Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft
File:                     u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft (raw, json)
Hash identifier:          iuFsYirvrSJ8g3YeoIhE1LZYXg+9jCSOUmZFXp98ZrA=
Subject key identifier:   FC:FB:67:7A:EE:AD:6F:40:17:E4:39:14:64:EF:7A:A6:54:C7:87:E9
Authority key identifier: BB:FB:EE:4A:96:8D:F0:FA:C4:75:1B:4F:49:02:7F:A0:95:C6:52:77
Certificate issuer:       /CN=bbfbee4a968df0fac4751b4f49027fa095c65277
Certificate serial:       01A0EA09EAB4DFBB8964C2E0BCAAB20C9390
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft
Manifest number:          1A7F
Signing time:             Mon 28 Sep 2026 22:01:53 +0000
Manifest this update:     Mon 28 Sep 2026 22:01:53 +0000
Manifest next update:     Tue 29 Sep 2026 22:01:53 +0000
Files and hashes:         1: lBcSFM8OK1uzZB50zlLDxjTK2xU.roa (hash: 8pSOr2u3lgeMMUD0PcPdrmLPvUU4Aqiq7ol79EVGlVg=)
                          2: u_vuSpaN8PrEdRtPSQJ_oJXGUnc.crl (hash: Zqz7ZmxsivUY9gq/wfbjsdr+YfLuu50JTMW48r1xq5o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 22:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ea:09:ea:b4:df:bb:89:64:c2:e0:bc:aa:b2:0c:93:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbfbee4a968df0fac4751b4f49027fa095c65277
        Validity
            Not Before: Sep 28 22:01:53 2026 GMT
            Not After : Sep 29 22:01:53 2026 GMT
        Subject: CN=fcfb677aeead6f4017e4391464ef7aa654c787e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ed:ed:98:42:68:d6:dc:86:4b:b4:92:11:77:
                    f2:a3:bf:77:b5:40:b8:76:d1:a9:82:35:30:b2:71:
                    2f:71:ba:b4:3b:88:ec:f7:10:2c:2d:cd:6a:53:34:
                    43:1b:3a:fd:74:aa:ee:c3:cd:4d:a9:8f:28:c3:bb:
                    a5:d5:fd:af:b0:be:ce:8a:03:43:87:fb:36:03:34:
                    86:b1:34:fa:a9:65:e1:d3:93:98:2a:e6:c3:d4:c3:
                    d1:42:9b:80:d1:57:ef:49:d6:c6:23:0c:cb:a5:46:
                    e1:18:c1:0c:2a:b8:1b:8a:02:d3:75:03:0a:61:5e:
                    d6:0b:74:0f:76:53:db:f1:89:40:19:e9:92:75:c1:
                    66:60:38:df:29:29:6c:b2:53:9c:65:b6:e1:b4:07:
                    31:64:6d:42:46:0f:17:42:70:c3:8f:1b:9b:eb:09:
                    4d:c6:68:56:0b:9d:4f:1d:12:5e:30:8e:f9:f0:eb:
                    a3:9e:38:98:bf:cf:51:a7:38:67:e5:02:f8:ae:4d:
                    cc:93:d9:f6:d3:ab:5d:ff:28:9a:24:37:19:d0:e4:
                    aa:ff:25:78:fb:a4:e0:50:ce:8b:36:dc:ee:0d:c6:
                    37:05:cd:1b:48:e7:fd:af:fc:8e:b9:fe:a1:fc:63:
                    70:0f:7c:4a:e0:56:b6:e5:18:82:00:39:df:d2:ba:
                    08:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:FB:67:7A:EE:AD:6F:40:17:E4:39:14:64:EF:7A:A6:54:C7:87:E9
            X509v3 Authority Key Identifier:
                keyid:BB:FB:EE:4A:96:8D:F0:FA:C4:75:1B:4F:49:02:7F:A0:95:C6:52:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:39:22:7b:0f:41:17:21:f1:b3:89:f6:93:c0:87:63:3e:58:
         5d:af:ae:24:cb:91:9e:e3:ad:2f:23:52:23:be:ec:8a:2d:6d:
         c2:0c:cf:82:58:ca:4d:92:32:8c:77:21:cb:7e:2c:29:9e:f3:
         79:58:46:5d:4b:f1:54:db:79:0a:04:7e:3b:09:12:1b:8c:8b:
         77:60:8d:93:f2:06:3e:06:a4:d7:5d:ec:9d:18:5a:0d:29:21:
         35:02:73:36:d6:0e:4f:a8:9c:b3:d6:84:a1:6f:7c:6f:85:5a:
         2b:53:ff:c2:a6:2a:0b:87:25:88:9a:a7:8c:55:f1:0f:ec:4f:
         9b:1e:85:57:97:48:72:f4:fb:a0:da:43:4c:33:8f:b1:d4:8b:
         07:cf:3a:4c:4c:d5:ee:3f:70:25:c0:67:09:d3:c8:15:41:a8:
         01:89:fa:08:cc:3b:f6:04:d3:a5:5d:69:f1:6d:80:8f:45:33:
         ad:ce:e2:f5:fc:f4:bc:21:33:08:50:72:dd:2b:c7:57:23:62:
         f7:0a:9f:65:ed:89:f4:a5:99:b5:52:e2:e5:d3:01:5f:55:13:
         01:97:0d:92:c7:70:92:18:24:c7:d5:87:11:e1:d7:36:c6:3f:
         98:00:7e:8e:c8:88:b0:48:0b:f4:7e:b6:51:51:e3:72:55:90:
         dc:fa:54:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 07:21:21 2026 by rpki-client