Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
File:                     uqDyWO70sr9LuqhDDB5YyowYjqc.mft (raw, json)
Hash identifier:          2CDUFynzNni7ak3ey48wcZHrNyeY9MEIlo3bP2HWJ3Q=
Subject key identifier:   B3:1F:2B:AF:4B:97:2F:2B:12:69:EA:52:5C:9B:02:89:69:CD:A0:39
Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
Certificate issuer:       /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Certificate serial:       01A176CBC4F9B77C5A0B0CD930BA50809D48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
Manifest number:          0609
Signing time:             Mon 26 Oct 2026 06:00:27 +0000
Manifest this update:     Mon 26 Oct 2026 06:00:27 +0000
Manifest next update:     Tue 27 Oct 2026 06:00:27 +0000
Files and hashes:         1: 4NtXU3o0i9nTQ0aPnN0oHNUECOE.roa (hash: 3YYvrIPQh3ZlkWIDJWGzPef2omYQb9s0JIFyF3ZtUx0=)
                          2: 6WDkbHlgSXxNJbB0drss0reruS8.roa (hash: oFDNB9590aZJb3RqzjukoKFlQp5/LXVYXoZGCKhDyHQ=)
                          3: 7AoLhlDMcoVRdjcLyxcQf-3OllE.roa (hash: Q4dXESu/ezy6t9zHxB9C770019wLJbmi79CJ9JqUVP0=)
                          4: CHm4uxJXlMUd0r5QClzcF966Ijw.roa (hash: s8FUQD2MuDH7rbiip50DyRQrMult5B8vV44+OSbORFQ=)
                          5: Ke-GAW7E6yplbOZiIO0l5zT0Fic.roa (hash: soIv2LC8f5IdezvuoAAVJw8fZgLBnWGjy9O5qvDQ/+M=)
                          6: KuCSaCEOTSfMj8uwOknmWfQSUeo.roa (hash: 3+MmnXuvI/JOfNZCrj8AZFjZyZJa2SF9JSTpsOfpZ38=)
                          7: MsSKYSaiVUmdk4uw5DxmwFovsBo.roa (hash: gN7/7u1mFNWenCLCWkwGkblcTcu1MaRBKEfwH1Z/T9Q=)
                          8: PjcfmGvCF3Jo8bSPGEurQgZgvHI.roa (hash: nN0nspQjOZYATjn1JnM2nPvB9KoYFsNTbycrrE1wEhQ=)
                          9: RwhCBNFrzcUzyEWsFVoiT8IdNVo.roa (hash: r7grjzieZGND+TLUxKczhr2oesywsPmZIS/b0+pyM6k=)
                          10: SnhR0ywSazNW_LooQ-7w3mnox3s.roa (hash: sf6HWA102jlf5D1wHL5U+yeNTKyY8TOBcCejfejACe0=)
                          11: dqsYbbjCxnAptr8zjkd-iezgLz4.roa (hash: 1Yhk6OnIeIea3uiPYWd+rgtl98a+2OVsjXwz+GeFDuw=)
                          12: uqDyWO70sr9LuqhDDB5YyowYjqc.crl (hash: cC6pfqBCDMNQPQRw2qwEyqshhI0VrH8xs8mpFre9An4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 23:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:76:cb:c4:f9:b7:7c:5a:0b:0c:d9:30:ba:50:80:9d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
        Validity
            Not Before: Oct 26 06:00:27 2026 GMT
            Not After : Oct 27 06:00:27 2026 GMT
        Subject: CN=b31f2baf4b972f2b1269ea525c9b028969cda039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:65:91:e3:aa:b8:3e:14:c1:65:4f:29:95:79:
                    67:68:75:cd:78:4f:77:58:da:5a:d4:23:74:bc:00:
                    fe:13:f7:f1:85:f9:a7:e7:7c:ac:3b:a0:64:82:14:
                    fb:6c:09:a1:88:95:39:24:f6:2c:91:bd:ca:4f:78:
                    44:18:b6:d1:0c:19:09:6d:43:3e:38:e1:65:56:f7:
                    17:d5:5e:e5:b2:66:ed:71:45:fc:e8:5b:1b:c5:68:
                    34:6e:c9:ad:15:25:25:d5:ab:cf:d8:01:c5:1f:7b:
                    80:ce:f6:73:2c:3b:a8:38:c2:7c:b6:ae:17:ac:6c:
                    5b:1f:5c:38:f0:12:00:af:b8:81:be:e2:28:69:0c:
                    33:2d:0c:ab:7b:f5:74:69:70:d4:c9:8f:4a:b6:e0:
                    70:06:a0:f0:59:f2:ed:50:5b:73:26:61:32:c1:3f:
                    18:aa:d3:02:c8:6d:75:2e:3b:3a:a0:eb:4e:52:a8:
                    8e:64:10:c8:0b:e9:08:b1:8f:59:71:21:e2:7c:b1:
                    35:fa:9c:92:75:37:90:14:99:7a:0e:c5:ea:29:8e:
                    08:37:26:84:04:1c:ab:de:44:e5:d3:93:28:fc:e1:
                    10:7b:ca:d3:46:aa:13:ad:34:63:00:52:2a:fa:eb:
                    af:08:3b:21:7e:fb:e3:ad:eb:b9:74:ed:96:81:8b:
                    5d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:1F:2B:AF:4B:97:2F:2B:12:69:EA:52:5C:9B:02:89:69:CD:A0:39
            X509v3 Authority Key Identifier:
                keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:49:90:e1:fd:f7:8f:52:6c:cb:c2:96:2f:f1:58:77:12:43:
         c4:b5:1c:f3:f9:9d:ca:64:45:1f:96:0d:2a:5d:58:19:ae:40:
         f0:32:9b:96:c9:d7:58:d5:45:69:ee:1d:7b:a5:5b:fb:5b:9c:
         0e:a4:6c:b9:83:b5:bd:51:6a:04:dd:89:40:da:28:49:16:f5:
         ee:30:5c:e9:b7:c5:02:39:d7:5b:c1:c3:7b:dc:c2:2e:c3:6c:
         66:47:93:2f:c1:f8:86:6b:50:d0:cf:1d:08:e0:3e:23:2f:89:
         c0:1d:a5:75:0e:de:68:f0:88:1f:17:5c:cb:0d:60:bb:ec:86:
         83:e1:82:db:41:80:9b:cb:52:f6:bf:48:bb:cf:11:9a:5b:33:
         6b:a9:e4:f3:12:8f:47:1a:0f:55:b2:e4:fe:d8:a2:93:b1:38:
         b8:49:20:53:59:0a:62:9a:12:6d:23:68:23:da:ef:bd:7e:f5:
         77:1b:04:1b:03:b1:b2:19:bf:e2:6e:3d:69:a5:f4:43:28:2d:
         82:31:9e:3f:dd:87:dc:c7:f1:47:c8:48:db:a0:2a:21:c5:37:
         ae:5b:d9:06:05:13:ba:f4:e9:04:bd:fa:29:c3:9c:ce:bf:e5:
         68:27:b2:88:b3:9d:78:99:8e:d3:6f:6b:4f:fc:a6:04:c6:62:
         68:48:cc:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 10:55:43 2026 by rpki-client