Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.mft
File:                     UiOZwnibGlUE-BZxz_IgwE6vWfE.mft (raw, json)
Hash identifier:          Pqy6gwQ7RWSF3+vqw/wPCmUmVEdp7QPUasaJiadLGcQ=
Subject key identifier:   D5:BC:B7:11:07:7E:E0:04:86:20:E6:B1:EC:7F:4D:91:17:54:F4:24
Authority key identifier: 52:23:99:C2:78:9B:1A:55:04:F8:16:71:CF:F2:20:C0:4E:AF:59:F1
Certificate issuer:       /CN=522399c2789b1a5504f81671cff220c04eaf59f1
Certificate serial:       01A1803DE3E74D7FDBADD595041B28AAA7B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UiOZwnibGlUE-BZxz_IgwE6vWfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.mft
Manifest number:          08E9
Signing time:             Wed 28 Oct 2026 02:01:42 +0000
Manifest this update:     Wed 28 Oct 2026 02:01:42 +0000
Manifest next update:     Thu 29 Oct 2026 02:01:42 +0000
Files and hashes:         1: Fzs18Pys6l9fSq_GkDa6C3XJRi0.roa (hash: OfXRk92ppNF4GSkAgAgX7LKIn4YcXg7kYMRzT0zzB0A=)
                          2: Gre1McsLjroWwDOhj-OtpstHVpc.roa (hash: OWHx2TwrpcdyAc/CwSUnmry75zuLndKQ8PqgXe9zhgA=)
                          3: JTQp6yJ4aQq8jb8AlnG_qqNfzxc.roa (hash: UOuakYUOpXbIZx8SsJ7cpP08RS5fViWIwWu2p4Ku/jI=)
                          4: JaIb1gXgIzvLnanih-PubvIG2Dw.roa (hash: 9e1EA+x8oc0lc8n0nGp9UFQA05kes732QRy+HtY23+U=)
                          5: KHQ_ZdxN56Iz5Ca6N9aBw4nqLxI.roa (hash: +nZrFR1HZ1NCMol1rB0+mW9pkjA6Lmn6yBpxxfjSeJA=)
                          6: PSdpOEBdgxsHkm6KCNPnWSFB49k.roa (hash: pGGtowfo8qIB3GjUapqlvFttqBJK9pMUluPFJe49Hos=)
                          7: UiOZwnibGlUE-BZxz_IgwE6vWfE.crl (hash: kQ3XYVlpbJGajCk0NH+YmQKZ/9/LwdagPt/lcx0vgNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UiOZwnibGlUE-BZxz_IgwE6vWfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 02:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:80:3d:e3:e7:4d:7f:db:ad:d5:95:04:1b:28:aa:a7:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522399c2789b1a5504f81671cff220c04eaf59f1
        Validity
            Not Before: Oct 28 02:01:42 2026 GMT
            Not After : Oct 29 02:01:42 2026 GMT
        Subject: CN=d5bcb711077ee0048620e6b1ec7f4d911754f424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8c:ef:ea:8c:2c:e6:b9:d6:80:9e:bd:54:ae:
                    a4:44:81:7d:1d:b7:8d:89:03:8f:3d:46:a4:ed:4a:
                    02:f6:93:5c:bf:28:c9:5f:08:c7:28:90:77:84:e8:
                    00:3b:4e:eb:bc:62:72:ad:0e:fb:8a:af:aa:cf:ac:
                    2b:a1:0b:71:92:d9:1a:60:2c:e0:9e:97:ee:bf:46:
                    74:b3:3c:21:38:15:c7:0a:ed:fc:73:5c:57:0a:c2:
                    0e:cb:59:93:c4:c6:ba:e2:98:2f:08:87:d9:d5:15:
                    b2:92:7a:ae:31:1d:85:b5:c9:86:08:6a:b0:a4:41:
                    ee:f6:0e:66:b0:e6:22:82:93:94:06:bb:eb:99:65:
                    34:30:6e:bc:08:98:6f:01:26:6a:a8:4c:1e:37:4b:
                    f4:4e:b1:5b:9f:37:2a:7d:07:b7:2e:36:71:b9:3a:
                    cc:f8:73:6e:94:fa:b2:60:b0:06:9d:35:5f:08:cc:
                    ac:c2:56:87:2b:e0:44:ad:10:f7:12:e8:82:a4:c3:
                    ae:5e:80:c5:70:14:5d:82:b5:7a:0f:7d:39:05:03:
                    2e:1c:d4:a8:e3:72:d1:c2:e2:e5:87:05:b4:ac:eb:
                    07:b2:1d:da:57:e6:76:3a:18:f8:7e:47:03:10:aa:
                    30:5f:ee:b2:6a:f3:cd:ab:77:6f:ee:e2:7c:c7:c5:
                    b8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:BC:B7:11:07:7E:E0:04:86:20:E6:B1:EC:7F:4D:91:17:54:F4:24
            X509v3 Authority Key Identifier:
                keyid:52:23:99:C2:78:9B:1A:55:04:F8:16:71:CF:F2:20:C0:4E:AF:59:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiOZwnibGlUE-BZxz_IgwE6vWfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:eb:b9:25:00:52:97:e8:83:13:66:f2:0a:12:e9:69:ea:49:
         a6:61:5b:d8:16:9f:dd:86:d0:b0:12:03:1b:2e:a5:4a:48:46:
         0e:36:ce:d2:be:48:b7:11:2d:57:68:89:59:ba:ea:ee:34:77:
         20:d9:d5:bd:6c:c7:0a:04:cc:51:12:8d:d2:d0:1b:ec:d6:61:
         cd:c8:0b:11:9a:36:a3:51:33:43:ab:e3:62:18:46:9f:b0:70:
         db:16:98:9f:07:46:c7:60:93:43:4d:db:02:6a:fb:5e:d3:cf:
         9b:f6:95:34:da:59:c3:6c:97:70:38:5e:b5:6a:47:82:d1:09:
         f0:08:38:37:d8:83:b7:50:00:4a:fe:4f:e0:c7:65:13:f5:f9:
         e1:e7:53:36:64:65:87:3e:f0:a0:7b:19:65:84:34:ca:7c:1e:
         cc:5a:8d:48:db:f5:6e:40:3c:ad:8c:18:9e:36:fc:81:99:dd:
         64:61:89:a3:17:25:73:3e:74:75:98:60:e1:a5:39:b6:a8:04:
         13:3a:2d:ea:01:d2:05:28:41:54:a7:6c:f3:6b:ef:13:55:fd:
         77:a3:34:0e:07:5c:4f:0e:a0:e4:65:9a:90:67:90:a4:2c:af:
         57:52:66:d3:1b:ac:22:fc:aa:f6:b7:5d:4c:22:fd:f1:ea:00:
         f6:6d:93:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:18:59 2026 by rpki-client