Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/uTS2FvVrv9BdC9ScZjBvTZCCZhs.mft
File:                     uTS2FvVrv9BdC9ScZjBvTZCCZhs.mft (raw, json)
Hash identifier:          cYgPxFMmXMGwLh7dQL64gDGSFjs2KHsPHmOs9fCqkpQ=
Subject key identifier:   96:AB:36:05:94:3D:EB:C2:7A:56:CE:FA:2A:82:F1:ED:35:3B:10:99
Authority key identifier: B9:34:B6:16:F5:6B:BF:D0:5D:0B:D4:9C:66:30:6F:4D:90:82:66:1B
Certificate issuer:       /CN=b934b616f56bbfd05d0bd49c66306f4d9082661b
Certificate serial:       01A1250B5BC13B3B83A90D6382C87C230BC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uTS2FvVrv9BdC9ScZjBvTZCCZhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/uTS2FvVrv9BdC9ScZjBvTZCCZhs.mft
Manifest number:          0111
Signing time:             Sat 10 Oct 2026 09:01:03 +0000
Manifest this update:     Sat 10 Oct 2026 09:01:03 +0000
Manifest next update:     Sun 11 Oct 2026 09:01:03 +0000
Files and hashes:         1: uTS2FvVrv9BdC9ScZjBvTZCCZhs.crl (hash: QlBEfw3CEo2JM8L1YQBYX8sK3PuiXUqq71C51s8RD24=)
                          2: wEJikxHblT6L9s-bWi71LrsBZRI.roa (hash: bunPLGyVfPKxwGeY/HVdEI1aNYchPYcPFBV30VR16pY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/uTS2FvVrv9BdC9ScZjBvTZCCZhs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/uTS2FvVrv9BdC9ScZjBvTZCCZhs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uTS2FvVrv9BdC9ScZjBvTZCCZhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 02:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:25:0b:5b:c1:3b:3b:83:a9:0d:63:82:c8:7c:23:0b:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b934b616f56bbfd05d0bd49c66306f4d9082661b
        Validity
            Not Before: Oct 10 09:01:03 2026 GMT
            Not After : Oct 11 09:01:03 2026 GMT
        Subject: CN=96ab3605943debc27a56cefa2a82f1ed353b1099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1e:e8:62:87:f0:4e:7b:91:41:88:02:ec:bd:
                    2f:4c:c4:95:44:8a:f5:b1:4f:ce:95:a5:49:63:f0:
                    a6:a4:a9:f0:4a:6e:c6:96:e1:80:96:d8:3d:27:fb:
                    f4:64:b0:42:62:4f:1d:a8:4a:4e:fb:e4:4e:ab:a0:
                    e8:4c:fe:d7:d4:d6:f2:24:d2:5a:3c:d3:29:85:b7:
                    4c:6e:40:29:34:82:a0:ee:3d:11:89:87:0a:5c:72:
                    0e:37:5f:a7:b1:b9:05:7f:e9:b0:42:47:85:cb:96:
                    b1:2a:7d:f1:cc:e2:69:da:c0:6c:d1:d9:0c:6b:ca:
                    93:16:06:b9:63:c7:da:d9:84:c7:04:f8:ff:bb:7c:
                    70:de:d5:e1:f7:0d:7d:ad:c2:c1:7a:f5:66:b2:3f:
                    0b:70:06:57:ea:d0:ac:a0:b7:99:45:df:3f:43:59:
                    b2:36:ae:d8:fe:eb:b7:4b:a6:ae:70:7b:cd:d0:a8:
                    33:da:5a:e7:ca:49:c0:9e:06:88:5a:cd:2f:23:9c:
                    97:b8:7f:b9:9a:f0:0f:75:6d:89:c1:97:b2:9c:6d:
                    ad:e1:37:bb:96:44:24:36:6c:e3:c4:e8:8e:30:40:
                    71:30:48:62:63:07:4a:61:36:16:ad:48:e7:85:05:
                    cd:3b:15:01:7e:f8:1a:c4:e5:a0:24:21:3d:76:12:
                    8d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AB:36:05:94:3D:EB:C2:7A:56:CE:FA:2A:82:F1:ED:35:3B:10:99
            X509v3 Authority Key Identifier:
                keyid:B9:34:B6:16:F5:6B:BF:D0:5D:0B:D4:9C:66:30:6F:4D:90:82:66:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTS2FvVrv9BdC9ScZjBvTZCCZhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/uTS2FvVrv9BdC9ScZjBvTZCCZhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/uTS2FvVrv9BdC9ScZjBvTZCCZhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:b5:e4:25:7f:ca:e0:23:74:fc:98:75:96:8b:bb:95:f6:81:
         30:f9:98:f3:bf:17:c7:1b:8a:fe:00:09:8f:26:29:e6:74:62:
         58:3d:3f:a8:36:e9:f1:56:99:21:cc:97:4f:79:29:8e:fd:db:
         aa:b4:72:62:2e:a0:6d:97:65:70:27:81:43:ea:99:7e:75:ed:
         a3:41:79:c3:4b:d7:9a:23:d3:d4:57:5b:ba:fd:da:c2:cd:d1:
         0f:4a:4f:0a:95:85:e9:52:14:cc:cb:4e:64:c3:a6:33:34:1b:
         bd:9c:0f:f8:47:71:e2:79:18:58:0c:3b:c0:d4:14:ac:ae:53:
         35:73:a7:8c:fe:19:a3:03:c1:40:24:35:eb:2b:3f:73:b4:12:
         95:88:ae:0a:61:c2:77:38:18:47:f9:c7:ab:7b:79:51:7c:84:
         d5:04:83:3e:fb:db:f1:fd:bb:38:71:49:a3:95:2b:be:1c:02:
         10:0e:01:23:5a:84:c2:ae:5d:6b:b3:d6:04:d7:c2:a0:bb:4e:
         51:72:c2:b9:34:56:31:f4:0b:86:9b:aa:52:ad:46:70:28:ab:
         80:b0:25:b6:0f:d3:08:9a:55:ff:24:fd:6a:2a:c4:ea:af:25:
         73:a0:c6:1c:f5:49:bf:ac:72:58:ec:4e:71:7a:0f:3e:d6:07:
         55:fd:d1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:52:41 2026 by rpki-client