Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft
File:                     uaxJ0czcrt2aE_SAPfGu3ObcERI.mft (raw, json)
Hash identifier:          mt2x5VIlEGLQPd3XTYwEAAPIyvdKmJL6cj8QYdCzSSg=
Subject key identifier:   A4:09:E5:CC:E5:FA:BC:47:AC:FA:A8:86:10:65:78:15:AA:91:9C:52
Authority key identifier: B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
Certificate issuer:       /CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Certificate serial:       019FAAF58B30910CAFA8841ACEA6349B1FAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft
Manifest number:          1108
Signing time:             Tue 28 Jul 2026 23:00:46 +0000
Manifest this update:     Tue 28 Jul 2026 23:00:46 +0000
Manifest next update:     Wed 29 Jul 2026 23:00:46 +0000
Files and hashes:         1: 9C4UVhetymj_o9_0fthWslxme_k.roa (hash: eyldnpoei6ydFrc8FHeRLIEUORDlSxUUouGHL///KPo=)
                          2: AJ6V8jm2bzR7l9LijJnNAo2C1So.roa (hash: JLik9PNu5MZ/DV5ew3sUl3oRvlGdo1/prN1/f8zb8rc=)
                          3: AfH1FsJhmlZzLVv0joRFh8JXKtI.roa (hash: C/QZLCrVXN00Tj2Qh4p+y2MkOW5TtBVj68fBG3TFoNA=)
                          4: DKgccFMMgkvXxZPzFyE3jSvly6U.roa (hash: wKYRpl41eTA9ujV+fUMhtA8JIP0ecSyGtcqw+jTJ19I=)
                          5: cujgOoD9oOnPnWNHQ2oaYF56LYE.roa (hash: NshN4mSKtv5QhJOcEymdQSgMRdJApXgkLCaqG2CcUaU=)
                          6: uaxJ0czcrt2aE_SAPfGu3ObcERI.crl (hash: ilvzilHMxffIc/+w0wpPgFeMhgjMOI7tboC7oH/kfE4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:8b:30:91:0c:af:a8:84:1a:ce:a6:34:9b:1f:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
        Validity
            Not Before: Jul 28 23:00:46 2026 GMT
            Not After : Jul 29 23:00:46 2026 GMT
        Subject: CN=a409e5cce5fabc47acfaa88610657815aa919c52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:aa:ab:49:20:13:56:58:59:89:06:a6:97:2b:
                    49:a1:92:c9:b5:6c:d4:88:0e:a1:cb:12:94:f1:bb:
                    45:c9:d5:1e:5b:33:14:c5:03:e8:bd:84:1f:d9:16:
                    31:8a:c5:92:4d:57:b8:24:66:76:ad:0c:a2:ed:cb:
                    69:f9:14:31:32:53:ce:65:09:dd:68:6a:01:c8:11:
                    df:de:1f:f4:9f:2d:74:e7:9f:84:58:06:6a:ca:5a:
                    f6:43:55:e9:d2:39:07:cc:31:09:f2:b3:c7:cd:fc:
                    39:34:5a:3f:50:eb:31:dc:20:8a:3e:a6:cd:11:ef:
                    81:25:c6:73:ef:f7:82:1e:cf:82:e1:3c:48:be:a8:
                    f0:0f:77:c1:0d:2f:37:05:a3:99:b2:f1:47:c6:4d:
                    cf:32:5c:8b:34:01:90:3b:e5:5d:36:de:bd:16:63:
                    7c:03:91:11:77:48:e3:d4:f4:f1:8f:d1:72:3e:2a:
                    ad:4a:3b:6b:03:6f:ff:7a:a1:9e:7a:77:f3:07:2f:
                    15:54:4d:27:66:bf:b3:2c:66:05:24:89:40:32:24:
                    2b:20:79:9c:21:4b:b0:05:86:83:65:fd:c6:0f:7b:
                    7d:5f:d9:0d:2d:4a:bd:4e:bb:08:ad:1f:29:88:93:
                    99:08:0f:fb:28:c4:29:13:65:0d:da:3a:7c:48:9d:
                    ee:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:09:E5:CC:E5:FA:BC:47:AC:FA:A8:86:10:65:78:15:AA:91:9C:52
            X509v3 Authority Key Identifier:
                keyid:B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:07:9a:30:18:03:2c:d9:e4:df:fa:e4:46:33:fc:a5:4a:f3:
         b7:49:a4:fc:d1:f4:eb:c4:94:9d:6e:30:2e:e0:16:28:f4:61:
         7d:e5:91:db:a5:41:eb:fd:91:6d:2d:7f:1e:86:1e:8c:5d:73:
         cd:be:f0:22:6a:b1:1c:e9:68:db:7d:fd:aa:f7:ed:1d:05:7d:
         a6:e5:e9:86:a8:0a:41:91:8e:6a:02:af:4e:d1:c1:a2:0f:e7:
         08:37:fb:67:1d:69:8d:89:00:ea:1a:25:cb:fe:d3:85:2f:e2:
         26:7b:2b:70:c3:3c:da:3a:28:78:50:7e:23:9e:bb:71:44:46:
         f8:e3:e3:43:ec:83:87:b4:0b:e0:2e:28:d2:15:80:39:7b:e9:
         92:eb:bc:c6:4d:77:eb:04:43:83:25:59:81:e0:d1:7e:5e:d4:
         45:ae:13:72:62:a7:45:f9:11:43:ca:97:d1:d5:ca:00:ef:a5:
         7f:63:fb:c3:a5:e2:fc:2e:f4:99:6d:24:83:6e:7c:d1:d8:de:
         af:af:85:c9:e6:d3:92:de:07:86:12:59:a7:8c:1a:75:78:9e:
         16:e8:c4:d7:b5:e3:ba:52:fb:d1:d8:13:6c:e1:1d:7e:39:fe:
         ad:07:b9:9f:1d:20:f5:be:eb:0d:0d:33:64:33:07:f2:a7:17:
         77:d0:9b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:32:16 2026 by rpki-client