Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
File:                     U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft (raw, json)
Hash identifier:          e8YKkg/6ZNp/qj6+tI5iB4DsyhZvl12ix8HkIjAQKK8=
Subject key identifier:   78:D5:E6:33:BF:1A:48:44:C7:1E:8C:0D:0E:C3:3D:46:2B:C7:83:4F
Authority key identifier: 53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
Certificate issuer:       /CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Certificate serial:       01A1242F596ACFDE55166EC035C1A7B3CC3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
Manifest number:          0EF8
Signing time:             Sat 10 Oct 2026 05:00:45 +0000
Manifest this update:     Sat 10 Oct 2026 05:00:45 +0000
Manifest next update:     Sun 11 Oct 2026 05:00:45 +0000
Files and hashes:         1: 4HfkizsQs4eGY47ORrzuQrrCbpg.asa (hash: gLyBFzmKeoRu/u4+RBvoS+hMhayU8vtpUsID14ZlHDM=)
                          2: RTU6VofFZkwFIunmV0I-5I8oeHk.roa (hash: qhsuUJ7AU4eP2XOXpcbSiz+ICmJsl3rcfd5Kjo6p8AI=)
                          3: U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl (hash: mvh2wdGPTSFze9QhlS5u0x8c3NaenuYqLPLXUWU7gzw=)
                          4: nr6yHLuwHJ6lw5JAwW5qDlsOfpA.roa (hash: iorIqxAuAmSRl6sCok02BcX/HwiRBqyHoRRMc0hDdTA=)
                          5: txFn_1w2AEjDCv0xGCqMhMdB6Ik.roa (hash: QZ5s1i5lWCJAEXaeHEkM7u2xMiicds/V8SZeoAg+i98=)
                          6: yrqi6IRlcDIv3grXoPIY4FbOeoA.roa (hash: ALG9r0dMs7ceV0uJepoVr46+adHsA89Wj6LXqqE3rOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 02:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:24:2f:59:6a:cf:de:55:16:6e:c0:35:c1:a7:b3:cc:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
        Validity
            Not Before: Oct 10 05:00:45 2026 GMT
            Not After : Oct 11 05:00:45 2026 GMT
        Subject: CN=78d5e633bf1a4844c71e8c0d0ec33d462bc7834f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:23:3f:06:5b:7a:60:84:63:7c:4f:ca:2b:47:
                    c8:c6:3f:a7:f2:51:4c:4a:09:06:b8:c0:84:2a:1a:
                    3d:06:71:49:56:e2:48:91:ef:09:59:9d:dc:99:ab:
                    9a:a0:4f:06:d3:09:b5:98:85:a9:97:53:dd:d7:9b:
                    18:ac:f0:f5:9f:a6:24:d1:54:e6:b7:9f:bc:d4:67:
                    5c:0a:f4:87:31:56:1e:b9:2a:ee:9b:8c:a1:5c:7a:
                    73:de:f3:c1:d7:f0:2d:c4:69:77:c4:9d:01:33:73:
                    98:73:4a:2f:7d:66:d2:40:97:bf:05:cc:6e:0c:36:
                    17:8e:eb:ab:ad:75:30:fd:eb:8d:d7:4e:2b:61:7b:
                    05:50:49:ec:82:8e:41:cb:30:41:14:f7:a2:70:73:
                    b1:e4:6a:af:04:1b:85:11:cc:a5:46:c6:84:56:71:
                    90:f6:39:6f:ef:d1:68:93:49:81:a9:3e:0a:33:93:
                    bf:36:d8:d7:26:79:d7:57:16:96:66:4f:9d:f4:17:
                    2a:9c:6e:d0:87:4c:10:8d:80:07:ea:56:0d:b0:cf:
                    25:67:e9:6b:73:08:cc:d5:4a:a7:09:45:62:1a:b7:
                    aa:b0:80:07:30:aa:70:61:09:c1:2f:47:94:55:44:
                    24:90:f0:40:b1:2d:41:b7:84:5f:b0:b4:d9:fe:71:
                    6d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D5:E6:33:BF:1A:48:44:C7:1E:8C:0D:0E:C3:3D:46:2B:C7:83:4F
            X509v3 Authority Key Identifier:
                keyid:53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:61:e1:4e:3a:72:b1:4c:e8:5d:5c:5a:b5:1e:90:48:d6:33:
         9b:c3:3f:14:48:0c:70:99:5c:95:17:6d:14:e3:92:d9:f2:87:
         8a:af:d6:68:4d:87:0c:ab:72:80:b6:80:7a:af:25:74:2e:4a:
         6f:85:60:b7:34:1b:85:67:aa:06:30:e9:80:22:a8:12:9b:44:
         4e:65:a6:4f:9a:e8:27:fb:ac:32:47:58:99:3d:00:bc:11:24:
         46:e8:d0:24:76:cf:19:bf:fe:15:d1:71:96:f7:22:1b:5f:d8:
         15:ee:0f:e7:e3:fe:2d:7b:4e:04:cc:22:52:c1:91:e4:03:58:
         b6:ac:0e:96:88:ed:06:11:3b:0c:f2:28:37:42:07:be:1b:bd:
         48:f2:35:76:bd:65:bb:2b:9a:09:1b:04:f9:97:15:fe:7d:bb:
         b5:c7:23:96:f0:71:20:6b:fe:25:d9:02:85:94:4c:e8:4d:67:
         06:83:bb:7d:19:2c:e7:a9:df:93:72:77:73:cf:48:d8:71:ec:
         13:32:11:04:4f:91:42:7b:31:d6:c7:60:4e:3f:94:0f:f2:db:
         e2:fd:be:a0:85:a2:01:40:e5:1f:1f:b3:23:d7:2b:45:70:74:
         8b:a2:56:e0:7e:4b:54:42:b8:0d:f4:c0:19:72:6a:3a:df:80:
         dd:5d:c3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:25:40 2026 by rpki-client