Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.mft
File:                     UDmdRDW7hfrpEKvjjmhTMgTf1gs.mft (raw, json)
Hash identifier:          RzIjUPJpGrYIXhManaM5/Eekr2wJo1IvlMEHlLWfkpU=
Subject key identifier:   64:39:1F:2D:4A:76:35:FD:09:17:25:4D:F1:34:5E:95:13:57:DA:DD
Authority key identifier: 50:39:9D:44:35:BB:85:FA:E9:10:AB:E3:8E:68:53:32:04:DF:D6:0B
Certificate issuer:       /CN=50399d4435bb85fae910abe38e68533204dfd60b
Certificate serial:       01A0D8DF01B8C3A9979685AC176659320378
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.mft
Manifest number:          1A6F
Signing time:             Fri 25 Sep 2026 14:01:28 +0000
Manifest this update:     Fri 25 Sep 2026 14:01:28 +0000
Manifest next update:     Sat 26 Sep 2026 14:01:28 +0000
Files and hashes:         1: GaGDncuQddyUxnzn8D0gEmgcUEE.roa (hash: 5ThaU+xDf9Ra2G+8uR4FvGW5DGrRvoM6yThrW6Rng8I=)
                          2: KCWWQiwpRHcCp-WmG9X3RegXgvs.roa (hash: GUTf882QMqY1JyQACTlFxulzKh2ZRBTS6bUDnTJot/M=)
                          3: UDmdRDW7hfrpEKvjjmhTMgTf1gs.crl (hash: G/h6dg1hiAzD0rKU40dm+orY70BnVhTueF8VI5EIXEU=)
                          4: WwUB93Gr8k-I55GxLnhwZBpiHFM.roa (hash: Fc4ZaIQ3OsIJPhk84Db43cUOe3LGAVjIVWLFEY3eFTM=)
                          5: p0HbPFfnwggjbYCEugxFJ_HG2yI.roa (hash: drTL/DJEGCCNAe04lSPkR1n9D8oRXBBImBv5kVogkjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:df:01:b8:c3:a9:97:96:85:ac:17:66:59:32:03:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50399d4435bb85fae910abe38e68533204dfd60b
        Validity
            Not Before: Sep 25 14:01:28 2026 GMT
            Not After : Sep 26 14:01:28 2026 GMT
        Subject: CN=64391f2d4a7635fd0917254df1345e951357dadd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1d:e8:09:a9:92:56:30:c0:2a:46:4b:68:42:
                    b0:c9:f6:20:bb:16:8f:e9:79:cb:a7:53:ee:20:1a:
                    0c:fd:06:c3:da:3a:49:f0:63:89:44:d0:29:c4:3f:
                    37:f6:ee:c0:26:9d:6b:1c:3f:0a:b1:cb:14:31:d8:
                    0b:3e:ca:8a:d4:d2:fe:54:6d:18:a7:78:f0:0d:a2:
                    c5:73:54:a7:4e:57:3e:99:f3:23:f5:34:c8:3e:6d:
                    ac:25:87:f8:c4:31:68:1b:47:ab:83:ac:72:63:79:
                    1b:20:11:64:f7:3c:7d:13:a4:dd:40:84:21:0f:5e:
                    fc:b8:cb:b9:08:94:d9:fa:61:ff:7c:69:04:a1:ce:
                    ca:a6:d4:de:f3:9a:ba:cb:e3:94:e2:d3:40:66:0e:
                    b4:dd:ad:89:72:85:45:0f:7e:c8:73:bc:9e:08:f9:
                    68:a6:98:5a:f6:64:73:93:e6:95:c4:0d:85:3a:57:
                    da:87:01:b0:60:db:31:11:af:a2:db:51:51:5a:e0:
                    11:b6:9e:84:46:d2:63:67:fc:85:49:5f:52:f7:52:
                    b0:b8:2b:26:09:24:df:a3:69:0c:0a:82:81:f2:3f:
                    ac:f7:e9:7a:b8:2c:3e:70:92:a0:2a:02:52:8e:b9:
                    dd:16:91:fb:57:db:76:aa:1e:fe:dc:7f:88:88:82:
                    fe:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:39:1F:2D:4A:76:35:FD:09:17:25:4D:F1:34:5E:95:13:57:DA:DD
            X509v3 Authority Key Identifier:
                keyid:50:39:9D:44:35:BB:85:FA:E9:10:AB:E3:8E:68:53:32:04:DF:D6:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:6d:eb:2a:91:2a:99:3e:15:24:ba:f6:d2:d7:85:b2:6b:aa:
         40:5e:c7:d7:71:8a:b6:5d:f2:1e:d2:81:c3:c8:57:d2:46:68:
         06:4a:56:30:00:be:7c:a9:b3:b5:df:ff:bf:a6:29:e4:74:97:
         06:22:c9:88:c4:c5:57:4d:07:6d:f5:0f:6e:6d:21:32:f7:16:
         c5:24:f5:4e:91:c1:2d:c3:95:72:1b:4c:5e:52:59:76:19:d3:
         11:58:c5:57:04:f8:9e:d1:08:9d:04:83:29:3b:1c:e9:d4:d9:
         7a:ca:5b:72:17:ad:46:51:20:43:1b:d7:fc:c8:4a:1c:e6:f5:
         3b:3d:54:14:42:6b:24:67:4b:e6:e5:48:7b:3b:a7:65:98:32:
         c4:17:20:39:09:ff:57:4f:bc:c9:ea:11:b2:72:2d:51:cb:29:
         37:ee:57:81:05:f0:c4:0f:dc:de:31:b2:a7:d7:58:96:93:8f:
         65:ab:8f:07:7e:4d:59:2b:d6:22:2d:4b:f2:4a:97:ae:2e:03:
         35:18:bc:ca:0d:57:78:45:5a:31:05:00:cb:24:0e:01:6b:06:
         f0:49:21:9b:71:74:eb:ff:72:a5:6e:46:48:c6:94:61:34:c0:
         71:b6:71:65:3a:16:dc:c0:46:b4:6b:a7:c8:cd:9e:c4:9f:71:
         36:ba:b2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:37:07 2026 by rpki-client