Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
File:                     u5tW2NluvLX8-H3i7CtSwZTM-fk.mft (raw, json)
Hash identifier:          HduAxyOcZOBXrX57s/Q4ZDiwZ5IhhVurgMsmABzj1f0=
Subject key identifier:   60:A6:E7:50:1F:75:6B:9F:EF:C4:4F:01:A5:87:9F:4C:B1:D5:B8:6B
Authority key identifier: BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
Certificate issuer:       /CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Certificate serial:       01A08AFAF38F2A0FBD608015188F7CD2B558
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
Manifest number:          1A5E
Signing time:             Thu 10 Sep 2026 11:01:37 +0000
Manifest this update:     Thu 10 Sep 2026 11:01:37 +0000
Manifest next update:     Fri 11 Sep 2026 11:01:37 +0000
Files and hashes:         1: 9S-B0D9lnDF21-usrbJC4P6zxPM.roa (hash: ZnhdVeDDKZrqSSXA3q/cojKHxXaNDDWFxkadx20lHYg=)
                          2: GvsNXqyPm3O1muA1KhzUZIC7rvw.roa (hash: GH+TiXaBiyInStL5LqF861L8DM/DPBqkW/47ALTzmZE=)
                          3: OSKY092K7Rd69JqqbL4WMk5Xd4U.roa (hash: NVRC2Db3R3ftV/bNbwEakNLpneFf6ZR1jTLt2dsBXng=)
                          4: SztDQUTdgK2SUjFi9wkDzBiBMLc.roa (hash: a/GE3Z5i97PSSD8tZRN4CE8oTOTKNEOJuyhCdmF0QKE=)
                          5: u5tW2NluvLX8-H3i7CtSwZTM-fk.crl (hash: /HKiVbBSlivsO5eWUm60Qljw48j6NQu9d9Qb12+CQIo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 11:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:fa:f3:8f:2a:0f:bd:60:80:15:18:8f:7c:d2:b5:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
        Validity
            Not Before: Sep 10 11:01:37 2026 GMT
            Not After : Sep 11 11:01:37 2026 GMT
        Subject: CN=60a6e7501f756b9fefc44f01a5879f4cb1d5b86b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c6:4c:14:40:22:86:14:75:13:15:14:5a:b5:
                    fc:16:75:22:c0:7e:f6:be:ea:62:e6:d0:4c:1f:6b:
                    c0:af:ee:7c:3d:8b:49:a5:46:37:90:82:44:9c:c5:
                    19:61:05:7b:5a:f8:fd:b8:72:a7:34:97:7a:ff:d0:
                    7c:63:4d:18:ac:3e:fa:4d:59:a2:9e:2d:62:92:d2:
                    22:00:32:a1:0f:60:4b:2e:43:bb:ef:20:57:42:25:
                    dc:f0:fc:58:ed:be:1f:7e:6f:1b:b1:37:ad:d5:df:
                    3d:41:f7:f7:88:14:7a:0c:cb:cb:00:ed:7b:7b:4a:
                    1f:c9:01:df:a3:4d:e2:6b:a7:04:31:71:cc:be:c3:
                    fe:8e:82:29:96:7c:7a:31:06:7c:87:cb:9e:51:d3:
                    a2:0e:a5:ad:17:62:8b:59:24:84:9f:57:25:3e:5d:
                    11:64:6a:3b:c2:1e:8b:2d:37:14:32:3d:76:39:bf:
                    04:63:77:64:01:51:70:54:d3:d4:2c:7d:4d:1d:53:
                    c5:a2:d2:c7:a9:72:7a:1a:63:f2:00:cd:6f:fd:82:
                    df:ea:31:df:09:0a:85:05:d9:3d:6d:03:da:4f:20:
                    e5:c1:73:db:97:57:8b:1d:32:24:49:f1:54:f5:46:
                    b9:7f:41:75:5e:af:f9:7f:4f:ce:8d:b8:37:ec:a0:
