Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
File:                     uRil9IFVJuHpJRDTZI69oM27wqw.mft (raw, json)
Hash identifier:          Qyp+v1l2o+IrwpCwQO5DZQq+oSIukc7YUR6Z+vCWLEs=
Subject key identifier:   CE:AB:61:0B:EE:40:50:EB:5B:D8:A1:27:2F:CD:12:2D:9E:59:13:38
Authority key identifier: B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC
Certificate issuer:       /CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
Certificate serial:       01A126549A22254A7EBF1AED3BAE6CC41DAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
Manifest number:          0CA4
Signing time:             Sat 10 Oct 2026 15:00:40 +0000
Manifest this update:     Sat 10 Oct 2026 15:00:40 +0000
Manifest next update:     Sun 11 Oct 2026 15:00:40 +0000
Files and hashes:         1: IVaGwYE-xSWos9-zj2HpODEJhqg.roa (hash: L3WvUKStDTf5drv93q1GG66aaVezmjafU4Trsj7t1+s=)
                          2: uRil9IFVJuHpJRDTZI69oM27wqw.crl (hash: w5GGN6Kj3iJ1BovirADwYGl+YYqiUs59gV4QjmWdwsw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:26:54:9a:22:25:4a:7e:bf:1a:ed:3b:ae:6c:c4:1d:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
        Validity
            Not Before: Oct 10 15:00:40 2026 GMT
            Not After : Oct 11 15:00:40 2026 GMT
        Subject: CN=ceab610bee4050eb5bd8a1272fcd122d9e591338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:17:8c:9b:c5:06:f2:48:37:3b:eb:1b:64:c5:
                    45:23:e1:20:a8:ba:b1:19:22:2b:9b:b5:2b:70:f8:
                    35:9e:00:8f:3e:9e:e6:9c:8c:4d:c4:4e:dc:04:78:
                    d9:77:c6:4d:f6:fd:c0:df:96:7f:5a:e6:3c:c8:cd:
                    c6:74:77:1c:62:8f:7c:80:66:31:0f:ba:b1:99:95:
                    e9:95:2b:88:b8:23:a5:71:6b:0a:3f:df:86:45:ff:
                    39:e8:6e:82:0b:e0:17:77:85:f2:d8:75:04:1c:3a:
                    91:e1:57:d6:8b:b9:49:ee:b7:f2:f0:32:03:45:61:
                    43:af:ab:dc:09:b7:46:35:60:ff:28:60:8b:b5:10:
                    03:ca:74:5a:29:f3:1d:9c:b3:67:d1:3c:7f:94:5c:
                    85:b8:06:72:dc:cf:75:4e:e2:11:5e:e4:a4:fe:41:
                    76:77:3d:ed:92:06:c5:0b:73:ea:24:87:d5:93:9a:
                    0a:d6:b9:bc:20:12:69:94:79:3a:e8:c8:f5:b1:ec:
                    79:47:63:ee:17:af:eb:9b:7a:24:7b:44:d1:3e:21:
                    95:b1:9f:df:e8:1d:70:79:62:48:e0:75:e4:dd:c6:
                    e6:ae:6d:d8:64:df:25:8e:34:84:0d:14:70:28:96:
                    5b:2e:c9:b1:32:ff:77:b1:e1:2b:8c:37:fe:49:cf:
                    21:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AB:61:0B:EE:40:50:EB:5B:D8:A1:27:2F:CD:12:2D:9E:59:13:38
            X509v3 Authority Key Identifier:
                keyid:B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:d8:53:62:a9:15:ef:74:3b:d2:6c:54:b0:24:62:9d:e0:cd:
         61:29:16:2b:21:30:ae:d4:6c:ad:12:fb:03:23:e9:0f:54:36:
         e3:5f:68:98:3f:be:48:93:f4:09:17:4e:47:2d:37:53:44:90:
         57:7b:75:8c:2a:fc:43:9b:d2:da:94:be:4b:e8:8a:d7:5a:5a:
         7a:5e:de:ba:ef:72:dd:6a:85:1f:9f:12:4a:bf:f8:64:ce:60:
         c9:94:7b:1d:5e:26:6d:4e:9a:52:a3:38:d4:2b:d1:97:23:6c:
         1d:40:25:c0:69:d6:21:0e:19:36:05:e6:de:53:53:78:e1:ea:
         75:a5:98:eb:85:03:f4:43:de:a3:ac:15:dc:80:7f:a4:b2:64:
         54:4a:68:9d:41:b2:75:2c:d4:4d:e1:91:ca:95:d9:fd:54:60:
         78:3d:a8:83:0e:c3:62:16:1b:37:ba:0c:6c:f1:01:45:79:f3:
         d9:df:ce:07:d7:b0:ab:6e:81:92:9b:2c:68:98:5f:b3:a8:3a:
         2e:54:d6:04:e7:50:31:c6:a6:af:2e:a0:0a:93:45:18:24:01:
         ec:65:bc:b7:2b:76:d3:5b:52:96:46:7c:f1:2d:7f:f6:c7:85:
         06:d7:25:79:59:60:ff:32:ec:c8:36:20:07:a9:38:b2:28:a2:
         ea:f2:d5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:43:40 2026 by rpki-client