Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft
File:                     uF6twuxwsw-kIl7X_NVzDwx7xhY.mft (raw, json)
Hash identifier:          u3Jw/JsEsbU+Wi/RAiH+SG6oU1dhmyEi5/Znd0ZTSA8=
Subject key identifier:   FB:16:BE:95:25:8F:83:CF:94:DF:4C:FC:1F:1E:31:88:C3:BF:33:71
Authority key identifier: B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16
Certificate issuer:       /CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616
Certificate serial:       019FACE384E5B4D0EBB763125B648325B214
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft
Manifest number:          0A25
Signing time:             Wed 29 Jul 2026 08:00:19 +0000
Manifest this update:     Wed 29 Jul 2026 08:00:19 +0000
Manifest next update:     Thu 30 Jul 2026 08:00:19 +0000
Files and hashes:         1: 8pZUXvACu9QhvKuW-qMjjg-zMpg.roa (hash: 0/gavMRZtZdbhY3KH3ekU0vMqEL7/EvqYK9+J6uWS6E=)
                          2: G-toJfPo5_lPvfgOuGF2O7gK5MU.roa (hash: f/HsVZaK7DlKBZfvaInpx95ilwjwGX/MKV/SRXvYXG8=)
                          3: GSvze0OvgyB86_aIjXE_zYpEcJ8.roa (hash: i0T9AmgsVXvoJ7juXc0u6ILs8JxVxErhczJ27Ywnx4c=)
                          4: WEBxfBgljdO2-_OPHWGZu1V4u-E.roa (hash: nt1blU8jTILJsm/QWLFQx/HjDxyXCoII44gqy3P+yHo=)
                          5: daB6TCjb0g5mJAh5C9L7PP2C3bU.roa (hash: LCCpR6Wg5909zrCuVhiyOKBdbzncNfnlYiYr8mrOsJg=)
                          6: uF6twuxwsw-kIl7X_NVzDwx7xhY.crl (hash: eFPIQ4a/oMZ6TkIwROAQX/lZsl1HyOjU+PlscUoXcFo=)
                          7: yvd72ao7oZeloqF7PcjwFXQOaKg.roa (hash: p8n/0jBEU3JxwNl8gzkR0TyAriDfbE7fJ2mPGP83LhU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:e3:84:e5:b4:d0:eb:b7:63:12:5b:64:83:25:b2:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616
        Validity
            Not Before: Jul 29 08:00:19 2026 GMT
            Not After : Jul 30 08:00:19 2026 GMT
        Subject: CN=fb16be95258f83cf94df4cfc1f1e3188c3bf3371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1e:6f:8b:46:42:e7:e6:11:c4:56:a2:69:ce:
                    7a:a2:f9:94:5e:be:f4:24:d8:99:bd:7a:a7:ec:c4:
                    dd:26:b0:0f:85:79:08:f6:41:35:0d:c9:15:ef:16:
                    7a:57:63:a3:57:c2:7b:b3:5f:6f:b0:e9:ba:23:1d:
                    8a:1a:32:a8:14:99:b4:0e:b0:a3:30:c6:45:bc:cb:
                    57:20:72:6e:a6:6d:8a:7e:8f:61:54:dd:67:3a:1f:
                    4d:71:19:35:34:85:b1:36:99:a8:5a:d4:ec:ae:0d:
                    20:0c:13:2f:85:ae:30:c6:e9:4f:e0:26:9a:e1:ee:
                    0c:5e:c3:11:f4:4b:76:02:a7:dc:fa:95:5a:0d:6c:
                    ed:50:27:d8:c3:af:b4:87:15:5b:a2:54:67:90:a7:
                    a9:4a:06:c0:6a:0f:81:ab:ad:35:80:6f:2a:f4:5b:
                    0b:09:93:27:ef:1c:ae:32:44:e9:06:1e:94:ed:7a:
                    32:11:15:86:52:39:67:fd:17:41:aa:a5:06:55:85:
                    f0:63:ff:72:a8:0b:9e:d1:0a:d0:04:a9:14:50:41:
                    20:c0:57:a2:c1:42:02:18:84:50:6b:42:91:10:50:
                    33:5d:bf:e4:c9:49:cb:83:78:9f:86:ee:61:04:be:
                    17:45:6a:32:44:9b:54:b4:71:67:52:1d:31:72:36:
                    35:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:16:BE:95:25:8F:83:CF:94:DF:4C:FC:1F:1E:31:88:C3:BF:33:71
            X509v3 Authority Key Identifier:
                keyid:B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:16:63:e7:d6:fe:1d:02:2c:10:50:8f:64:46:67:81:b9:11:
         10:e6:7e:a2:cf:d8:fb:5f:af:8d:5b:e3:93:84:54:1a:cc:1a:
         5b:82:c2:4c:7e:8b:59:89:f8:df:a2:18:b5:16:5e:5d:b5:e6:
         cb:cf:5c:22:b9:ce:b1:6e:7f:e9:8f:4c:57:59:99:d2:61:dd:
         0f:1f:b5:ca:4f:d2:bc:4c:8e:84:24:ab:7d:01:8d:47:c7:01:
         cc:ed:20:09:63:26:b9:47:32:6c:74:cf:46:73:69:c6:0f:ee:
         fb:cb:34:44:ee:ae:47:93:bd:8a:83:d8:1f:3a:c5:6a:29:32:
         05:c3:92:53:b5:a3:d9:4a:e1:72:07:8b:60:8f:e8:36:99:f3:
         ba:37:9c:47:58:ed:7d:b9:86:4c:db:ca:7f:78:22:e2:95:46:
         8d:bc:cf:d8:90:7f:db:80:5f:64:f6:98:02:33:62:f6:9a:07:
         e8:60:7a:d6:17:4a:cb:47:64:7a:a4:6c:bf:7c:49:30:04:c3:
         4d:1f:1c:07:52:05:63:ad:41:c2:bd:57:87:60:2b:9b:c6:f4:
         6f:89:1d:09:6a:39:46:50:d2:29:05:be:46:c4:fd:2d:24:e1:
         1d:31:13:76:21:6a:95:00:69:a6:6f:5c:e5:a8:39:06:4d:4b:
         37:b7:14:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:28:09 2026 by rpki-client