Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
File:                     uqI_dArVZMVpO3cJHHGzwDE2pYA.mft (raw, json)
Hash identifier:          SUgp8eevz1cEdPDoPCGOcE960x1dl5jWZCGC40OwAo4=
Subject key identifier:   53:7E:CF:40:10:9B:27:72:A6:8A:DF:05:9B:8B:9D:33:E6:20:70:B8
Authority key identifier: BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80
Certificate issuer:       /CN=baa23f740ad564c5693b77091c71b3c03136a580
Certificate serial:       01A13447A7AC421171AA75D3DE10415F26DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
Manifest number:          0F18
Signing time:             Tue 13 Oct 2026 08:01:13 +0000
Manifest this update:     Tue 13 Oct 2026 08:01:13 +0000
Manifest next update:     Wed 14 Oct 2026 08:01:13 +0000
Files and hashes:         1: Jd6kW4lGNT0OBJjFacs1nyylkLQ.roa (hash: DN4lDMoyde0MYsDKgYpzaGvP9YKbzDvp6j/0REyCcMs=)
                          2: uqI_dArVZMVpO3cJHHGzwDE2pYA.crl (hash: lwd1QdFRqZS+1sAav/shnsGt1KjjpyWuEE5e0PiRxwY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 08:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:34:47:a7:ac:42:11:71:aa:75:d3:de:10:41:5f:26:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baa23f740ad564c5693b77091c71b3c03136a580
        Validity
            Not Before: Oct 13 08:01:13 2026 GMT
            Not After : Oct 14 08:01:13 2026 GMT
        Subject: CN=537ecf40109b2772a68adf059b8b9d33e62070b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:69:49:98:18:99:2d:e6:f4:d7:04:5a:fb:8c:
                    50:86:b2:b4:4f:62:d6:b0:fe:18:61:7c:ce:73:86:
                    42:03:df:50:93:20:50:67:b4:c4:b5:d9:2a:fd:0b:
                    b0:42:c9:89:a1:92:e5:4d:ed:08:5d:cf:02:78:6f:
                    25:7c:d8:e9:b5:cc:e9:36:7b:f1:7f:8e:ca:9e:20:
                    6c:00:65:e1:19:92:95:3e:cf:b4:db:53:09:7e:62:
                    72:34:bb:ef:09:e1:e2:5e:be:de:50:ed:56:7a:66:
                    2d:6b:f8:f8:3f:36:4f:71:bd:a2:59:ea:0a:43:6b:
                    1e:95:25:34:b8:13:18:b0:65:d4:15:26:cd:a9:94:
                    7e:5e:17:3c:47:27:41:d3:cb:ed:29:25:3e:6b:c7:
                    e6:db:a3:7b:51:a4:ab:e2:d4:aa:16:49:ee:f2:85:
                    1d:2e:ff:e3:0c:de:44:04:b7:41:64:7b:43:bc:1e:
                    c9:2c:9f:22:db:ad:a6:66:46:22:79:a1:b2:b3:5b:
                    50:ec:01:44:c7:73:36:3c:01:96:6a:2f:f5:54:42:
                    f0:67:2d:38:b5:f6:84:ad:f9:21:31:d2:f7:15:60:
                    21:84:6e:71:bf:9c:4e:bb:f6:21:41:5f:51:59:13:
                    b8:f0:d7:4f:ef:1f:e2:98:83:50:33:bb:ed:49:41:
                    5c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:7E:CF:40:10:9B:27:72:A6:8A:DF:05:9B:8B:9D:33:E6:20:70:B8
            X509v3 Authority Key Identifier:
                keyid:BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:eb:e2:d0:67:b0:fb:67:91:bf:5b:37:a0:9a:17:07:d1:43:
         4d:fb:dd:58:03:f6:59:9f:12:97:3a:45:65:fd:d0:39:1e:95:
         1d:6d:0a:47:8a:fc:83:52:d8:20:c1:1e:a2:63:c8:dd:60:8a:
         43:e2:38:18:17:c6:36:db:6f:7b:47:ba:e3:ea:9a:55:8e:24:
         cc:6a:f2:f8:d6:55:a0:da:81:83:7a:18:50:87:03:0f:f2:15:
         7b:db:e5:89:8f:44:5b:23:55:db:d9:da:e8:5a:ff:53:77:c0:
         c6:2c:e4:85:9a:f6:12:8c:7c:88:fc:4a:5c:d8:e4:51:8f:3a:
         19:49:6f:87:71:d9:be:71:ea:d0:a2:e5:90:aa:48:e0:56:2e:
         15:0a:d6:50:c8:02:97:13:9f:cf:5c:a2:ce:9d:ab:75:0b:6d:
         9c:b7:cf:09:d6:91:f3:80:9a:74:24:c4:91:06:16:b1:9e:d0:
         67:c9:6f:3e:c5:2a:54:78:87:e9:c4:28:cb:1c:91:cb:51:56:
         e8:66:40:c2:6b:4e:24:25:98:84:c1:75:eb:8a:e0:d6:ef:cf:
         6a:bd:f9:05:1a:2a:43:8d:70:94:cb:1f:7b:87:3f:41:71:be:
         b5:42:5c:31:f6:a5:07:76:11:f1:28:ff:3b:65:2c:95:0c:b8:
         b7:70:ea:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:08:56 2026 by rpki-client