Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/960ddf-2c00-4b52-ab43-25fd7429b26e/1/UvSJf3qHP0f6U1KhzfyQPSMmOJQ.mft
File:                     UvSJf3qHP0f6U1KhzfyQPSMmOJQ.mft (raw, json)
Hash identifier:          838IN8XnGuL4RVdtAMUHeIouCATEmaW0gebGwb+2fxE=
Subject key identifier:   C9:C2:9C:A6:AA:47:D2:7A:58:73:5F:55:5D:24:D0:DB:BF:7A:30:54
Authority key identifier: 52:F4:89:7F:7A:87:3F:47:FA:53:52:A1:CD:FC:90:3D:23:26:38:94
Certificate issuer:       /CN=52f4897f7a873f47fa5352a1cdfc903d23263894
Certificate serial:       01A0DC17471EC347A94BC4F5943823C4514E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UvSJf3qHP0f6U1KhzfyQPSMmOJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/960ddf-2c00-4b52-ab43-25fd7429b26e/1/UvSJf3qHP0f6U1KhzfyQPSMmOJQ.mft
Manifest number:          0206
Signing time:             Sat 26 Sep 2026 05:01:47 +0000
Manifest this update:     Sat 26 Sep 2026 05:01:47 +0000
Manifest next update:     Sun 27 Sep 2026 05:01:47 +0000
Files and hashes:         1: UvSJf3qHP0f6U1KhzfyQPSMmOJQ.crl (hash: s5XupT1sDp29xJ9TLXQ6W26swWJxo1udhxNmQL/S4kE=)
                          2: XbkH5_i2k4jHzcNh6FE4UyKwysc.roa (hash: 4o2UxH6bGJou1LD39yY2Re5P0lbU2Modup85oP1m1j8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/960ddf-2c00-4b52-ab43-25fd7429b26e/1/UvSJf3qHP0f6U1KhzfyQPSMmOJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/960ddf-2c00-4b52-ab43-25fd7429b26e/1/UvSJf3qHP0f6U1KhzfyQPSMmOJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UvSJf3qHP0f6U1KhzfyQPSMmOJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:17:47:1e:c3:47:a9:4b:c4:f5:94:38:23:c4:51:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52f4897f7a873f47fa5352a1cdfc903d23263894
        Validity
            Not Before: Sep 26 05:01:47 2026 GMT
            Not After : Sep 27 05:01:47 2026 GMT
        Subject: CN=c9c29ca6aa47d27a58735f555d24d0dbbf7a3054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fb:10:fd:13:1d:cc:e8:cb:e9:f4:3a:07:e0:
                    2b:17:e6:f5:1e:4c:a7:6c:6a:6c:d2:0b:8d:4e:17:
                    59:f9:43:40:d7:61:44:2a:d6:8a:4b:47:fc:78:e5:
                    7a:87:83:7c:20:f6:e6:65:46:3c:41:72:1c:dc:8e:
                    52:f4:b4:77:5b:35:bf:73:d8:91:98:af:bb:3c:e3:
                    73:90:37:63:fc:a0:21:fe:13:64:7b:a0:23:2a:f7:
                    c2:df:eb:7d:10:9a:af:d1:49:91:bc:66:25:84:65:
                    bc:48:21:99:ea:9b:de:28:db:cc:75:93:7f:84:84:
                    8d:2f:2e:28:84:ae:fe:31:04:83:6d:83:93:54:8c:
                    97:2d:c6:cb:96:c1:a0:4b:69:40:9e:f3:08:fd:88:
                    b5:b8:7d:8c:2f:c9:60:f3:72:ff:78:af:23:13:99:
                    64:5a:25:f1:5f:25:1f:e5:8b:d9:4b:2d:f2:aa:ff:
                    e6:c9:73:3f:12:90:6e:c6:59:bd:8b:fa:c0:21:0b:
                    c9:b7:df:1f:ff:be:26:4f:19:e5:6a:f0:99:72:41:
                    65:e3:05:19:11:2e:0f:92:ba:3c:64:8a:62:06:91:
                    d9:a0:47:bd:fc:90:0b:59:cd:06:d6:af:99:b5:b3:
                    c7:c0:5d:62:1c:a0:39:df:de:e2:40:c2:42:83:1c:
                    09:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C2:9C:A6:AA:47:D2:7A:58:73:5F:55:5D:24:D0:DB:BF:7A:30:54
            X509v3 Authority Key Identifier:
                keyid:52:F4:89:7F:7A:87:3F:47:FA:53:52:A1:CD:FC:90:3D:23:26:38:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvSJf3qHP0f6U1KhzfyQPSMmOJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/960ddf-2c00-4b52-ab43-25fd7429b26e/1/UvSJf3qHP0f6U1KhzfyQPSMmOJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/960ddf-2c00-4b52-ab43-25fd7429b26e/1/UvSJf3qHP0f6U1KhzfyQPSMmOJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f4:3c:b1:82:cd:bd:10:e6:36:0d:2c:b6:d1:27:36:77:c1:
         94:25:ff:e7:16:6f:44:57:af:23:5a:bd:06:ce:a7:19:f2:cc:
         41:2b:b3:46:96:15:88:b2:65:d1:33:44:38:4c:73:05:51:3f:
         ef:0c:7a:ec:bc:8c:ba:85:6f:fe:8d:79:1c:5d:5c:88:f7:0b:
         4e:f4:ad:05:2d:e3:6a:6d:91:89:9a:6b:61:8a:7b:5e:51:f3:
         e7:03:0b:b2:ee:d7:2e:8e:8f:44:fc:a7:b4:a6:53:3e:4a:4f:
         cb:14:99:47:04:a0:5b:6e:81:9c:38:cd:ea:0c:14:f0:0f:f9:
         db:12:ae:34:b4:51:33:a3:2f:2e:73:2d:7c:fd:00:2e:94:9c:
         e7:82:17:c6:71:29:ce:84:f8:47:6b:d2:7e:fb:63:3b:4a:5f:
         c8:3c:35:41:89:da:1b:a0:15:24:3a:b9:90:2f:dd:26:63:6c:
         6d:ce:e7:77:dd:d2:d8:ca:ee:90:83:cc:07:e5:eb:b0:31:68:
         b6:33:f1:91:dc:6b:19:af:77:b4:24:3f:91:9b:83:f0:d8:ce:
         13:af:36:7a:18:ac:6f:76:52:95:cc:0a:9c:5b:aa:09:90:8d:
         7e:12:26:60:5a:d5:a4:15:5f:12:e2:00:9b:91:45:f7:9c:7d:
         e3:2b:92:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:09:16 2026 by rpki-client