Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
File:                     UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft (raw, json)
Hash identifier:          eAe7V2PE6szsLy3JXb3tzfahxQFuQVfsjUriN4fYMd0=
Subject key identifier:   1C:23:B8:05:46:5C:99:34:49:94:4F:D6:5C:6D:40:EE:2F:20:58:67
Authority key identifier: 50:26:4C:3F:09:83:1C:CD:88:97:12:F4:FA:B5:C5:B1:BE:0C:AD:56
Certificate issuer:       /CN=50264c3f09831ccd889712f4fab5c5b1be0cad56
Certificate serial:       01A1317D54A316F5D42A897D5D357644EC52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
Manifest number:          1AA0
Signing time:             Mon 12 Oct 2026 19:00:59 +0000
Manifest this update:     Mon 12 Oct 2026 19:00:59 +0000
Manifest next update:     Tue 13 Oct 2026 19:00:59 +0000
Files and hashes:         1: UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl (hash: gR0T/2G9AjVehh1WqNARdtJs7OIwG8hB6BEkKgM2F8c=)
                          2: yh2X2ozTLX2jv3i-6zTP4fuQL0s.roa (hash: 3DAmw+iwLLlUS0HsEZXB/476bZhxozUVUrUhXhghaeA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:31:7d:54:a3:16:f5:d4:2a:89:7d:5d:35:76:44:ec:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50264c3f09831ccd889712f4fab5c5b1be0cad56
        Validity
            Not Before: Oct 12 19:00:59 2026 GMT
            Not After : Oct 13 19:00:59 2026 GMT
        Subject: CN=1c23b805465c993449944fd65c6d40ee2f205867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f6:65:29:fa:68:cc:7d:99:6c:c8:77:b5:d2:
                    01:3d:3a:b3:3d:a2:8a:e1:9d:53:18:84:ec:a8:70:
                    8f:78:a4:f0:73:32:a5:74:4e:1f:04:c2:4f:64:f7:
                    3e:52:80:e4:14:b9:d1:5c:1c:62:af:ff:27:1a:e6:
                    57:b3:a6:24:14:5d:4e:58:7e:82:c8:b7:28:91:15:
                    78:f3:4d:fc:27:45:a1:47:6f:1d:02:21:ff:4c:f9:
                    8d:89:ae:e5:c0:6c:56:09:99:92:de:e4:ac:1d:8c:
                    2d:52:5a:89:15:cc:22:8d:93:bd:07:42:7c:91:c7:
                    0f:e9:41:19:6f:37:86:ed:93:a7:1b:5f:49:34:cd:
                    6c:37:7e:64:15:32:a8:3a:f3:72:d6:d9:cc:f4:56:
                    9f:71:cc:5a:0e:41:af:7c:42:f0:de:2d:09:7f:9b:
                    83:7b:39:07:36:85:f0:50:ed:9c:ff:c9:21:75:e7:
                    14:9a:4e:c8:d6:58:b5:74:35:c3:71:2f:f2:77:02:
                    0f:76:6d:84:22:02:a7:e3:6e:fa:90:b2:cd:3a:33:
                    9b:2a:5e:ea:a9:00:87:ad:8c:df:62:32:d9:2a:7a:
                    a8:3d:b7:44:6c:90:d7:50:42:07:7d:b5:23:4b:7f:
                    fc:b9:20:f8:13:39:ee:89:52:2d:7a:a1:0b:50:52:
                    54:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:23:B8:05:46:5C:99:34:49:94:4F:D6:5C:6D:40:EE:2F:20:58:67
            X509v3 Authority Key Identifier:
                keyid:50:26:4C:3F:09:83:1C:CD:88:97:12:F4:FA:B5:C5:B1:BE:0C:AD:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:81:ac:03:ef:cc:80:f9:59:4f:29:3d:c4:eb:71:af:f7:fb:
         e5:ac:f7:e9:eb:25:1a:71:82:a3:9b:07:95:9e:3f:49:26:91:
         34:3b:84:e3:ce:9d:3e:84:09:fd:c4:96:07:80:12:54:51:8b:
         a6:b9:7e:15:b9:04:6d:2e:bc:de:b3:8f:d5:e2:94:b5:0a:4e:
         fb:82:bd:cd:d1:69:3c:c6:af:72:32:0e:b0:ba:21:7e:e2:53:
         75:db:27:bb:49:54:17:f8:07:9c:93:a5:a5:19:84:08:3d:39:
         15:a6:30:2d:d1:a0:d8:d0:02:7a:25:e1:ad:25:f3:fd:20:ff:
         cd:8f:1a:59:83:99:09:ff:81:6b:b5:de:9a:e5:5c:31:72:80:
         c3:27:66:ed:b1:d9:25:ca:06:fc:18:4b:84:12:1f:96:bf:b9:
         f5:c0:c2:f5:3f:82:e2:30:42:e9:8e:3e:b1:d5:aa:c6:99:8e:
         51:21:89:44:49:94:36:35:47:24:cb:ec:bb:7d:03:80:35:0e:
         4b:ad:95:05:46:08:8b:19:15:74:97:a1:17:fb:1e:2f:28:72:
         bc:29:28:45:db:fd:bd:eb:12:f9:63:f9:f6:3c:6e:8a:78:39:
         ea:ec:35:51:d4:95:06:9b:12:e5:e2:b3:ca:d4:ee:46:cf:fc:
         05:7a:55:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:17:19 2026 by rpki-client