Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft
File:                     uqp7TAHpKcOJI5gatRyXJ6H58H4.mft (raw, json)
Hash identifier:          mbKl1hG4o7ah3KVE+JN+G4ymFGhXySYFfFoQFPDfyJk=
Subject key identifier:   4E:B9:96:EF:90:76:F2:DB:31:26:7C:49:86:71:B9:8B:C8:B8:E0:9C
Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
Certificate issuer:       /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Certificate serial:       01A1769501B28E7F2BA126872D5C97FA53CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft
Manifest number:          133F
Signing time:             Mon 26 Oct 2026 05:00:39 +0000
Manifest this update:     Mon 26 Oct 2026 05:00:39 +0000
Manifest next update:     Tue 27 Oct 2026 05:00:39 +0000
Files and hashes:         1: 1-E2eDnplntvlwe4dqvPIQjAUIhc.roa (hash: 9/Z1jYPf+fJJ28ARuzFgbWJGXm1CGkGx0/9J9dd55no=)
                          2: DiGtvUzmZAjH_XRU7fEE9dtFAko.roa (hash: VN3eL01e4plHrv0UjJUEXbnazkjQUDK4S/f50F+hnyA=)
                          3: MXOis4gKQU6T3fl9u9emfKn1I0g.roa (hash: J1k882H86FIPdqzqztH19RHHRsts9XhSK+QsDtFdrlA=)
                          4: PP9oA_E391BIuSGTuqgWVwQAMqM.roa (hash: 9n4A9VESg3N8stGG4GCkTD8TQyZX/jvYGa+MvIUmNaE=)
                          5: PxYDGFFeIMnR3R8ylA8SbuIB6xI.roa (hash: B8FamIOBKJ45rwoZ7RLg7M2fC1zz0YHW8ls9Ia37tyM=)
                          6: YbeGTIIokJMHl8QEnhR1xFC_ito.roa (hash: HgRFonCxtpdWKTM6rOV0crS0CJsk7MECWgrxxnYsFJU=)
                          7: jLSzdmpt6mZmgqvhH7NETi0wAYA.roa (hash: txBTBvHgOk8b8SenBZIk3YFAcUyYo3TaX05F0Mt13EA=)
                          8: mLqJvMc3MqTE99dcKgalJ1ySRfQ.roa (hash: a5WjFx/pe+eZo9TTWVHbhlSmGqGor+/PHYnJbWo/eU8=)
                          9: myEKyS0ln_CS39qAu-1GdjmG9R0.roa (hash: aW1PpyHp9Pdui/hT7n4EmATj8R60gaAAQo+Y1BQJBTw=)
                          10: uqp7TAHpKcOJI5gatRyXJ6H58H4.crl (hash: XoKarmI9J0cDkfGzqveHzAGo951mRgWqX4vGx8YW8LA=)
                          11: zXmiAgXk_Ydyr1HYZF7kkg2QTLU.roa (hash: tvsSGehiuAYLuz61AA5ClCzxAIXkzHVKNA25tNTKOdw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:76:95:01:b2:8e:7f:2b:a1:26:87:2d:5c:97:fa:53:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
        Validity
            Not Before: Oct 26 05:00:39 2026 GMT
            Not After : Oct 27 05:00:39 2026 GMT
        Subject: CN=4eb996ef9076f2db31267c498671b98bc8b8e09c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e3:e2:65:f3:5e:aa:37:c3:4c:bd:b8:77:01:
                    8d:ed:bf:55:a5:f8:12:19:72:89:48:fa:29:4b:aa:
                    eb:b2:b9:59:78:34:72:da:1f:18:06:f2:a4:c6:6d:
                    e2:39:ff:f0:40:fe:18:5e:31:f0:7e:f5:87:ed:83:
                    9a:f9:9c:c4:e6:3f:2f:e8:70:12:4c:74:72:e7:40:
                    86:aa:8b:0c:3f:c4:67:8a:30:81:d0:3f:68:7d:16:
                    67:d9:3b:28:fe:3d:34:10:73:28:d6:4a:ac:d7:84:
                    a2:0f:d7:09:1f:a6:d4:5b:99:66:9a:0b:58:96:c0:
                    9f:be:c7:b5:c9:22:86:03:ea:9f:f3:8f:68:4a:e7:
                    da:69:c1:49:cc:4d:ae:c0:f9:dd:50:1d:b4:70:f7:
                    3f:23:9d:e3:59:8e:4a:c2:66:c7:b6:3b:62:1d:11:
                    6b:bf:7c:af:89:3e:02:e2:19:c3:d7:e3:9b:e0:6e:
                    9a:15:71:c0:62:96:a2:d9:b6:e4:a1:a9:79:7c:77:
                    44:dd:42:5e:aa:1a:97:f0:5c:80:82:2c:15:df:6c:
                    8c:1e:28:c7:1c:3e:d6:00:61:75:db:35:d0:8e:bd:
                    10:f0:f3:9f:88:31:36:8d:19:7f:e9:1c:d3:7c:3c:
                    10:d2:89:a0:d6:40:32:f7:c9:cc:ba:6d:67:77:90:
                    d9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B9:96:EF:90:76:F2:DB:31:26:7C:49:86:71:B9:8B:C8:B8:E0:9C
            X509v3 Authority Key Identifier:
                keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:45:23:e0:75:01:c4:3f:4d:c1:fa:59:ab:52:fa:3b:18:13:
         66:1e:e6:36:eb:17:31:e8:fe:25:be:f0:b4:f4:c9:8a:f2:5d:
         af:19:44:0e:87:1f:0b:32:4a:e2:b0:1b:e5:df:cd:3a:8a:e7:
         dd:3e:6c:e9:a9:89:17:57:13:38:db:df:6e:74:f1:c0:9c:98:
         64:b2:aa:6c:d9:7e:0b:cd:d6:ce:17:16:4e:39:69:d4:d8:08:
         c7:ef:68:fa:1e:34:42:68:c6:c1:fc:7d:66:b5:f7:92:c8:9a:
         40:1f:ae:33:82:a4:4d:cc:0b:29:a0:34:9a:d0:87:8f:56:39:
         17:24:bc:5d:80:32:10:93:6f:ba:22:16:af:92:ee:44:82:d3:
         4f:b2:90:7a:d5:f3:74:3b:66:34:9c:7a:28:68:24:8d:f8:24:
         ba:23:96:2d:7c:f5:80:99:76:26:12:66:46:47:94:52:8c:cb:
         cb:f0:31:06:98:c1:98:a6:ab:88:33:9b:38:00:ab:27:83:7c:
         36:10:1b:8b:c5:da:1f:93:58:83:4c:0c:e3:3f:80:50:8d:4d:
         fe:a4:ff:3a:5d:06:ee:79:9b:35:6a:3d:c3:df:80:a4:1b:e2:
         ae:99:f0:f6:12:74:29:de:ce:41:0f:ab:58:93:21:18:f6:b6:
         96:9a:da:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 12:45:26 2026 by rpki-client