Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft
File:                     uNJRxL_VJtoGLUzir1a25G6SURc.mft (raw, json)
Hash identifier:          uLIl3/ONEswfGLSrSGVX5/Ikk1TF2DT4Qg5NUeHxkB0=
Subject key identifier:   B3:F6:EB:CF:5F:41:1F:CC:56:C9:DB:22:36:E0:F3:D1:6D:41:45:BB
Authority key identifier: B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17
Certificate issuer:       /CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
Certificate serial:       01A14D2B3938FADC4B3D2B14C6384D5A893D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft
Manifest number:          1AAF
Signing time:             Sun 18 Oct 2026 04:00:40 +0000
Manifest this update:     Sun 18 Oct 2026 04:00:40 +0000
Manifest next update:     Mon 19 Oct 2026 04:00:40 +0000
Files and hashes:         1: 9Q6nU6Ov__KOkTwmSpk1ZBP9x4s.roa (hash: zRA5CI+R45kbSe5Kp/RvwdAAuwY45TD/QhpgQ2cow9Q=)
                          2: 9zanIZ7MEeT1oHmM73KPnI3KUEM.roa (hash: Jme7qQGkxTK5eI1p9XNoTtTYwDVKr6hYwFmD3XiO9Sk=)
                          3: Et1_SdwbVg4dskwSsE8Bb6_r0BQ.roa (hash: fkDE9HZ2X/FoPpPBL/xBOgXNWoBnauSZriz8/UyefOQ=)
                          4: nJVTV_xC46i_jMWC0u5aQlLsYTI.roa (hash: 1PR1dDwuBSuvJYidaakEzx/AJjq3GTgS+XI3K+QB2/k=)
                          5: uNJRxL_VJtoGLUzir1a25G6SURc.crl (hash: QUHoUn2LY87TlM+0Fna7VdOD0zdXPzNvNDkE4RDyEfg=)
                          6: xUOg3UnR5NzZnsoqQTCM2z8QcuA.roa (hash: 1+/9Z/D/KU/a6AJWSS+7jp2T1wnZtSaOlAbOLEGldwc=)
                          7: yN-B2V0Dka04y-vFp5uchumgtKY.roa (hash: HJDoxjycVkfIV6zIX1nmMl83dxZXyYJ/bjTRUSF4UQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4d:2b:39:38:fa:dc:4b:3d:2b:14:c6:38:4d:5a:89:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
        Validity
            Not Before: Oct 18 04:00:40 2026 GMT
            Not After : Oct 19 04:00:40 2026 GMT
        Subject: CN=b3f6ebcf5f411fcc56c9db2236e0f3d16d4145bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d1:79:90:e0:b7:3a:cf:72:0d:2a:ec:b9:46:
                    06:47:71:9b:27:6a:b4:a4:4a:2f:79:d4:6f:0e:e1:
                    3f:a1:d3:db:73:00:14:fb:57:42:a0:32:7d:b4:a9:
                    6d:e6:17:06:ce:92:f2:22:43:0d:c5:eb:9c:cb:ba:
                    df:ed:9e:3a:a9:67:f8:a4:a0:98:2a:fe:15:cf:11:
                    1c:86:e9:ae:cf:a3:85:b9:58:22:da:27:6c:ea:89:
                    89:07:db:aa:df:fd:5b:a5:d6:d4:8e:52:5a:e6:bf:
                    f4:83:f0:ce:48:94:06:ad:ae:52:49:66:d1:8d:95:
                    c9:48:7c:6d:1b:80:39:52:ab:bf:5a:48:11:c7:0f:
                    e9:f8:84:16:06:ff:53:16:ea:ac:c1:1c:79:e6:aa:
                    e4:d3:40:5d:36:d8:a7:fd:ce:8e:ed:63:63:71:7a:
                    ac:37:01:7d:b4:47:cc:e9:88:85:4f:37:c9:79:2f:
                    60:a3:c9:82:69:ac:9b:bc:18:bf:38:2d:ae:fc:31:
                    35:12:aa:78:44:71:70:bb:57:4e:40:74:33:44:4c:
                    b6:64:54:b2:0c:31:e2:62:81:90:e3:0f:be:ba:7a:
                    db:04:b6:6a:4d:49:c8:dc:e4:4f:a1:0b:37:37:0e:
                    73:79:39:d8:19:73:6c:d8:50:70:cf:9a:9a:98:24:
                    22:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F6:EB:CF:5F:41:1F:CC:56:C9:DB:22:36:E0:F3:D1:6D:41:45:BB
            X509v3 Authority Key Identifier:
                keyid:B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:ff:e8:bd:c8:17:e9:2e:07:c2:cc:d6:6d:7f:22:dc:0d:80:
         73:43:f4:bb:b4:c0:9b:1f:e5:fd:99:7d:c3:85:dc:7c:82:87:
         ab:4f:4a:03:24:5e:31:a5:ef:09:ce:78:24:89:08:ea:05:06:
         95:4c:ac:c5:d1:de:ab:58:80:00:82:8c:92:23:66:41:84:be:
         23:e8:ff:c5:4e:01:19:fe:9b:08:90:a6:b9:0a:5f:9b:10:f9:
         19:12:ee:5a:d5:1e:c0:2a:e1:63:40:f2:7c:2b:a1:42:fd:ea:
         51:4e:1b:40:fb:d4:38:7e:eb:cc:dc:8f:b8:18:b7:c8:94:07:
         f4:04:7c:4f:8b:22:97:5f:fc:dd:5d:64:76:4e:35:f1:04:1b:
         8f:48:5d:ff:d4:de:59:59:ef:44:0e:76:ab:bc:df:da:7b:b5:
         2b:ba:99:14:6e:64:23:33:9b:9e:ed:1b:d4:66:11:b8:6d:f7:
         c0:9c:17:26:86:9d:ba:92:44:6b:90:ae:0d:b8:5a:81:13:e0:
         79:23:47:4d:59:a5:26:ac:35:e1:0d:a0:44:2e:f0:f9:de:23:
         f5:6e:f8:8c:d1:48:f3:cc:6d:e8:f9:69:32:98:de:c8:8a:40:
         a7:ae:dc:af:6f:06:76:b4:e8:ff:d4:5c:61:bb:35:45:38:37:
         de:e6:97:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 10:36:45 2026 by rpki-client