Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft
File:                     UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft (raw, json)
Hash identifier:          tYdyO+GamyLKGxpktPGUZptJuL6Mrmye/c8H3oTgKOM=
Subject key identifier:   36:DD:44:44:1C:A0:9D:5D:D3:55:EE:1A:A3:34:D4:6B:2C:2F:A0:9B
Authority key identifier: 50:53:C7:DA:9C:8F:FF:EA:5C:ED:97:A7:99:02:00:D4:BE:EE:41:77
Certificate issuer:       /CN=5053c7da9c8fffea5ced97a7990200d4beee4177
Certificate serial:       01A0DC8545079002A85A20CCB0F023F3D33C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFPH2pyP_-pc7ZenmQIA1L7uQXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft
Manifest number:          09BE
Signing time:             Sat 26 Sep 2026 07:01:56 +0000
Manifest this update:     Sat 26 Sep 2026 07:01:56 +0000
Manifest next update:     Sun 27 Sep 2026 07:01:56 +0000
Files and hashes:         1: NRjE2ub-qyO1bTuX03Zvfc6I9B4.roa (hash: T1iZTA7aq3lUr9C6VWAbrTX5NRDe5+H29lpTIjZMGkc=)
                          2: UFPH2pyP_-pc7ZenmQIA1L7uQXc.crl (hash: huDskuu3nljNT7iTQ9eW84AIICTkLZnYI4ZAF/j4oy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UFPH2pyP_-pc7ZenmQIA1L7uQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:85:45:07:90:02:a8:5a:20:cc:b0:f0:23:f3:d3:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5053c7da9c8fffea5ced97a7990200d4beee4177
        Validity
            Not Before: Sep 26 07:01:56 2026 GMT
            Not After : Sep 27 07:01:56 2026 GMT
        Subject: CN=36dd44441ca09d5dd355ee1aa334d46b2c2fa09b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:27:2f:45:ca:db:34:8d:07:c7:79:d7:4e:de:
                    6b:99:65:7f:be:c8:13:33:ad:9b:2c:75:d7:02:bf:
                    3b:8b:37:1b:06:36:bb:1b:b1:ec:7f:7a:2b:26:5c:
                    8b:50:8f:d9:f7:76:bd:d5:41:00:23:04:c3:9e:9a:
                    67:6f:6e:d7:40:64:b2:5f:ed:8a:8e:2c:ea:c0:67:
                    5a:a8:94:f2:76:b0:77:79:16:bc:62:e3:aa:19:99:
                    0b:7e:ae:6a:ca:36:af:49:eb:62:01:21:bd:31:08:
                    90:08:5c:78:04:d4:de:11:9b:9f:5c:0c:8d:18:7b:
                    af:9e:1d:a4:86:f0:51:35:6b:65:59:d7:73:55:d8:
                    3c:3f:64:3c:ea:9d:0a:23:ba:0a:81:4e:02:46:0f:
                    0e:0f:43:03:e3:00:ae:6b:c2:4f:cb:97:23:08:98:
                    b7:fc:d2:72:eb:92:6b:8c:b0:63:3c:5b:53:e3:58:
                    e1:a9:cf:80:7a:7e:46:77:b6:c2:66:7b:0c:59:ab:
                    62:b3:9d:91:c0:bb:e9:af:de:88:55:b7:7e:65:d8:
                    39:27:39:a4:6b:35:76:d9:10:c8:db:fa:ca:03:6b:
                    7e:99:a9:a2:bf:fa:7e:b0:76:f5:ac:0f:f2:3f:94:
                    4a:b4:a3:3e:9f:34:f7:a4:76:e2:68:49:68:e1:22:
                    0f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:DD:44:44:1C:A0:9D:5D:D3:55:EE:1A:A3:34:D4:6B:2C:2F:A0:9B
            X509v3 Authority Key Identifier:
                keyid:50:53:C7:DA:9C:8F:FF:EA:5C:ED:97:A7:99:02:00:D4:BE:EE:41:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFPH2pyP_-pc7ZenmQIA1L7uQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:e0:54:1d:dc:6e:8b:c1:0a:81:77:1c:2e:0b:90:7b:64:04:
         fe:5a:07:25:92:e4:59:77:32:97:3b:cd:f6:7b:15:23:40:1b:
         99:93:b0:df:07:da:f3:25:6f:5a:b9:55:5e:a2:71:fa:f0:d8:
         b6:14:f1:46:df:e3:c1:77:7c:88:7b:ce:15:b4:74:e8:44:ec:
         56:0c:2c:5b:35:a0:26:72:83:dd:c6:a7:af:5d:17:d2:1a:dd:
         eb:62:f8:57:a0:e7:70:6f:62:7a:33:8e:99:28:5c:64:42:d3:
         12:ce:c9:1f:c4:3a:ec:a8:95:a4:f1:8a:2d:b1:9d:30:d0:12:
         ba:4e:c1:10:36:9d:e6:cf:a3:49:d9:25:cf:ea:45:8f:25:96:
         84:58:45:76:6b:ab:50:71:3c:9a:19:95:74:ec:2f:b3:36:c7:
         14:2f:2e:c0:17:96:cf:9b:40:9b:cb:b9:8a:40:10:00:ca:64:
         e4:7e:d3:ac:25:b5:62:5b:3b:14:79:26:c9:59:f2:07:55:78:
         d9:a2:79:fa:c8:3d:d2:76:12:24:98:7e:01:13:b9:a5:da:01:
         1c:6c:dd:f0:49:70:8c:5e:79:ac:1a:c0:f6:fa:46:c2:3f:9f:
         ad:91:c3:a1:fd:a6:f2:ad:4f:89:bb:2a:52:a7:76:d5:2e:a9:
         d8:35:82:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:16:17 2026 by rpki-client