Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft
File:                     uhfrfV8E0nFV8gF4bzkPtAimquQ.mft (raw, json)
Hash identifier:          7kWyT1ZhWu5f0JzV6XCgQJYWDLhLEEY3nejt9DoKeFw=
Subject key identifier:   57:53:4A:EE:7D:93:40:D9:C7:05:68:80:A0:25:F0:A2:90:34:4D:51
Authority key identifier: BA:17:EB:7D:5F:04:D2:71:55:F2:01:78:6F:39:0F:B4:08:A6:AA:E4
Certificate issuer:       /CN=ba17eb7d5f04d27155f201786f390fb408a6aae4
Certificate serial:       01A0E99BA1F878D5B57EF42BF18391254F88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft
Manifest number:          02B2
Signing time:             Mon 28 Sep 2026 20:01:25 +0000
Manifest this update:     Mon 28 Sep 2026 20:01:25 +0000
Manifest next update:     Tue 29 Sep 2026 20:01:25 +0000
Files and hashes:         1: AxHAZMrFjIgIbfUGhqo5wkGni1U.roa (hash: LK2ApUo96K2CQCwZ7mds8cZymVzPzAFLVUrbUlc4umA=)
                          2: uhfrfV8E0nFV8gF4bzkPtAimquQ.crl (hash: 6mjWjWf+6GQ7EZ0AHm1uqOafwS4swE2r6Nap9m6mCuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 14:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e9:9b:a1:f8:78:d5:b5:7e:f4:2b:f1:83:91:25:4f:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba17eb7d5f04d27155f201786f390fb408a6aae4
        Validity
            Not Before: Sep 28 20:01:25 2026 GMT
            Not After : Sep 29 20:01:25 2026 GMT
        Subject: CN=57534aee7d9340d9c7056880a025f0a290344d51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c9:e5:79:cd:a5:d9:5f:7e:8f:43:de:dd:af:
                    bc:17:48:97:d7:88:12:61:a5:46:56:47:64:3e:2e:
                    5f:42:db:af:90:16:b0:c7:51:0e:d1:1b:79:32:65:
                    0f:ce:18:09:2c:7c:ce:71:a2:67:23:db:72:6d:fe:
                    31:d3:fa:4e:64:f0:dd:58:84:3e:44:47:35:77:74:
                    9b:47:8e:cd:64:93:cf:28:aa:5a:7c:1a:a5:ad:1b:
                    84:72:f9:ee:fb:1f:80:96:85:97:8e:ec:1f:27:32:
                    b3:73:56:7c:bc:38:16:2d:cb:d1:9d:eb:48:2f:56:
                    1c:d6:a3:c6:20:7a:43:76:17:74:9d:35:a6:6b:7c:
                    f6:8e:48:3d:60:d8:2f:bc:50:c1:73:e1:0a:06:6f:
                    c2:ee:3c:bb:68:30:ca:de:dc:b1:f9:4b:57:85:da:
                    eb:87:1e:e7:76:44:1d:ab:31:39:ec:48:5d:bf:d6:
                    14:f9:99:58:d1:af:ea:38:c4:77:8e:69:47:04:bf:
                    7e:89:24:1b:90:21:61:0c:f9:bc:f5:d7:ca:19:2a:
                    d2:8f:1e:e9:83:5f:f5:48:90:08:c6:d1:0d:b2:94:
                    b0:d8:57:05:93:f4:29:67:71:cc:02:e9:10:00:c2:
                    6f:19:b4:15:01:02:4f:ae:7a:11:ce:eb:dd:eb:a2:
                    59:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:53:4A:EE:7D:93:40:D9:C7:05:68:80:A0:25:F0:A2:90:34:4D:51
            X509v3 Authority Key Identifier:
                keyid:BA:17:EB:7D:5F:04:D2:71:55:F2:01:78:6F:39:0F:B4:08:A6:AA:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:a5:97:d0:e5:07:fc:3b:45:60:b4:53:5c:c6:00:4c:3d:0d:
         52:d1:05:48:bb:6f:e5:e9:7f:7e:aa:2f:77:f3:d2:91:60:11:
         6d:c1:e0:3a:3b:40:af:23:fe:e7:dc:3f:65:7e:2d:97:f5:8c:
         92:2a:85:95:b6:b8:54:35:44:16:eb:f6:61:36:e7:99:a2:5b:
         24:d6:6f:cd:fe:84:59:03:4a:67:1c:c4:1b:d0:0e:b2:d0:28:
         6f:d0:01:fd:e9:15:e9:fd:9c:ab:67:89:11:8d:6b:39:a7:49:
         7c:ab:b1:26:ff:3a:54:53:bf:fe:fa:86:4c:0d:56:39:1d:a5:
         db:84:f5:48:69:c2:c5:5c:f1:80:71:72:52:ca:44:ac:55:4e:
         d3:39:10:55:b0:1f:2f:e3:f5:e9:b5:0d:94:19:b5:61:63:22:
         68:ba:b0:24:e4:24:23:dc:dd:33:12:f6:3a:41:3b:49:99:7f:
         3b:69:e9:85:60:5c:f2:47:d3:b5:53:b2:2c:fc:61:84:3e:d7:
         42:c2:f9:30:ec:46:97:88:b8:66:98:4c:12:07:e1:f4:9a:50:
         d9:4b:2d:69:ad:e7:80:78:de:7a:c7:1f:f1:b2:15:7e:70:06:
         0e:e6:09:b1:4b:d5:c6:fa:ac:70:a2:a9:51:ff:fc:94:50:38:
         41:ab:78:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:29:36 2026 by rpki-client