7:15:af:c3:d5:72:fc:e6:41:1d:9a:
                    c5:c1:ef:05:5a:79:cd:09:80:bf:06:c4:10:76:58:
                    82:c7:01:d6:14:b2:3c:0a:97:e6:9a:be:20:e0:40:
                    b4:6d:7d:35:67:5f:1b:79:64:20:17:56:13:78:fc:
                    35:78:3d:0e:0b:6c:2a:e1:df:34:ae:d0:c9:2a:e4:
                    df:ef:90:6c:d8:45:6b:09:ef:84:c5:80:bd:6c:3d:
                    3f:28:46:fa:0f:25:56:8b:43:97:f9:39:e4:3c:d6:
                    34:5a:cf:47:7c:f1:37:d7:8a:c2:5e:5d:6b:b1:81:
                    a6:26:2e:b1:8b:04:5c:10:57:1a:14:82:e5:00:91:
                    03:67:c9:96:1d:ca:81:a4:4d:64:50:05:70:f5:c2:
                    c9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:65:87:57:D7:89:F9:FB:82:2B:09:8D:5B:02:97:1A:2D:1E:08:2D
            X509v3 Authority Key Identifier:
                keyid:50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:3f:7a:f4:3e:03:82:b0:1a:87:78:3e:86:f3:7c:f4:3b:f9:
         c4:a8:14:2d:bc:b7:4d:a7:63:df:e2:74:75:f8:25:01:ba:06:
         98:24:13:94:1e:a9:74:6f:1b:a5:a5:30:7b:f6:fa:af:9a:67:
         64:d3:af:ef:18:60:12:2f:6c:bd:ed:6f:84:21:8d:de:66:5f:
         6e:48:97:8a:b7:ac:8e:f0:a0:35:b8:24:75:bd:b0:92:57:93:
         29:5e:e6:a5:b7:e2:a2:24:9a:af:1d:ab:af:e3:cd:1c:b9:65:
         9a:4d:ef:82:a7:71:95:6c:38:c0:18:ff:1d:e8:f1:b0:44:ea:
         48:05:37:c6:29:ad:05:8d:f3:a6:25:fe:89:b6:47:0f:af:2a:
         5e:e0:94:1a:78:bc:f9:61:cf:d6:8f:f7:29:e3:c2:26:19:e7:
         4e:a5:4e:33:18:3f:8c:81:14:b1:3e:c0:7d:24:cb:06:d4:dc:
         c0:d1:0a:cb:bf:98:19:03:b0:45:4e:19:9b:b4:26:63:02:5f:
         0c:6d:9d:9c:d4:c7:dc:cc:43:e9:b7:ca:4d:97:67:23:cf:dd:
         12:98:33:c4:7c:08:2a:c9:5c:78:97:00:2c:3c:57:b6:5a:5d:
         94:b7:87:ed:ce:3f:63:05:df:7b:a0:41:01:1f:48:a6:1e:7e:
         a8:e8:3e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:37:10 2026 by rpki-client