Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft
File:                     uO0-vNIVX5oXihA62rSP2osidaU.mft (raw, json)
Hash identifier:          /CA0U8Xpu/I7L90ziIOcHwZ7XlAQX8A9zC199g6uFlA=
Subject key identifier:   3F:41:D1:D5:6B:BC:56:FC:64:F6:0C:79:C7:03:15:17:A0:B5:AC:63
Authority key identifier: B8:ED:3E:BC:D2:15:5F:9A:17:8A:10:3A:DA:B4:8F:DA:8B:22:75:A5
Certificate issuer:       /CN=b8ed3ebcd2155f9a178a103adab48fda8b2275a5
Certificate serial:       019FAB63426CBF5142A0D4A80D9742CD502A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft
Manifest number:          153B
Signing time:             Wed 29 Jul 2026 01:00:36 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:36 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:36 +0000
Files and hashes:         1: 1-fsHYTIUTFY0216Qbk8IXnoEcp8.roa (hash: bfgMgiAWnH7b52b8mMjuMw9kDEycqTEWeJ8kbQp2a6c=)
                          2: WIAk63chBCdGYiGDL4jJVIzgpHA.roa (hash: e3taT/GSCbu7IKCePzef39V4CQeoRg7zNm3KotlMe7A=)
                          3: Z4cd67t_oTbTTOY62m-SDIBMEfk.roa (hash: /PTXJtjmPJ7VKf+Ddpyha9KTCciauyGlpPXGyj6aw+Y=)
                          4: uO0-vNIVX5oXihA62rSP2osidaU.crl (hash: LZ/bz2Q5TeXYy2EZzHsq00RTimIPqMMz/MYubHupVzA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:42:6c:bf:51:42:a0:d4:a8:0d:97:42:cd:50:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8ed3ebcd2155f9a178a103adab48fda8b2275a5
        Validity
            Not Before: Jul 29 01:00:36 2026 GMT
            Not After : Jul 30 01:00:36 2026 GMT
        Subject: CN=3f41d1d56bbc56fc64f60c79c7031517a0b5ac63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:89:e6:9b:80:40:e7:5a:7b:cf:0f:3c:18:db:
                    4b:76:a3:3f:0d:4a:29:f7:73:21:58:14:00:e8:2d:
                    1c:46:76:db:f3:97:44:01:4b:10:96:61:0f:5a:33:
                    d2:53:7a:3b:d7:00:38:e9:09:57:c4:04:5b:ac:6e:
                    42:c7:42:af:c5:6c:76:75:6d:0b:d5:55:5e:50:52:
                    01:15:a2:93:02:e8:5b:ee:5b:8d:f9:02:23:61:3a:
                    e0:51:c9:c2:03:f7:4a:be:12:77:86:3f:8a:9a:37:
                    f3:c8:88:d7:dc:28:c2:f0:fb:66:bb:22:05:1b:49:
                    07:2e:1a:b7:70:39:38:5e:c7:b3:2f:84:83:a7:89:
                    8c:b1:26:f5:18:f9:b6:c9:85:19:09:e0:fd:39:06:
                    f4:1c:31:79:be:20:f7:f5:32:d6:62:eb:26:2e:5e:
                    7e:33:3a:11:b5:93:df:fe:57:0e:3d:20:9d:d9:6a:
                    42:94:5f:2b:eb:b9:34:ea:8a:e9:68:ae:a6:e4:ad:
                    2e:4d:dc:81:bf:32:57:57:14:68:f6:bd:6c:29:9c:
                    86:6e:78:95:98:c4:c1:bc:65:bc:bd:5a:99:8b:19:
                    60:e3:4d:5c:aa:ba:b2:1c:54:45:a1:ff:ce:b2:3b:
                    16:04:1e:57:d6:65:a5:6e:92:43:2c:08:32:95:d0:
                    66:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:41:D1:D5:6B:BC:56:FC:64:F6:0C:79:C7:03:15:17:A0:B5:AC:63
            X509v3 Authority Key Identifier:
                keyid:B8:ED:3E:BC:D2:15:5F:9A:17:8A:10:3A:DA:B4:8F:DA:8B:22:75:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:80:76:fd:fc:35:96:5d:a0:0d:0a:c7:27:f2:87:27:13:1c:
         20:cc:89:3b:44:4e:15:50:f1:c8:fa:dd:23:7f:22:20:b2:25:
         31:d8:27:05:60:fd:c4:c1:ab:9b:d9:c4:dd:25:5a:f8:b7:ac:
         80:f1:94:9d:4b:28:4e:01:d0:f5:f2:5d:2e:e9:7f:0a:44:4d:
         1f:0f:70:d5:6f:18:8a:0d:d8:83:f6:dc:a8:69:4b:eb:01:00:
         d2:8b:ac:01:8d:17:00:af:fc:97:68:e8:ab:10:f8:a5:31:72:
         96:05:e2:c4:82:3b:16:aa:8e:76:9c:c2:46:2b:0e:36:01:20:
         f1:cf:28:35:04:55:c3:40:26:65:a3:08:5b:79:5c:fb:e0:da:
         79:ad:85:1e:98:5a:d2:17:3b:0f:15:b5:08:36:1d:4d:12:bc:
         93:a4:5e:b6:0d:1e:e3:6f:b2:82:be:74:4c:e7:7d:42:22:bf:
         74:79:81:b6:69:f6:dd:a2:8a:21:f9:ef:83:57:55:6f:b9:8b:
         4e:c0:a8:d9:36:7a:08:e3:34:ec:7e:56:23:c5:a4:3a:d9:a0:
         85:72:58:bf:ff:e7:ac:64:89:12:b5:06:f2:c1:7e:7f:0f:1b:
         e1:99:fa:8f:29:db:44:b2:9f:d0:e6:e7:e2:f8:6d:44:ae:cf:
         6b:1c:44:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:47:51 2026 by rpki-client