                    6a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A6:E7:50:1F:75:6B:9F:EF:C4:4F:01:A5:87:9F:4C:B1:D5:B8:6B
            X509v3 Authority Key Identifier:
                keyid:BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:2d:42:d1:54:d7:ec:cc:b8:38:f1:66:e4:e0:68:1e:48:a2:
         49:48:e3:4c:d4:8a:4a:64:de:cd:e6:00:5e:3b:a7:f8:8f:fa:
         ed:cd:57:97:cd:3f:02:b4:4c:1e:41:9a:a7:ff:5a:b4:7c:0d:
         64:b8:72:97:23:2b:81:80:bd:22:e3:cd:a7:62:38:ca:9e:9c:
         b0:c0:a6:d7:8e:d5:58:4d:1a:b5:4f:bc:4f:d7:85:0c:f9:c5:
         02:85:49:d4:e8:c3:61:b6:f7:ea:d6:cf:65:42:8d:25:5b:a8:
         d7:d0:f3:58:b9:81:fc:df:5a:38:f8:0b:21:d6:09:3b:0c:65:
         df:1a:4d:46:7f:04:80:0e:95:c9:82:86:3c:54:55:38:14:2e:
         e8:61:11:c7:b1:a2:0d:c0:b5:c6:a6:64:a1:b3:c1:b1:5c:37:
         67:c0:c7:c8:18:9d:48:fd:a4:a4:57:8f:b4:99:d3:a2:a0:90:
         26:61:0d:c2:17:6d:b0:5a:1a:3a:c5:e1:dc:52:fc:6f:90:c3:
         37:57:46:17:e2:de:b7:08:0d:2a:f9:fe:34:c5:f0:8b:34:42:
         32:be:64:7f:74:e1:06:d0:ed:e7:f3:bc:a6:16:c3:bd:0b:ab:
         17:5c:82:41:74:90:5b:56:0f:d7:59:95:47:71:00:fd:30:7d:
         94:91:34:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCK+vOPKg+9YIAVGI980rVYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiOWI1NmQ4ZDk2ZWJjYjVmY2Y4N2RlMmVjMmI1MmMxOTRj
Y2Y5ZjkwHhcNMjYwOTEwMTEwMTM3WhcNMjYwOTExMTEwMTM3WjAzMTEwLwYDVQQD
Eyg2MGE2ZTc1MDFmNzU2YjlmZWZjNDRmMDFhNTg3OWY0Y2IxZDViODZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMZMFEAihhR1ExUUWrX8FnUiwH72
vupi5tBMH2vAr+58PYtJpUY3kIJEnMUZYQV7Wvj9uHKnNJd6/9B8Y00YrD76TVmi
ni1iktIiADKhD2BLLkO77yBXQiXc8PxY7b4ffm8bsTet1d89Qff3iBR6DMvLAO17
e0ofyQHfo03ia6cEMXHMvsP+joIplnx6MQZ8h8ueUdOiDqWtF2KLWSSEn1clPl0R
ZGo7wh6LLTcUMj12Ob8EY3dkAVFwVNPULH1NHVPFotLHqXJ6GmPyAM1v/YLf6jHf
CQqFBdk9bQPaTyDlwXPbl1eLHTIkSfFU9Ua5f0F1Xq/5f0/Ojbg37KBqWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCm51AfdWuf78RPAaWHn0yx1bhrMB8GA1UdIwQY
MBaAFLubVtjZbry1/Ph94uwrUsGUzPn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTV0VzJObHV2TFg4LUgzaTdDdFN3WlRNLWZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84ZjM5NDItMTdmNy00OTNjLWJjNmIt
NGY0ZmU4MDNiMDE1LzEvdTV0VzJObHV2TFg4LUgzaTdDdFN3WlRNLWZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS84ZjM5NDItMTdmNy00OTNjLWJjNmItNGY0ZmU4MDNiMDE1
LzEvdTV0VzJObHV2TFg4LUgzaTdDdFN3WlRNLWZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhS1C0VTX
7My4OPFm5OBoHkiiSUjjTNSKSmTezeYAXjun+I/67c1Xl80/ArRMHkGap/9atHwN
ZLhylyMrgYC9IuPNp2I4yp6csMCm147VWE0atU+8T9eFDPnFAoVJ1OjDYbb36tbP
ZUKNJVuo19DzWLmB/N9aOPgLIdYJOwxl3xpNRn8EgA6VyYKGPFRVOBQu6GERx7Gi
DcC1xqZkobPBsVw3Z8DHyBidSP2kpFePtJnToqCQJmENwhdtsFoaOsXh3FL8b5DD
N1dGF+LetwgNKvn+NMXwizRCMr5kf3ThBtDt5/O8phbDvQurF1yCQXSQW1YP11mV
R3EA/TB9lJE08g==
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:54:11 2026 by rpki-client