Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
File:                     UfSwsEaesNBxmUzYI480vvAMb74.mft (raw, json)
Hash identifier:          qCXTVYpGZmp/uF/hxZPoMxAoyAtqO16+LzUtuMpdZ2o=
Subject key identifier:   BB:73:08:A7:84:97:65:FF:91:6C:EA:F1:7B:60:B3:22:8C:89:86:20
Authority key identifier: 51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE
Certificate issuer:       /CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe
Certificate serial:       01A0DD2A4A8EDB0CD51C2E20C3C34179B6A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
Manifest number:          09F4
Signing time:             Sat 26 Sep 2026 10:02:11 +0000
Manifest this update:     Sat 26 Sep 2026 10:02:11 +0000
Manifest next update:     Sun 27 Sep 2026 10:02:11 +0000
Files and hashes:         1: 1Z9CK4rPbzAMA97TMp2bKUfntRw.roa (hash: LpR7I8xQuFg1r5Rgn2WWeCosLxa5m8Ntho2zm0Of2+c=)
                          2: BLM9s6E3uNgLbo5hUAJYzpxbAgk.roa (hash: 5Ht0651estCzoETFmaG2dTMoJGv16B5IZmwbZaHDuac=)
                          3: UfSwsEaesNBxmUzYI480vvAMb74.crl (hash: WY8D2NkHQEsVdYOVzRTmv7ps9zIRfDQl0lcsVWnNc4U=)
                          4: aBkGIeHaROiVyf6y4zQUYjIbWLo.roa (hash: QrqArFPVF1/qMWn5zOGo4TUbL6WlcsofMlRqGn2AHJw=)
                          5: aq9niQ1ZlLfgZPSmUPOgIOI3M2c.roa (hash: dNTF2xB3WZEo4xS7rRBBdp1UPiHc48uFIsc0/3W0AY8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 10:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dd:2a:4a:8e:db:0c:d5:1c:2e:20:c3:c3:41:79:b6:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe
        Validity
            Not Before: Sep 26 10:02:11 2026 GMT
            Not After : Sep 27 10:02:11 2026 GMT
        Subject: CN=bb7308a7849765ff916ceaf17b60b3228c898620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:61:c1:85:01:30:1d:50:68:f6:9d:7c:d1:75:
                    88:89:3c:da:41:74:ca:d9:66:2b:c5:47:43:98:3d:
                    92:ec:c3:de:73:fb:bf:45:85:4d:fc:7a:0f:1e:b1:
                    ee:ca:19:44:68:3c:de:7c:9e:63:f2:a0:ba:c4:71:
                    22:dd:b9:37:87:24:1e:ff:7b:51:67:5e:58:66:77:
                    62:35:38:6f:92:0f:0c:2c:cf:68:2b:95:9c:bb:40:
                    14:5d:95:37:8a:f4:09:e9:5f:22:a3:c2:bd:3b:71:
                    1f:26:f2:61:17:7a:f6:02:b5:e8:b4:38:71:9a:68:
                    09:2a:65:91:70:0c:2d:05:9f:c8:48:23:af:a0:7e:
                    b5:b3:79:5c:5e:6a:4c:a6:e9:ef:3a:79:84:1e:ea:
                    bb:4b:48:77:d7:4f:aa:97:63:7c:b1:f1:0c:8b:8a:
                    80:4d:7a:fd:a9:db:b2:c0:6e:bf:a9:01:99:43:3b:
                    2e:e2:da:4a:8f:f4:b4:d1:af:09:75:43:13:f9:82:
                    90:6d:3b:ba:f1:f4:6e:64:11:bb:54:69:f1:7d:04:
                    d4:69:19:68:87:fc:5a:0d:6f:a8:58:85:48:c0:cf:
                    3f:df:d1:cd:fd:89:e2:d0:dc:e8:12:be:09:20:60:
                    24:94:b8:f1:2a:f1:f7:80:2e:e3:92:c0:22:d7:ab:
                    67:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:73:08:A7:84:97:65:FF:91:6C:EA:F1:7B:60:B3:22:8C:89:86:20
            X509v3 Authority Key Identifier:
                keyid:51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:44:87:e1:27:2a:dd:6b:1d:99:94:5e:b6:87:e0:02:eb:0a:
         fe:01:7c:9a:e6:86:db:55:47:8c:91:cf:ec:12:1a:c0:f9:bb:
         0d:ff:68:45:c1:db:85:09:e8:ae:ab:46:d4:da:6b:13:f5:93:
         1f:66:78:23:00:92:95:5a:27:bd:16:44:9b:87:0e:00:4a:97:
         ce:dc:54:01:cf:a4:79:1f:19:f7:1f:24:d6:84:65:ff:c1:15:
         f9:c1:63:df:94:cc:0a:2e:ac:df:3f:2b:c5:c5:d8:dd:d5:52:
         2a:c9:c4:31:13:8b:04:a2:89:9d:99:34:9c:a8:0e:2a:7b:8d:
         96:33:ea:35:95:1c:f4:fc:70:94:e6:cb:ad:fb:6a:b2:bf:2b:
         68:f8:b3:37:bc:03:2b:8c:c1:26:33:cc:ba:50:4a:df:bc:5a:
         19:cf:dd:75:2e:38:48:70:fa:95:e3:95:1d:41:2e:7a:38:dd:
         18:05:74:e6:62:d5:e8:46:d7:87:a7:22:79:2f:1f:b7:9e:36:
         16:0d:4c:45:e9:05:b5:33:09:e7:90:e2:d1:aa:d7:f2:4d:3b:
         2d:01:84:83:00:8c:07:b7:a9:fd:8f:0f:8c:d6:13:d7:0d:98:
         d0:90:60:98:19:cf:34:d3:f8:c1:2b:01:7a:b0:bc:64:1c:ad:
         d0:76:14:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 19:44:42 2026 by rpki-client