Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft
File:                     uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft (raw, json)
Hash identifier:          BsA1l+Bm6MLwXj9yhdmvQoc7CQwQG4jJ+laXaEy0sMg=
Subject key identifier:   56:63:F5:64:B7:5A:74:03:D1:27:4A:83:BE:2D:60:60:E3:71:F6:45
Authority key identifier: B8:B3:D4:AC:E7:35:61:3E:CB:C5:91:DF:FC:29:85:F3:41:76:67:D3
Certificate issuer:       /CN=b8b3d4ace735613ecbc591dffc2985f3417667d3
Certificate serial:       01A0C8598287D08180F3AE49FC08BCDEF1ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft
Manifest number:          0396
Signing time:             Tue 22 Sep 2026 09:01:44 +0000
Manifest this update:     Tue 22 Sep 2026 09:01:44 +0000
Manifest next update:     Wed 23 Sep 2026 09:01:44 +0000
Files and hashes:         1: 4VOCUsw7Y40UgbzApQcOiQghh0c.asa (hash: wgcHLIZ/e9HZMfsKgU29etydv3IUR1af9ZeHfuj+i64=)
                          2: KOErg6r_paJI0SDiRqJ2gbbIop0.roa (hash: oJNk01xv+/h+zZ4oR0sxYwzidTItbFMP5pbl9O9lZg4=)
                          3: XSV6OrNovxXtYusqCE9q4mp3qXs.asa (hash: 0t9/pqyWmtPw2bio+2RPQz6YmxhtHfCjUXBx0UbYZQE=)
                          4: uLPUrOc1YT7LxZHf_CmF80F2Z9M.crl (hash: WgxIARKfNUVr4yyrOgsGAPF7q1dMfW4o/2ljlqns+1I=)
                          5: yEZxNKm9hJwxBUa-ME1vR4GtBTc.roa (hash: B5UFP+QFN1O3lnkFErxuZqPiZdRUQaYPbLAKDfWBJcQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 09:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:59:82:87:d0:81:80:f3:ae:49:fc:08:bc:de:f1:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8b3d4ace735613ecbc591dffc2985f3417667d3
        Validity
            Not Before: Sep 22 09:01:44 2026 GMT
            Not After : Sep 23 09:01:44 2026 GMT
        Subject: CN=5663f564b75a7403d1274a83be2d6060e371f645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:22:25:33:64:af:54:a6:78:3d:d9:3f:69:50:
                    8e:f7:67:cb:71:b3:32:f6:03:0b:31:f4:d7:25:e3:
                    00:22:48:91:ee:9a:f2:2c:e8:28:4a:27:0d:9c:66:
                    98:32:b0:19:fd:84:54:d2:e8:91:e9:51:33:20:2a:
                    91:ee:40:23:58:48:cd:25:08:82:77:54:40:bb:13:
                    25:46:b3:da:92:e6:62:42:eb:80:34:60:53:02:36:
                    19:45:fb:d5:cf:be:ed:e0:78:81:1e:5a:eb:f3:35:
                    59:8a:46:25:bb:b8:92:8e:d8:b5:b6:32:f2:ec:a6:
                    fa:73:52:a7:63:5b:a4:4c:4b:cd:e7:31:3d:ee:36:
                    64:49:4c:c7:49:98:72:30:6d:5b:d7:97:9e:f2:f7:
                    5c:94:f3:b8:ec:66:a2:bd:87:88:2f:98:2a:90:89:
                    e5:57:3c:1c:30:96:db:58:82:c4:f6:4b:53:67:36:
                    24:77:4c:1a:9d:cb:f2:21:fa:43:89:2f:e9:54:8e:
                    74:26:65:d0:02:08:2c:72:9f:94:f9:7b:a9:69:ab:
                    d8:86:e0:b5:c2:04:f6:2c:7d:cb:c2:cb:ec:c8:10:
                    bc:fb:91:bd:48:c3:47:a6:36:77:50:5a:b2:25:f3:
                    47:ef:14:0b:ac:91:7c:c3:79:7e:08:71:73:52:39:
                    29:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:63:F5:64:B7:5A:74:03:D1:27:4A:83:BE:2D:60:60:E3:71:F6:45
            X509v3 Authority Key Identifier:
                keyid:B8:B3:D4:AC:E7:35:61:3E:CB:C5:91:DF:FC:29:85:F3:41:76:67:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:92:6b:ae:f4:7c:1c:fb:b1:e6:27:e3:11:48:e7:7a:97:a7:
         59:2d:05:81:80:01:da:ec:4f:64:46:d6:6a:f9:5c:dd:4f:05:
         28:b3:6a:bf:4f:60:a8:d8:9e:74:e0:de:f8:8a:67:3e:da:b8:
         e2:ed:8c:7d:87:f6:50:c8:8f:2e:8f:27:f7:ba:42:e2:13:64:
         48:2f:29:49:6d:69:8a:ea:be:4b:1a:83:0d:01:c9:e7:14:63:
         7e:82:36:7b:18:05:92:0c:f5:4e:e3:60:bd:78:c2:a9:70:54:
         05:7e:c0:75:c9:87:3d:78:c1:f6:2f:a8:13:2e:98:1f:51:18:
         40:a7:a1:06:8e:fd:44:46:85:4f:a8:2f:61:ac:c0:db:81:7f:
         8e:01:24:fb:eb:0a:e5:c6:15:43:88:34:a0:4a:b6:74:cd:fc:
         81:2e:4a:68:76:0a:c3:07:65:e8:31:c8:33:9e:86:3c:31:84:
         71:ad:1e:db:d1:fa:87:f4:5c:d5:b5:f2:3a:ee:e5:84:44:c3:
         e7:25:db:43:c4:c8:a5:12:23:3b:0e:42:9b:66:4e:69:16:60:
         0b:9c:5e:da:2a:f4:a8:bf:74:a3:79:a9:73:12:3e:dd:34:21:
         4e:40:bf:6b:d0:2e:58:df:dc:61:02:6e:22:14:6f:c4:61:90:
         5d:38:39:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:03:30 2026 by rpki-client