Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
File:                     9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft (raw, json)
Hash identifier:          02gaj+hSOFIAPqtD62TzSlTg9RyZldUBNoekfg9KOyg=
Subject key identifier:   57:31:B1:42:D5:1C:F7:EC:2B:84:9A:28:6D:30:19:32:9C:5E:EF:66
Authority key identifier: F5:45:0C:63:76:65:5E:EC:1D:D2:DA:4B:D2:1D:5F:10:4A:96:D9:04
Certificate issuer:       /CN=f5450c6376655eec1dd2da4bd21d5f104a96d904
Certificate serial:       01A1A970A14C118973222E6B33A757B53056
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
Manifest number:          1A9D
Signing time:             Thu 05 Nov 2026 02:01:33 +0000
Manifest this update:     Thu 05 Nov 2026 02:01:33 +0000
Manifest next update:     Fri 06 Nov 2026 02:01:33 +0000
Files and hashes:         1: 0QRGc0EXI-lQBeT0bU4OZ48DYZ0.asa (hash: JfJAwIenapSQ+KQhJvpTcNM3dpe6s+7wOt/RIJ+/2/A=)
                          2: 9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl (hash: neOp6cGcXJ9Pm537vTuEuiBWcP21dl9BFdD1s1MmlBk=)
                          3: Jtnnu0fDCjNezLwZil_S7l9L48g.roa (hash: DILIlWzW8Mnq/43c0llI+/57QYnncukYSWm1Exl94Z8=)
                          4: M2d3XxtPV8U4RGwdl2KGyoS3tuE.roa (hash: DkLgJR/YV/FTpPRA6z+9XA1zLGuoZB5rGHsCK++smJM=)
                          5: N4sgXJIENkdo_RLGnLrF-Fcp59U.asa (hash: AT1nBYM63y0ZOH6dk3bgxYq+3ptn4jz4ltXZP+PsEv8=)
                          6: nPChezrtLOBmgprgP_Au3oUubuA.asa (hash: NV/9jSIYz9t1/I0H/XairY0//xeZIwsbSFxauIof1kA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 02:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:a9:70:a1:4c:11:89:73:22:2e:6b:33:a7:57:b5:30:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5450c6376655eec1dd2da4bd21d5f104a96d904
        Validity
            Not Before: Nov  5 02:01:33 2026 GMT
            Not After : Nov  6 02:01:33 2026 GMT
        Subject: CN=5731b142d51cf7ec2b849a286d3019329c5eef66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a9:ae:89:cf:97:9c:25:a1:2c:59:71:91:3b:
                    af:62:6c:1e:6a:cc:a2:89:83:09:f3:c0:34:fa:c3:
                    5a:eb:15:b3:ed:f7:c9:d1:97:34:f2:11:55:42:18:
                    38:46:16:c4:7b:43:4e:11:80:a7:f0:ce:cf:31:9c:
                    79:86:9e:bc:53:85:08:07:48:87:1f:33:87:e8:88:
                    24:c2:d3:07:98:dd:58:fd:83:1d:f6:71:8a:5e:d1:
                    b0:e2:51:d4:28:e7:9a:c0:fb:89:ce:d9:70:ad:c0:
                    bf:4b:ed:b0:c5:e2:31:62:b5:8e:2d:af:53:44:f0:
                    1c:4c:64:08:cc:8a:26:b7:b3:cf:31:69:97:0e:e0:
                    38:9c:34:f9:41:6d:72:c4:99:b8:14:0e:b7:2c:80:
                    e0:3f:4a:8a:6c:18:6f:29:53:f3:59:c2:a5:30:09:
                    d4:14:4b:b4:8b:3b:f9:71:88:5d:d9:0c:9f:04:b8:
                    fb:9b:1d:87:51:02:6f:31:01:cc:12:80:6e:1c:e7:
                    b5:40:68:81:da:aa:64:ae:13:ee:43:5e:81:42:f5:
                    cd:ed:6c:65:dc:54:54:35:56:f0:d8:b3:97:ca:fa:
                    23:de:56:a5:d4:3d:16:6d:7d:4f:84:6e:ea:e0:2a:
                    38:63:58:d3:8c:45:d7:64:a7:d3:29:3f:89:f0:00:
                    18:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:31:B1:42:D5:1C:F7:EC:2B:84:9A:28:6D:30:19:32:9C:5E:EF:66
            X509v3 Authority Key Identifier:
                keyid:F5:45:0C:63:76:65:5E:EC:1D:D2:DA:4B:D2:1D:5F:10:4A:96:D9:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:26:33:cb:7f:d4:7d:16:08:d1:6e:a6:59:63:e6:1b:0b:b7:
         bd:bd:3f:61:19:a8:07:74:4f:6c:64:72:70:73:3b:19:b8:b6:
         2f:f8:93:28:a3:aa:61:4c:e0:0e:50:50:01:a9:be:ca:46:a7:
         5b:ac:88:f8:e6:7b:ec:14:9e:cc:9a:fe:05:5d:f5:96:73:60:
         62:14:a5:cb:d4:87:9c:9c:f5:59:1d:01:52:9e:bd:b7:66:45:
         98:8f:f4:59:77:a1:6f:df:8d:ab:a3:38:14:9d:cf:ee:a0:09:
         77:32:21:6a:df:ae:f7:b3:de:ff:fa:7c:5d:cd:5d:47:b8:b1:
         54:97:1f:8b:f3:8f:29:e0:23:b2:60:98:d9:c9:6e:6e:32:2d:
         ff:52:ae:2c:d2:90:86:66:8c:8e:78:eb:f8:c8:4c:39:5c:44:
         c8:b3:48:0f:bf:d0:94:e9:85:2b:86:90:d2:97:31:54:88:b1:
         80:71:02:f6:bd:55:07:3e:88:c3:a1:e2:ad:ac:01:83:f6:65:
         d5:42:b8:80:c3:66:b9:03:38:79:c8:fc:f0:86:11:64:bf:e2:
         48:01:3c:28:cf:33:3f:6b:4e:b7:e5:1f:2f:e3:af:39:11:ce:
         ff:0d:e0:75:72:ed:d4:72:b2:7a:70:92:7d:87:31:b8:a9:22:
         3c:86:9a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:03:23 2026 by rpki-client