Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.mft
File:                     uMUVXbf5hZ4ITC7pv5boaJIJ09U.mft (raw, json)
Hash identifier:          +dSouW8r0ItVQLGVr6G9ShIIJmo2fZpXBIOVbYsDsDs=
Subject key identifier:   B1:63:C5:72:72:CC:96:AB:1B:73:F8:F4:FE:30:68:21:C6:42:F2:15
Authority key identifier: B8:C5:15:5D:B7:F9:85:9E:08:4C:2E:E9:BF:96:E8:68:92:09:D3:D5
Certificate issuer:       /CN=b8c5155db7f9859e084c2ee9bf96e8689209d3d5
Certificate serial:       01A0ECD3EE58F47D6321D88B7090FF8D6973
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMUVXbf5hZ4ITC7pv5boaJIJ09U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.mft
Manifest number:          1A83
Signing time:             Tue 29 Sep 2026 11:01:47 +0000
Manifest this update:     Tue 29 Sep 2026 11:01:47 +0000
Manifest next update:     Wed 30 Sep 2026 11:01:47 +0000
Files and hashes:         1: lMQRX0mR9Axp4z6P95tdFQDV46k.roa (hash: Se/NXmVlNWl9ejlquvOyXO/Tg0Zm/eNsymPPK58mByY=)
                          2: uMUVXbf5hZ4ITC7pv5boaJIJ09U.crl (hash: D+1xdWVsZjEjps63JF91j27uhOWHVMOdGANpmQZZtoE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uMUVXbf5hZ4ITC7pv5boaJIJ09U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ec:d3:ee:58:f4:7d:63:21:d8:8b:70:90:ff:8d:69:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8c5155db7f9859e084c2ee9bf96e8689209d3d5
        Validity
            Not Before: Sep 29 11:01:47 2026 GMT
            Not After : Sep 30 11:01:47 2026 GMT
        Subject: CN=b163c57272cc96ab1b73f8f4fe306821c642f215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:53:06:7c:20:7a:ae:12:bb:32:5c:fc:7c:cb:
                    0a:96:ef:90:9d:8e:4e:b2:72:95:87:70:a3:ac:20:
                    1c:3a:d1:61:4c:fc:35:fa:c1:3e:c2:3b:80:06:4c:
                    a5:cc:d2:c6:52:56:93:14:b8:21:4e:51:66:5e:35:
                    37:3a:29:b4:c6:d5:c7:6a:8c:9f:4d:cd:1a:fe:23:
                    88:40:34:14:da:05:90:e8:39:c5:59:8f:fb:a7:50:
                    fc:ff:b1:03:d3:5d:ae:82:a8:e2:ae:dd:67:bd:84:
                    97:ee:ec:3d:1c:f0:39:0a:73:fb:a6:5c:a5:47:e8:
                    93:dc:4d:c9:5d:20:41:56:7b:12:5e:b4:e6:ab:be:
                    9a:e7:f5:db:86:bf:b3:30:54:4a:e9:43:f0:1d:49:
                    dc:c9:98:9b:a6:3b:f8:50:74:84:04:21:bb:ad:4f:
                    fe:f3:73:d7:84:eb:0d:c1:4a:8f:5e:03:32:d3:e4:
                    01:0a:09:e4:c5:0a:57:81:be:61:69:8e:dc:fb:41:
                    2f:db:75:79:3c:09:57:d8:d9:90:27:28:55:ef:e1:
                    a2:69:e0:3a:1d:43:d2:ae:2c:68:c6:43:7f:e8:42:
                    db:7f:56:72:23:26:5b:fc:96:89:19:6d:67:fd:ac:
                    88:29:c7:ef:56:42:cb:39:18:c7:d5:11:f3:37:12:
                    db:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:63:C5:72:72:CC:96:AB:1B:73:F8:F4:FE:30:68:21:C6:42:F2:15
            X509v3 Authority Key Identifier:
                keyid:B8:C5:15:5D:B7:F9:85:9E:08:4C:2E:E9:BF:96:E8:68:92:09:D3:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMUVXbf5hZ4ITC7pv5boaJIJ09U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:c9:ae:e0:ea:d6:d6:07:18:d3:50:4b:e0:67:3e:ac:21:4b:
         e2:93:40:d9:2c:9c:dc:bf:12:27:aa:3b:dd:b2:25:22:ae:b9:
         62:a2:3c:ee:c1:04:fc:58:72:05:9a:33:b8:1e:25:84:55:76:
         34:23:50:cc:ca:0e:37:92:af:72:bd:dd:41:04:57:be:d9:c9:
         93:d8:d6:a8:2d:f7:69:4a:d1:3e:bd:4f:f3:4c:76:32:0b:e5:
         e3:24:86:0f:55:25:8b:9c:05:e6:9a:85:81:8e:32:ff:19:99:
         07:72:02:4e:aa:d3:a3:b1:f2:bf:a9:5d:c7:5c:04:70:58:c6:
         81:81:5c:24:79:c3:37:24:11:ac:4a:94:bf:1f:ea:03:f3:f2:
         81:04:22:43:7d:d2:2d:51:1a:46:79:ca:cb:69:65:35:6c:c4:
         89:2e:16:d5:33:a2:7d:c4:44:02:de:fa:f8:ec:c1:01:65:c7:
         d4:50:dd:b5:30:b5:fc:da:a0:a2:89:7e:26:64:d2:0c:aa:79:
         42:68:7e:79:79:5a:53:c9:55:46:53:2a:96:4d:56:5b:52:16:
         d0:db:f5:08:78:83:f0:33:e4:0a:1e:f1:b1:0e:69:68:5b:bd:
         10:d7:da:4f:cb:d0:e3:de:6e:6d:51:7e:4e:95:be:49:68:7e:
         58:f5:02:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:16:10 2026 by rpki-client