Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
File:                     uNWz03nSEWLitSLEOAH7lgOYgkU.mft (raw, json)
Hash identifier:          eTDloRygSckacsLdE3OHNxRA6jJUa8UrOXoIUTOh0V0=
Subject key identifier:   27:61:13:FF:0D:BC:D7:73:6E:1E:1B:01:EE:4D:16:9A:89:10:D0:F9
Authority key identifier: B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45
Certificate issuer:       /CN=b8d5b3d379d21162e2b522c43801fb9603988245
Certificate serial:       01A0C331F35D2EA228DE469A681030BA20DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
Manifest number:          119B
Signing time:             Mon 21 Sep 2026 09:00:25 +0000
Manifest this update:     Mon 21 Sep 2026 09:00:25 +0000
Manifest next update:     Tue 22 Sep 2026 09:00:25 +0000
Files and hashes:         1: 1-f_gAb-UQuyps_IPI3M8vQhRtGo.roa (hash: NsL25xCV1UtSE0/W9VwZvUIiaucE1NUxNcTSiDnaYao=)
                          2: ditshtsYxKYvOT3dCWLRDUMEGJ0.roa (hash: o6hcseRZVR0gI7jc0jlgzutuSsEvFXNX+MVW1GVHnBQ=)
                          3: eS8NOcR5VsM5X-FoIr-qZi-nfSQ.roa (hash: oTJIYUc5ybeC7DTGSDxwOuEroX+3xhqZe6zX/QEBvRI=)
                          4: uNWz03nSEWLitSLEOAH7lgOYgkU.crl (hash: bUwZcYtPHWwHZMbsJ7w+NaNudowSHUGsgb/4dielQh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 09:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:31:f3:5d:2e:a2:28:de:46:9a:68:10:30:ba:20:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8d5b3d379d21162e2b522c43801fb9603988245
        Validity
            Not Before: Sep 21 09:00:25 2026 GMT
            Not After : Sep 22 09:00:25 2026 GMT
        Subject: CN=276113ff0dbcd7736e1e1b01ee4d169a8910d0f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c6:f2:08:95:e7:c7:fe:9c:ae:07:97:31:55:
                    5d:d8:42:b5:28:d7:e7:92:9e:93:db:8d:06:59:31:
                    4d:27:20:b7:4a:06:2a:fd:78:30:74:1e:57:e5:6f:
                    0a:d1:aa:cd:0e:05:9a:f0:91:a0:b4:e9:e6:e0:7c:
                    32:41:cd:75:7e:f1:75:fa:05:71:4d:04:d1:c3:76:
                    f2:ec:9d:d4:32:7d:07:2c:74:cf:3b:76:7d:70:f3:
                    7b:85:bc:0f:7d:4a:3c:30:4f:ce:a9:26:bb:d2:f3:
                    16:74:d2:10:8e:5a:8d:e6:7a:df:62:2d:6f:8d:77:
                    d8:4d:7a:19:fc:10:25:f6:64:05:85:16:fa:aa:da:
                    3a:23:9b:bb:46:77:af:2c:95:07:b7:fd:94:6f:dd:
                    80:2d:88:96:8e:32:e4:da:74:65:54:09:fd:cf:57:
                    eb:e9:9a:22:0b:97:a0:9d:03:56:d7:d9:1b:b7:c9:
                    d9:25:1b:e1:b7:fe:db:b6:d2:40:b8:aa:98:99:37:
                    31:c3:dd:11:bd:7a:fe:87:50:8d:d3:e8:9d:d6:a7:
                    c1:18:bb:74:cc:04:e5:94:18:72:27:8a:11:70:75:
                    41:ab:90:06:2e:a4:66:a9:a6:cc:49:c8:ba:08:97:
                    e0:c4:cb:3c:c9:02:9d:e1:f0:50:63:29:61:4c:18:
                    23:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:61:13:FF:0D:BC:D7:73:6E:1E:1B:01:EE:4D:16:9A:89:10:D0:F9
            X509v3 Authority Key Identifier:
                keyid:B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:dc:86:cb:75:e4:27:f5:f6:3a:ff:0e:17:8e:23:57:bc:d6:
         49:bd:88:7b:4a:f9:54:0f:53:71:26:e2:71:05:2b:da:bb:3b:
         4b:f1:fb:60:59:78:e2:c2:3b:5c:ee:91:ca:34:c1:83:4f:a2:
         fb:82:b3:a8:b3:b0:c3:39:f3:ee:7d:a9:e2:7b:70:31:42:8a:
         03:fd:83:0b:27:74:f3:98:16:20:e2:f5:4e:0d:e2:57:3f:7a:
         62:96:cc:b0:66:f2:fb:b7:3d:06:1e:30:ef:f5:be:f1:04:2b:
         48:b1:8e:0a:9c:2c:ac:e9:f9:11:8c:fa:3f:f8:57:78:74:8e:
         5f:33:e0:ea:34:e2:ee:c4:e4:d3:ea:34:ec:17:24:bd:91:92:
         0f:c5:5b:bf:88:45:cb:9e:68:23:61:ae:f4:6c:46:14:4f:bc:
         ca:ca:74:dd:26:08:30:05:b3:c4:d7:9e:82:44:6f:48:ce:3e:
         bd:84:5f:8f:16:95:00:b9:6c:8a:07:c6:14:e1:a1:52:c5:8d:
         ad:c2:9a:02:88:11:ab:df:bd:21:c7:86:ec:99:3c:c9:b1:1f:
         cc:18:2f:7d:cf:68:cf:ea:7f:31:07:56:4f:d8:1f:40:10:25:
         f7:b2:0f:67:da:b1:67:d8:e9:76:8a:16:8d:12:96:8a:0f:c8:
         2c:a1:7e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:10:22 2026 by rpki-client