Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
File:                     uqrQjzbPvAAFOl7j1au3oxF8P4o.mft (raw, json)
Hash identifier:          ADhV0Wd/TFYdwThLnSZArRQvsRwDcVLfc2+yN38Cf+0=
Subject key identifier:   81:50:10:A9:98:75:C8:DC:FB:F4:3D:00:EA:81:73:77:DE:80:DD:96
Authority key identifier: BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A
Certificate issuer:       /CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a
Certificate serial:       01A1DE0290FBD923DA6BEC536AE08A1C4B29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
Manifest number:          1259
Signing time:             Sun 15 Nov 2026 07:01:12 +0000
Manifest this update:     Sun 15 Nov 2026 07:01:12 +0000
Manifest next update:     Mon 16 Nov 2026 07:01:12 +0000
Files and hashes:         1: S-yBnbW2TPRdHm8Bvnkb6SKNP-E.roa (hash: thzWzHkRBVrBpMkyMju39NgzMSOUf/2SSYied1BZFaw=)
                          2: uqrQjzbPvAAFOl7j1au3oxF8P4o.crl (hash: C7zxX2l0sGNVnKb5fH2nrXg2rl8bYZS5OrLCeA+rJog=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:02:90:fb:d9:23:da:6b:ec:53:6a:e0:8a:1c:4b:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a
        Validity
            Not Before: Nov 15 07:01:12 2026 GMT
            Not After : Nov 16 07:01:12 2026 GMT
        Subject: CN=815010a99875c8dcfbf43d00ea817377de80dd96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:0d:63:bf:5d:e7:ff:1f:fa:8c:79:4d:28:d1:
                    03:2e:af:d1:11:2c:fb:17:6b:57:6c:95:dc:45:50:
                    7d:31:81:3b:36:27:99:94:66:e2:e8:4a:f8:c8:ae:
                    6c:00:16:cf:26:1a:c0:e5:80:ac:ff:24:9a:cf:ce:
                    92:e5:27:e4:5e:0c:56:34:73:c3:47:ea:b7:41:d2:
                    b2:73:a5:04:94:8c:d2:f9:0c:39:0e:ea:ca:bc:b3:
                    02:df:fd:7f:78:ba:09:54:2e:3b:10:af:4d:ad:96:
                    d9:ee:71:e8:e3:c0:d2:2b:78:fb:b4:7b:9d:b5:bb:
                    1c:98:23:ba:ff:29:49:a5:82:1e:7c:d1:70:6f:ab:
                    ef:37:a2:b9:4b:75:7d:c6:83:e4:9c:2c:be:3b:dd:
                    ac:69:5e:41:5d:05:d4:ea:55:e5:9b:77:a8:96:df:
                    e0:d8:b9:86:12:10:d5:d7:62:29:91:c1:28:b4:2d:
                    3b:53:82:91:63:33:0a:9b:5d:5b:73:3d:b5:0f:6c:
                    5b:6d:a6:8d:fa:6b:14:ec:e6:2a:99:bf:0c:13:5f:
                    86:55:ce:2c:9a:0e:28:2c:13:0b:54:df:e3:80:9a:
                    ed:74:86:93:f1:21:a2:0b:75:3c:85:35:5a:bf:91:
                    0d:f2:e0:b7:c2:5b:00:d6:ce:cc:fb:46:f3:60:f1:
                    7c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:50:10:A9:98:75:C8:DC:FB:F4:3D:00:EA:81:73:77:DE:80:DD:96
            X509v3 Authority Key Identifier:
                keyid:BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:c0:f7:9a:86:72:75:0a:84:68:52:3a:ef:3d:d4:66:3b:99:
         a0:3f:62:68:57:b1:81:f4:c2:61:12:b6:b4:5d:b3:b8:14:e0:
         96:2b:04:d2:2b:3b:c7:6c:dd:c0:93:30:8d:5b:8e:f1:87:18:
         70:69:45:c2:4e:b0:a1:64:b0:f9:a8:aa:39:ac:28:d7:69:09:
         63:3a:de:90:0b:cb:77:b4:78:f5:6e:fd:5b:3c:41:cb:48:90:
         33:9b:f7:39:d0:0e:8f:0a:0d:90:84:48:f6:37:b5:06:4d:c3:
         32:d2:50:3b:6b:93:02:5f:f7:6a:84:a7:90:08:5f:bc:ac:93:
         0b:f0:5c:fb:4b:6e:da:2b:50:6e:a0:de:99:de:3a:5a:fa:fd:
         2b:c1:b2:84:8d:9f:cc:9c:31:74:e6:03:86:5c:3b:66:84:e4:
         db:f0:94:c9:3c:ac:09:fb:e1:4a:cf:a8:56:72:cc:6d:b9:da:
         4c:14:48:25:45:ae:a5:36:3d:1d:bd:b7:78:6b:cd:6e:96:2a:
         5c:75:06:9a:e9:fd:76:53:30:04:92:07:19:1f:dd:5a:70:03:
         4a:75:2d:bc:3f:6f:3a:71:f0:b3:f9:3a:3c:3f:5a:a2:d1:9a:
         bd:81:85:03:a1:89:93:84:3c:82:d5:ce:29:ba:d5:3d:80:28:
         71:08:5b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:56:13 2026 by rpki-client