Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/uTS2FvVrv9BdC9ScZjBvTZCCZhs.mft
File:                     uTS2FvVrv9BdC9ScZjBvTZCCZhs.mft (raw, json)
Hash identifier:          e/SkNNdFdPDZe42asUQfzCZvgsCotY7ljdVGh2Zsc6U=
Subject key identifier:   02:F7:16:99:DE:EB:8C:98:78:76:CE:C6:20:7A:53:AF:0C:8C:BD:2B
Authority key identifier: B9:34:B6:16:F5:6B:BF:D0:5D:0B:D4:9C:66:30:6F:4D:90:82:66:1B
Certificate issuer:       /CN=b934b616f56bbfd05d0bd49c66306f4d9082661b
Certificate serial:       01A1E05F1AB6D97802F8316CC0F55175667F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uTS2FvVrv9BdC9ScZjBvTZCCZhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/uTS2FvVrv9BdC9ScZjBvTZCCZhs.mft
Manifest number:          0172
Signing time:             Sun 15 Nov 2026 18:01:31 +0000
Manifest this update:     Sun 15 Nov 2026 18:01:31 +0000
Manifest next update:     Mon 16 Nov 2026 18:01:31 +0000
Files and hashes:         1: uTS2FvVrv9BdC9ScZjBvTZCCZhs.crl (hash: qrhvvPHHV/oNfRlfeKKpRULtjO+ytfVaDbQNCioQsHY=)
                          2: wEJikxHblT6L9s-bWi71LrsBZRI.roa (hash: bunPLGyVfPKxwGeY/HVdEI1aNYchPYcPFBV30VR16pY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/uTS2FvVrv9BdC9ScZjBvTZCCZhs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/uTS2FvVrv9BdC9ScZjBvTZCCZhs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uTS2FvVrv9BdC9ScZjBvTZCCZhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:e0:5f:1a:b6:d9:78:02:f8:31:6c:c0:f5:51:75:66:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b934b616f56bbfd05d0bd49c66306f4d9082661b
        Validity
            Not Before: Nov 15 18:01:31 2026 GMT
            Not After : Nov 16 18:01:31 2026 GMT
        Subject: CN=02f71699deeb8c987876cec6207a53af0c8cbd2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1f:4f:2a:f5:69:63:d2:48:53:31:e8:1c:da:
                    90:99:a9:ee:af:4f:37:d0:be:bb:0f:c0:9b:3e:35:
                    9c:a7:ac:f6:0e:c1:0a:d8:84:39:48:f6:89:fe:d9:
                    70:b2:43:6a:1a:63:22:ab:8b:a5:5d:36:f1:66:b9:
                    97:7e:13:55:6d:6e:43:bc:db:93:2b:14:ed:ec:f1:
                    fe:5c:66:81:3c:b7:fa:e8:16:b3:df:50:2d:77:be:
                    aa:f6:b8:0d:21:ba:7f:54:d5:41:6e:0b:78:43:03:
                    5f:06:2a:0a:e5:9c:d7:f6:90:0d:98:21:da:42:6f:
                    0f:51:6b:8c:aa:40:77:52:75:22:69:71:a7:b2:dc:
                    0c:3f:c4:20:96:13:a6:bf:48:b2:d4:3e:83:11:d0:
                    bf:81:4e:0d:84:a7:09:37:24:44:14:d8:04:7c:b8:
                    58:62:e3:9c:f5:27:a8:b7:ae:6f:c8:0e:90:ba:b2:
                    7c:38:54:93:7a:14:bc:ac:1b:bc:d1:b7:76:1b:72:
                    7b:f0:a4:92:1d:2c:f3:9a:c9:84:b0:21:5a:0d:59:
                    8a:f1:00:dd:94:08:1d:48:97:df:af:5c:fb:ff:1f:
                    4b:75:65:9b:91:a0:23:cf:00:33:83:a1:29:9d:20:
                    1e:34:a1:93:7c:39:da:eb:a6:d7:22:ca:7d:34:00:
                    0c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F7:16:99:DE:EB:8C:98:78:76:CE:C6:20:7A:53:AF:0C:8C:BD:2B
            X509v3 Authority Key Identifier:
                keyid:B9:34:B6:16:F5:6B:BF:D0:5D:0B:D4:9C:66:30:6F:4D:90:82:66:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTS2FvVrv9BdC9ScZjBvTZCCZhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/uTS2FvVrv9BdC9ScZjBvTZCCZhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/uTS2FvVrv9BdC9ScZjBvTZCCZhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:2f:b2:c5:5b:fb:7b:8b:db:2b:b1:c7:d9:bc:8d:b5:1a:50:
         34:ae:a1:9e:a1:a8:6b:bd:79:e9:ab:ca:29:08:79:c0:de:1b:
         2d:03:de:25:30:64:27:dc:c7:09:4c:c1:ed:ba:d6:52:ee:3f:
         c7:b6:4a:79:a9:41:c7:b7:f7:87:23:ea:e1:f6:18:a8:e9:19:
         f8:fe:31:c3:d4:0b:71:2f:62:f2:36:86:b2:05:2a:11:c4:5d:
         51:2c:b1:a0:ac:13:89:2c:eb:b2:f2:e0:71:eb:c1:ba:de:f9:
         7f:4a:45:f3:47:0b:c1:f7:dc:fe:7d:a7:ad:e9:21:46:d3:cf:
         f2:07:dc:3c:45:26:b9:32:56:79:9b:ab:11:bf:1e:37:a2:36:
         90:27:92:a1:46:bf:35:ca:b6:55:c6:8e:94:09:55:8a:15:15:
         72:18:a9:fd:0a:92:cc:ab:ff:06:c8:61:f0:70:2d:01:bd:ab:
         d8:f4:60:d6:ba:d0:65:16:47:86:1f:bb:69:cc:6c:b5:05:dd:
         f6:5b:82:ab:08:e9:1e:d4:21:15:30:bf:fb:28:02:69:8b:a0:
         ea:5f:f7:21:ac:96:b9:5c:83:9b:cb:d1:38:2b:16:da:33:bd:
         c0:94:8a:21:42:72:d4:40:d5:72:c3:0c:0a:ff:d6:e8:b6:6b:
         c1:3a:18:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:08:52 2026 by rpki-client