Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft
File:                     UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft (raw, json)
Hash identifier:          K1m1v/4fkuF0/BnFcx10jTfHdRz+Qke7QfjqYprzNnY=
Subject key identifier:   89:0B:EA:75:AB:89:53:D9:2A:2F:EC:8E:35:8F:D7:60:E9:2A:5A:B1
Authority key identifier: 50:53:C7:DA:9C:8F:FF:EA:5C:ED:97:A7:99:02:00:D4:BE:EE:41:77
Certificate issuer:       /CN=5053c7da9c8fffea5ced97a7990200d4beee4177
Certificate serial:       01A125E7A09B1AE88391619645EAF250636F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFPH2pyP_-pc7ZenmQIA1L7uQXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft
Manifest number:          09E4
Signing time:             Sat 10 Oct 2026 13:01:39 +0000
Manifest this update:     Sat 10 Oct 2026 13:01:39 +0000
Manifest next update:     Sun 11 Oct 2026 13:01:39 +0000
Files and hashes:         1: NRjE2ub-qyO1bTuX03Zvfc6I9B4.roa (hash: T1iZTA7aq3lUr9C6VWAbrTX5NRDe5+H29lpTIjZMGkc=)
                          2: UFPH2pyP_-pc7ZenmQIA1L7uQXc.crl (hash: 9N2SURPur4lZRyRfw6TJ7XubhDFFa833SBQOm9cZInE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UFPH2pyP_-pc7ZenmQIA1L7uQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:25:e7:a0:9b:1a:e8:83:91:61:96:45:ea:f2:50:63:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5053c7da9c8fffea5ced97a7990200d4beee4177
        Validity
            Not Before: Oct 10 13:01:39 2026 GMT
            Not After : Oct 11 13:01:39 2026 GMT
        Subject: CN=890bea75ab8953d92a2fec8e358fd760e92a5ab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:40:73:05:6f:af:0a:ca:71:19:d3:ff:60:6b:
                    eb:d8:be:7b:2e:5f:de:29:e0:8c:16:9f:63:f3:65:
                    a4:dc:05:47:1f:ea:b6:fb:c7:87:cf:8b:c6:c1:17:
                    01:f5:45:e6:a1:89:8b:d1:2c:73:7f:e8:36:fa:b8:
                    5c:1b:28:17:8c:10:bf:0a:68:aa:d7:1e:b0:2a:71:
                    74:59:3d:4e:98:f5:5f:06:06:65:de:7e:55:9b:f8:
                    38:87:64:9f:a0:50:cb:64:cb:90:04:5c:71:d4:46:
                    4d:f2:b2:6c:ac:79:77:29:05:aa:12:22:f4:ad:42:
                    92:83:56:1a:65:e4:a7:62:1a:25:c8:8f:e0:18:b4:
                    35:27:2a:65:42:e0:33:8c:28:bf:74:3a:c2:75:9b:
                    60:3f:75:f9:c6:8a:72:c6:55:ae:8c:5c:24:d8:92:
                    1b:07:fc:32:cb:65:ea:19:46:c5:04:48:03:19:b6:
                    bc:95:a7:f3:a2:35:20:46:d0:be:d5:56:f1:b9:5b:
                    06:66:8b:ad:85:8b:e2:cc:f0:c9:60:b3:c1:ea:5e:
                    1b:d3:e4:56:e4:4f:d2:41:56:82:61:41:b2:28:42:
                    a5:5b:c4:26:5c:71:a3:fb:47:e0:77:15:98:03:44:
                    5e:9d:4c:0a:ba:a0:6d:79:a5:6e:e0:67:1a:84:4d:
                    ef:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:0B:EA:75:AB:89:53:D9:2A:2F:EC:8E:35:8F:D7:60:E9:2A:5A:B1
            X509v3 Authority Key Identifier:
                keyid:50:53:C7:DA:9C:8F:FF:EA:5C:ED:97:A7:99:02:00:D4:BE:EE:41:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFPH2pyP_-pc7ZenmQIA1L7uQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:48:0f:be:ba:a7:3c:83:28:05:75:b2:48:8e:19:f0:72:63:
         8a:3b:f9:87:81:a5:4e:e7:ac:63:57:80:cc:db:94:3f:3e:32:
         99:1c:6f:7a:c8:e4:16:9f:19:0d:78:a0:dd:50:87:7a:2d:74:
         fb:d5:e9:4d:8b:60:22:0c:09:a0:c9:ad:8c:a3:b3:8c:de:69:
         bd:9e:d7:b7:67:ed:c5:29:ae:e1:c7:a2:8f:7a:93:4d:3a:e0:
         c7:ff:45:3e:c2:fc:63:42:ce:2f:96:16:93:04:cb:58:86:77:
         88:87:c9:30:d4:2f:81:55:a2:c8:00:12:5a:70:8d:1a:9c:97:
         01:89:d9:41:76:61:bf:99:c2:01:7e:d3:5c:83:f8:94:4c:0e:
         99:3e:87:d8:87:41:98:61:ab:cf:dd:7f:1a:13:76:e9:84:22:
         76:a8:44:e7:81:86:36:fa:31:d5:65:47:59:8d:73:70:d8:31:
         4d:d1:8e:b6:ec:dc:3a:44:b1:84:10:0f:0a:73:de:31:d5:a9:
         fe:23:83:97:89:94:8f:0f:77:d5:1e:a4:d3:b2:e2:a3:60:e0:
         bd:1c:09:cb:09:50:f0:8f:5b:01:f0:55:2b:bb:26:ea:2f:75:
         34:de:b3:4e:93:67:a2:58:81:58:c9:db:3a:f1:c5:a2:77:42:
         d8:e0:1c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:43:04 2026 by rpki-client