Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft
File:                     Uwt27wq1VbyLB2H2BopE4QsrMfc.mft (raw, json)
Hash identifier:          TU75A0QFmIBcq+VuO/6VaOdz5EnaJBpyktX2p6A8dX4=
Subject key identifier:   9C:6E:B0:89:EF:84:6B:97:5D:4A:B1:F7:34:C4:6C:07:AC:67:70:7D
Authority key identifier: 53:0B:76:EF:0A:B5:55:BC:8B:07:61:F6:06:8A:44:E1:0B:2B:31:F7
Certificate issuer:       /CN=530b76ef0ab555bc8b0761f6068a44e10b2b31f7
Certificate serial:       01A0F0E6FBDD0CBC4F1EA9A18DEE1807B978
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uwt27wq1VbyLB2H2BopE4QsrMfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft
Manifest number:          1A7D
Signing time:             Wed 30 Sep 2026 06:01:04 +0000
Manifest this update:     Wed 30 Sep 2026 06:01:04 +0000
Manifest next update:     Thu 01 Oct 2026 06:01:04 +0000
Files and hashes:         1: 7qtrZvTgn0cpSEVLml8fcuthLe4.roa (hash: S4nLPxNgM6/xYB2o4ZydmxvSiUoLNOsPi+E4YsX/E2g=)
                          2: Uwt27wq1VbyLB2H2BopE4QsrMfc.crl (hash: rNydSipE1CZFsbxMN1tV82vrMtG5r05hC+Qm+4bveGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uwt27wq1VbyLB2H2BopE4QsrMfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 06:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f0:e6:fb:dd:0c:bc:4f:1e:a9:a1:8d:ee:18:07:b9:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530b76ef0ab555bc8b0761f6068a44e10b2b31f7
        Validity
            Not Before: Sep 30 06:01:04 2026 GMT
            Not After : Oct  1 06:01:04 2026 GMT
        Subject: CN=9c6eb089ef846b975d4ab1f734c46c07ac67707d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:19:7c:8c:89:75:93:a8:7b:e1:51:96:8b:9d:
                    2c:4c:e6:6c:4a:00:41:a2:5b:df:cf:75:29:79:6b:
                    99:12:2f:0f:65:0d:2c:6e:07:bc:49:69:71:2a:d4:
                    bc:00:04:ef:2f:43:dd:7e:cb:56:3f:10:52:4e:f6:
                    b4:e7:f9:4e:e8:f7:4b:c7:96:df:f8:6f:6f:df:72:
                    f7:5e:35:0e:45:a4:9e:31:81:5c:4a:61:cd:1c:52:
                    4b:ac:48:9b:68:12:65:16:62:96:52:ab:e0:80:26:
                    34:c8:61:16:92:3d:13:6c:1f:b9:5e:7f:27:5c:a0:
                    a9:84:9c:6c:07:78:26:4d:52:36:67:74:f7:d7:da:
                    78:2c:c7:9f:13:89:69:35:33:19:d1:5f:23:73:15:
                    bc:9a:08:46:60:8a:6f:0c:b0:58:50:5a:cb:2b:c9:
                    db:55:9f:2e:78:1e:71:49:f3:5e:13:54:22:22:ef:
                    20:a5:f2:c7:72:e4:bd:cf:80:49:d9:4e:3d:51:bd:
                    5f:13:cf:74:ba:62:e2:83:a5:c3:de:09:75:bd:44:
                    59:93:10:45:1f:b4:b6:2e:fa:02:c7:78:11:9d:54:
                    4b:27:f3:9e:50:6f:ee:cc:69:41:3b:e8:9f:d1:ac:
                    00:a4:d2:d7:46:76:2d:64:1e:b7:d2:a7:2a:6d:4f:
                    8e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6E:B0:89:EF:84:6B:97:5D:4A:B1:F7:34:C4:6C:07:AC:67:70:7D
            X509v3 Authority Key Identifier:
                keyid:53:0B:76:EF:0A:B5:55:BC:8B:07:61:F6:06:8A:44:E1:0B:2B:31:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uwt27wq1VbyLB2H2BopE4QsrMfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:7b:e8:ff:2b:e1:35:ad:63:89:b1:55:c3:80:30:a6:49:9d:
         fa:4e:c7:38:90:89:77:22:42:95:56:69:93:4c:f8:24:05:f8:
         e8:bd:b7:85:a5:8e:17:1f:fc:83:ce:28:7e:89:49:a7:8a:5a:
         05:5a:6a:5c:2c:7f:cf:57:ea:84:b0:b5:90:02:6e:93:94:c3:
         d8:07:92:50:1a:aa:43:be:d2:ef:ff:42:a0:f7:af:f4:88:1f:
         bc:82:5f:65:1a:48:a0:25:19:54:53:c2:5a:7f:f9:ab:15:ae:
         ea:1a:b5:25:13:df:32:20:99:2b:75:73:fc:f5:38:7f:9a:0d:
         35:b7:dd:86:8b:97:18:f1:6e:3d:eb:7c:07:a6:bf:9e:ca:cc:
         a1:51:37:7e:bd:97:d3:56:e2:e7:a1:cd:2a:ef:ad:5e:09:65:
         81:5c:58:97:a5:bf:b5:c7:05:e3:08:db:24:d7:26:5f:d8:58:
         c9:7a:ff:44:68:a1:97:2c:ea:77:2d:12:bc:66:1f:67:41:57:
         1b:e3:57:f5:76:62:56:f2:58:20:54:7e:dd:e0:0d:ee:31:32:
         50:81:3c:7f:f9:b6:b3:5b:ba:84:81:96:e2:28:ee:b6:9f:7c:
         cd:70:ec:3a:98:22:81:99:36:92:25:18:dd:3b:b3:73:e0:7d:
         80:b6:1a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 17:08:25 2026 by rpki-client