Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft
File:                     UAVevD0cUvF65lrCkuvgmTEAnPY.mft (raw, json)
Hash identifier:          uSQnJJ4ON/vxR1Kt2rIY7tybTIX8nNa7vmYjb4Olw+w=
Subject key identifier:   23:73:34:8D:BC:99:03:57:B8:F3:42:E9:2A:82:34:EA:2D:B3:08:2E
Authority key identifier: 50:05:5E:BC:3D:1C:52:F1:7A:E6:5A:C2:92:EB:E0:99:31:00:9C:F6
Certificate issuer:       /CN=50055ebc3d1c52f17ae65ac292ebe09931009cf6
Certificate serial:       01A0CAB50F3F31EF4D697D1A768B9C6C20E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft
Manifest number:          1A69
Signing time:             Tue 22 Sep 2026 20:00:58 +0000
Manifest this update:     Tue 22 Sep 2026 20:00:58 +0000
Manifest next update:     Wed 23 Sep 2026 20:00:58 +0000
Files and hashes:         1: 8ho9HiR8WuGSEcLEuAu9vgoeEOk.roa (hash: 9ykIDcmL5cz0ycTHRWIGIZIZVyJ5BAMWzb6yGqt8tNU=)
                          2: UAVevD0cUvF65lrCkuvgmTEAnPY.crl (hash: PD79+yUlP5H/UxQv58Rj/B/9ixcgItOTbkqBxq0LG4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 20:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:b5:0f:3f:31:ef:4d:69:7d:1a:76:8b:9c:6c:20:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50055ebc3d1c52f17ae65ac292ebe09931009cf6
        Validity
            Not Before: Sep 22 20:00:58 2026 GMT
            Not After : Sep 23 20:00:58 2026 GMT
        Subject: CN=2373348dbc990357b8f342e92a8234ea2db3082e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cb:10:0f:bf:88:f9:d7:70:3b:08:e2:3c:b3:
                    83:0d:92:17:d1:29:37:98:e7:92:a3:e9:0b:45:ec:
                    f5:fa:d2:e8:e2:7d:14:bb:33:82:61:7f:d7:d7:93:
                    36:e4:2f:86:7b:63:22:16:7b:6f:ae:e0:ce:c3:24:
                    be:9b:95:42:b2:7f:ce:c8:18:bc:2a:09:47:dd:36:
                    4e:82:ec:51:05:78:95:71:a5:b3:7d:1a:e9:91:12:
                    02:42:70:5e:cf:74:7a:8b:f5:cc:c0:2b:9e:12:8c:
                    23:2a:ef:32:9f:34:8f:47:48:d4:41:c4:50:6c:33:
                    eb:07:9e:25:92:b5:15:bc:df:62:58:e4:f7:9a:75:
                    c1:11:fb:41:92:f5:fd:5a:78:76:a7:76:7d:97:85:
                    7a:9b:95:cd:2a:4c:4e:3c:39:ed:4f:94:0b:fd:76:
                    80:de:79:b4:7f:c0:9f:35:60:b7:aa:bc:6a:48:18:
                    1c:33:34:eb:1b:8c:39:10:92:65:04:99:9e:a8:19:
                    43:48:9f:aa:8e:f8:e3:d1:a1:96:b8:83:d9:8d:1a:
                    7a:74:68:75:6f:ad:ec:1e:ca:b1:f9:78:25:46:3a:
                    5c:ff:72:f1:52:51:b6:b3:ab:f5:2b:14:25:70:13:
                    37:65:e7:a0:e1:14:a9:05:51:e4:51:ed:b0:c6:58:
                    7e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:73:34:8D:BC:99:03:57:B8:F3:42:E9:2A:82:34:EA:2D:B3:08:2E
            X509v3 Authority Key Identifier:
                keyid:50:05:5E:BC:3D:1C:52:F1:7A:E6:5A:C2:92:EB:E0:99:31:00:9C:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:a7:59:1a:4f:6e:1b:91:7f:4e:1c:44:3d:0b:ed:32:50:5e:
         f3:34:88:d9:e3:e5:7b:7a:0b:6b:fb:f8:3f:7c:c9:28:f9:04:
         76:61:3c:3c:72:c4:a3:a7:58:c6:a6:29:f0:bb:a6:a4:59:82:
         d2:bc:52:ff:7d:bd:2c:52:ba:a2:ed:cb:38:6c:8b:03:9c:b3:
         ce:44:f7:11:4f:95:04:aa:e5:05:58:4a:0f:80:36:8a:07:ab:
         12:ff:49:10:df:33:0d:ef:51:0a:33:25:ba:76:31:53:1a:1f:
         42:87:f5:48:47:ac:a9:45:1c:6d:6f:98:2d:46:51:bb:f2:1b:
         3c:b7:ab:e9:3c:dd:20:8d:a8:01:49:94:e2:c3:71:a6:e9:bd:
         07:f5:9f:c3:fe:21:a8:f6:90:00:34:dc:41:cb:5f:d3:0d:2e:
         bd:0f:52:98:da:db:14:a2:8c:1e:85:01:ee:eb:f6:f8:b9:b5:
         1a:1c:5d:f1:32:b1:23:9f:7d:f7:e0:0b:16:dc:b7:9e:47:e5:
         1b:1a:22:8e:3a:16:7f:3b:f8:65:16:27:bd:1d:54:71:8a:f0:
         b9:f5:6a:90:6c:06:6a:bc:2d:8f:5a:89:7a:31:8f:af:a8:8c:
         8d:cf:12:05:19:79:d4:44:85:fe:35:d0:fd:5e:7a:37:44:8a:
         83:08:63:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:38:13 2026 by rpki-client