Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
File:                     uC57gGjErprkykw6ayCWGZp0H_I.mft (raw, json)
Hash identifier:          3Ua58BTR37YpVLiXrM9k5wb0/fYveTsHGgJUu6xLCrY=
Subject key identifier:   4F:22:64:9D:99:CD:F0:15:2A:41:41:F3:92:5D:53:FF:C5:9C:6E:D7
Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
Certificate issuer:       /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Certificate serial:       01A178831FAA7C151D12999561E8ADD5EFA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
Manifest number:          175E
Signing time:             Mon 26 Oct 2026 14:00:21 +0000
Manifest this update:     Mon 26 Oct 2026 14:00:21 +0000
Manifest next update:     Tue 27 Oct 2026 14:00:21 +0000
Files and hashes:         1: D9vGSctTQ6G39-Tj1KvzWEev7A0.roa (hash: dCtLdzE8AAyiXqvWxFMu+nXlWgdt/7ZcgVwWdiQ4TE4=)
                          2: J85fjuSQxz3wg1fx9HApSpky-cc.roa (hash: UxFrHM/u1QxNZlVa/F5dPFto/GBnUH2xgwkXvxIONS8=)
                          3: JSRjHuE9Dlxbd6kNUCmCyuTjzi8.roa (hash: zf3sZG8UyEv9zaK8C2m/Vb5bOTa/zuVQAu3HlY+cXHI=)
                          4: PGDw99LFu8cUJWnydQ7BWcOhXTI.roa (hash: x69/sh35YI+yTa5z+lbFr8Vns/76h1dYMvcCscIlmMQ=)
                          5: uC57gGjErprkykw6ayCWGZp0H_I.crl (hash: mRXpbfsuY+M+eF6cOL6d5D4Qon0dvE/H320AZG1fGZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:78:83:1f:aa:7c:15:1d:12:99:95:61:e8:ad:d5:ef:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
        Validity
            Not Before: Oct 26 14:00:21 2026 GMT
            Not After : Oct 27 14:00:21 2026 GMT
        Subject: CN=4f22649d99cdf0152a4141f3925d53ffc59c6ed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:85:8d:8f:5f:1f:37:9b:0e:83:fb:8e:ea:38:
                    cb:2c:03:36:5f:1d:be:b5:d1:83:42:34:5f:5e:1a:
                    0c:fb:5c:2e:b4:ff:15:d3:e0:12:a2:a8:d2:09:9b:
                    b2:4a:2a:92:a9:c1:7f:b6:45:2a:ee:8a:a2:f7:bd:
                    85:69:17:0d:63:3c:35:13:3f:42:1d:b0:98:75:4d:
                    90:3a:88:b4:f1:e4:b1:84:55:a3:e3:b7:f2:62:bd:
                    6c:57:db:40:19:36:f6:66:ea:26:75:f8:f6:3f:62:
                    3b:a1:c7:ab:ee:4c:bf:42:11:aa:76:f7:5f:1b:94:
                    40:78:7c:30:28:41:00:ae:32:ff:e2:30:93:97:b5:
                    32:03:94:73:a7:36:4a:5c:9f:83:37:b2:af:72:8b:
                    1f:68:45:e8:34:6e:88:09:6a:be:77:4f:02:ff:31:
                    f2:de:0b:27:a5:41:82:84:d1:3f:65:b1:0b:e3:f9:
                    07:90:b2:13:2e:74:68:7e:e3:d2:01:4c:df:2e:0e:
                    87:81:87:01:20:57:c8:68:ab:b7:a8:bc:dd:5d:47:
                    7d:bd:e4:22:cc:2c:b1:94:28:86:f8:ba:0d:b1:b6:
                    93:17:84:4e:d0:ff:37:5b:3e:cf:ac:77:c7:29:a9:
                    cb:e7:41:02:a7:6a:db:4f:5f:20:26:90:3c:ae:88:
                    ab:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:22:64:9D:99:CD:F0:15:2A:41:41:F3:92:5D:53:FF:C5:9C:6E:D7
            X509v3 Authority Key Identifier:
                keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:8d:b1:98:9f:e0:0e:cf:f0:ba:16:9d:92:35:6e:a6:4f:ca:
         b3:85:fa:db:5a:25:37:3f:42:43:af:8e:fe:00:9b:3b:e8:98:
         10:55:88:1d:f8:11:b4:ee:6e:76:c0:9e:49:69:ad:f5:99:7f:
         2c:8b:99:1b:7a:9a:4d:99:c1:80:a5:72:8c:7f:35:f4:a2:6c:
         9a:5e:8a:79:45:9d:a2:3c:50:cb:25:87:39:f6:af:0a:b3:bf:
         0a:a0:70:0f:0a:9f:f7:47:4d:6c:0d:26:6f:60:ab:63:d9:0b:
         e6:7b:1f:42:a5:be:bb:89:84:ce:3a:5c:ff:cc:e2:94:b4:30:
         a7:0c:27:ad:b1:86:f1:f7:eb:88:e3:07:7a:09:39:9b:04:52:
         b8:95:22:9e:dd:17:b8:04:b0:eb:5f:ef:b7:c3:2d:b5:27:86:
         ba:e6:7c:48:1b:e0:64:bc:ee:69:fc:ac:04:99:91:eb:10:a1:
         8a:79:fd:2d:64:b5:b1:6a:3c:43:81:50:fe:28:a8:79:87:6d:
         6c:dc:52:70:c5:99:98:20:c5:ba:2d:31:2e:d6:26:da:21:56:
         32:52:14:a8:93:a5:da:f4:23:4f:a9:1a:99:23:f3:11:22:28:
         a9:fa:07:a6:ee:48:3d:50:15:73:79:0b:86:9b:b5:b7:01:87:
         1e:f3:3c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:08:30 2026 by rpki-client