Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
File:                     uRil9IFVJuHpJRDTZI69oM27wqw.mft (raw, json)
Hash identifier:          SaZLvl5rBmiUeGVo/JM50aEWOo4o/c/jDwvX88Gyr6g=
Subject key identifier:   3C:7A:65:35:F3:5B:72:A8:46:19:0F:4D:0A:E0:77:35:D8:32:07:F1
Authority key identifier: B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC
Certificate issuer:       /CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
Certificate serial:       01A1076EDFCE09A0CBAB229A55A5B0058EB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
Manifest number:          0C94
Signing time:             Sun 04 Oct 2026 15:01:09 +0000
Manifest this update:     Sun 04 Oct 2026 15:01:09 +0000
Manifest next update:     Mon 05 Oct 2026 15:01:09 +0000
Files and hashes:         1: IVaGwYE-xSWos9-zj2HpODEJhqg.roa (hash: L3WvUKStDTf5drv93q1GG66aaVezmjafU4Trsj7t1+s=)
                          2: uRil9IFVJuHpJRDTZI69oM27wqw.crl (hash: zPXIiXjeO72fHrn4gaS3evJu9ewlhHdJQNBzeOzBplo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 12:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:07:6e:df:ce:09:a0:cb:ab:22:9a:55:a5:b0:05:8e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
        Validity
            Not Before: Oct  4 15:01:09 2026 GMT
            Not After : Oct  5 15:01:09 2026 GMT
        Subject: CN=3c7a6535f35b72a846190f4d0ae07735d83207f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b0:42:ca:85:d3:27:e5:6e:4b:c0:3c:3d:93:
                    23:d5:20:3e:4a:b6:2f:31:dc:44:51:17:b9:7a:f1:
                    49:b4:77:a6:a3:5b:3f:8b:16:58:0d:af:3e:ad:d4:
                    c3:5c:aa:c3:4b:82:a2:c1:37:5a:03:8c:f4:6b:4f:
                    8b:7f:22:14:2d:25:e3:60:11:38:69:1f:ef:9a:30:
                    64:15:39:53:41:07:c9:c5:83:b2:a0:b7:e0:90:31:
                    39:4d:63:f6:d7:4e:7e:4c:f2:52:e5:79:f8:3f:1a:
                    96:f5:64:20:f3:66:13:f9:22:fd:fd:ab:fd:d6:9d:
                    30:f2:3b:b7:3e:ee:16:4a:3a:ca:c9:4b:40:49:c4:
                    2d:94:cb:ce:58:b8:d4:72:3f:78:ef:1d:63:03:48:
                    20:93:f0:a7:52:89:ca:09:31:db:d1:6e:f6:50:01:
                    1f:bd:59:f5:80:79:52:a5:25:0b:b3:09:84:82:79:
                    48:de:0d:cc:7e:a0:b6:b5:39:b0:04:ce:b2:1a:be:
                    54:62:60:06:71:71:bc:54:b9:89:fe:85:3d:bf:07:
                    33:90:be:1b:58:0b:a7:32:0c:8a:85:31:35:84:eb:
                    1e:3c:a7:df:1e:03:7a:68:e0:d9:0d:9e:85:8a:da:
                    67:4b:7e:01:da:3b:f3:01:dc:7a:8f:64:d2:c5:48:
                    48:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7A:65:35:F3:5B:72:A8:46:19:0F:4D:0A:E0:77:35:D8:32:07:F1
            X509v3 Authority Key Identifier:
                keyid:B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:2c:26:82:87:73:5c:5b:aa:e9:a1:ad:5d:96:05:fa:fa:d6:
         d7:3a:75:15:cb:3d:0c:11:11:a9:50:8a:6f:73:05:6c:45:b2:
         36:b3:cb:3d:27:7f:6d:05:6f:08:bd:72:f5:53:cc:a6:ab:c6:
         bc:22:3a:7c:ab:e9:e3:82:5d:f5:4a:8d:5e:58:58:b4:c7:66:
         9d:54:03:7b:a6:5d:b9:10:fc:84:be:3c:3c:43:d2:ce:0c:3d:
         ea:2f:cd:f9:04:b6:f6:7a:6f:dd:69:fc:b0:8f:e2:ca:83:b7:
         30:02:7b:0e:ff:fa:ad:16:fb:2b:11:cf:cb:fc:cd:c9:a9:08:
         f4:4a:f4:e8:bc:48:ec:bd:ec:9d:b4:2c:ee:b9:b7:b0:58:a4:
         55:1f:bd:56:de:b7:cf:3d:93:a4:95:82:cb:e5:dc:0e:ac:a7:
         5b:b1:2f:11:ac:48:56:0d:16:59:60:60:64:5d:9b:2e:ae:2a:
         51:2e:58:da:5a:b9:41:8e:a0:23:26:1d:64:3e:91:cf:42:66:
         b1:f1:6f:c8:01:29:b3:89:f7:b1:11:b8:39:5c:ed:01:2a:9e:
         c4:83:b4:60:ef:ec:68:77:fd:84:a0:20:69:d6:4c:c6:60:2f:
         3c:97:88:3a:fc:ce:35:5b:fa:de:95:8c:ea:57:15:f4:71:f7:
         1f:be:c2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:26:57 2026 by rpki-client