Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft
File:                     uJQ3VOkjRai7qz2yvDbWGOXswOg.mft (raw, json)
Hash identifier:          RHglXREajF0x/U9jMgsjRTdx/mlH0rlhDic4+y85N5o=
Subject key identifier:   C8:81:6B:C6:E9:B2:11:BD:B4:0C:23:3B:0B:D6:47:35:84:8C:22:37
Authority key identifier: B8:94:37:54:E9:23:45:A8:BB:AB:3D:B2:BC:36:D6:18:E5:EC:C0:E8
Certificate issuer:       /CN=b8943754e92345a8bbab3db2bc36d618e5ecc0e8
Certificate serial:       01A0DCF2725E43A4E9A900728E57E9D622CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft
Manifest number:          1A06
Signing time:             Sat 26 Sep 2026 09:01:11 +0000
Manifest this update:     Sat 26 Sep 2026 09:01:11 +0000
Manifest next update:     Sun 27 Sep 2026 09:01:11 +0000
Files and hashes:         1: uJQ3VOkjRai7qz2yvDbWGOXswOg.crl (hash: zPTNoL7647/Ee9pkJtCfx/ACWMDdexwr8AY0C8NQ6cI=)
                          2: wFgOguyGf2k_urlg3TTD49UB-Bc.roa (hash: mmkwLxl45AUjDJ9WsNq5QpGXB2gTpDmmeU8A9ngZEvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 09:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:f2:72:5e:43:a4:e9:a9:00:72:8e:57:e9:d6:22:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8943754e92345a8bbab3db2bc36d618e5ecc0e8
        Validity
            Not Before: Sep 26 09:01:11 2026 GMT
            Not After : Sep 27 09:01:11 2026 GMT
        Subject: CN=c8816bc6e9b211bdb40c233b0bd64735848c2237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3a:ab:32:6e:a9:f1:5f:3d:92:e8:2a:a0:f5:
                    92:02:0d:60:a4:a4:e0:44:0b:39:14:cb:88:76:b8:
                    7f:5b:16:0b:10:1d:78:d2:64:77:08:94:f2:17:3f:
                    96:ba:b8:f9:11:41:ca:35:f4:f7:93:42:7f:b5:7f:
                    a6:37:d2:d0:da:00:fb:ba:33:9d:8b:b8:5a:e2:c4:
                    cf:8c:c5:41:1f:e3:d7:32:48:d7:76:1c:a8:de:c0:
                    0a:00:54:ee:8f:5a:99:7d:b2:93:bb:2a:aa:76:50:
                    3c:f3:d0:dc:91:01:f0:26:f0:32:fc:99:22:d7:14:
                    cb:06:68:21:d3:c4:54:94:f7:dd:75:eb:f3:c1:4f:
                    45:96:95:95:b9:8f:1d:9d:eb:45:df:ee:2e:cc:d0:
                    64:84:c5:f7:35:5e:20:73:2d:37:84:26:68:7e:59:
                    f7:c8:8e:c6:6e:36:31:87:c8:58:19:7a:b0:75:24:
                    6f:03:45:eb:77:ce:f9:ff:01:cb:b2:cd:c9:3e:d1:
                    43:91:54:10:41:ec:51:69:7b:70:a0:69:cd:90:f7:
                    c7:25:84:ab:30:13:f1:2e:01:a1:b3:b9:33:d5:32:
                    6d:0c:2c:6f:d9:5a:84:c8:55:e9:e7:d9:ce:d4:31:
                    26:5b:ee:76:9c:3b:a7:39:b8:1d:34:6e:86:de:5f:
                    1e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:81:6B:C6:E9:B2:11:BD:B4:0C:23:3B:0B:D6:47:35:84:8C:22:37
            X509v3 Authority Key Identifier:
                keyid:B8:94:37:54:E9:23:45:A8:BB:AB:3D:B2:BC:36:D6:18:E5:EC:C0:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:94:5e:50:d9:82:79:ca:49:cf:c2:38:f5:66:62:40:9a:a2:
         50:72:11:fb:e6:b1:47:a7:89:e6:8e:7b:b5:c4:b5:31:5c:e8:
         dd:b6:ad:af:74:17:0e:e5:5a:a1:1a:e0:35:33:84:ad:cb:08:
         2c:d7:9b:f0:dd:a7:aa:92:c3:57:65:f0:e4:b3:54:15:9b:29:
         b9:71:69:2e:04:56:d6:82:25:66:33:9e:bb:0e:d1:81:14:af:
         0b:f0:1d:91:30:18:0a:0a:09:2a:c5:5c:45:2c:2a:67:6b:d5:
         83:2d:27:ea:2d:a1:29:9f:48:18:c0:62:38:59:15:1d:89:c9:
         73:96:30:14:16:34:75:5b:ee:2a:37:a7:a5:0d:c0:dc:a7:b3:
         73:e1:bd:7f:1f:da:be:25:f4:09:88:e9:3c:d4:67:65:11:8b:
         b3:73:9b:50:50:4c:20:e5:bc:23:6e:e6:21:5b:87:b0:fd:71:
         aa:ad:32:2d:c8:77:e2:7e:6b:81:8c:38:14:96:88:ab:18:30:
         b4:31:5e:d2:d2:5f:26:99:89:9a:58:c5:3e:51:b1:18:6e:42:
         51:51:3d:40:82:21:28:fb:86:59:34:d5:e4:7b:41:c9:7d:4e:
         89:e3:7b:7c:5d:98:71:a9:97:d8:5d:b0:47:e7:4a:76:0c:dc:
         4f:06:34:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:53:45 2026 by rpki-client