Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft
File:                     2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft (raw, json)
Hash identifier:          +MqFDfLgUIWQ7CApXEAJndsd2t9V0Dsxow3qS9OKQhQ=
Subject key identifier:   5F:40:45:84:54:E3:FE:AD:64:E6:7A:00:07:F7:E1:49:70:E0:6E:C9
Authority key identifier: D9:48:6F:7F:E4:EB:6D:94:9B:80:07:B4:E4:19:8C:E1:C8:78:30:2E
Certificate issuer:       /CN=d9486f7fe4eb6d949b8007b4e4198ce1c878302e
Certificate serial:       01A140161571393C4A24D816C565EFCF259F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Uhvf-TrbZSbgAe05BmM4ch4MC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft
Manifest number:          13CE
Signing time:             Thu 15 Oct 2026 15:02:31 +0000
Manifest this update:     Thu 15 Oct 2026 15:02:31 +0000
Manifest next update:     Fri 16 Oct 2026 15:02:31 +0000
Files and hashes:         1: 2Uhvf-TrbZSbgAe05BmM4ch4MC4.crl (hash: GCXt8jANk6r866QsWoYw8g/fMfrSmjjdz3OHb0aD4yQ=)
                          2: eI1TfXKJJjbPAxbPrjONicZptUI.roa (hash: Y1zpjxcPPaHmDlUK3ZwaUZS5k7qwhiP3vZdCGMyYu54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Uhvf-TrbZSbgAe05BmM4ch4MC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 15:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:16:15:71:39:3c:4a:24:d8:16:c5:65:ef:cf:25:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9486f7fe4eb6d949b8007b4e4198ce1c878302e
        Validity
            Not Before: Oct 15 15:02:31 2026 GMT
            Not After : Oct 16 15:02:31 2026 GMT
        Subject: CN=5f40458454e3fead64e67a0007f7e14970e06ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1d:4c:28:ba:64:5a:95:3e:c0:72:52:5e:b5:
                    6c:29:54:ac:78:37:71:9c:d7:a1:99:64:dc:a4:18:
                    73:cc:ae:29:b8:a5:e5:5d:dd:fa:e4:96:26:7d:14:
                    59:c7:7f:68:d2:cc:54:43:16:5d:a8:35:ed:65:50:
                    b6:39:cf:ef:d6:28:74:fd:ca:49:28:e4:8d:f1:3a:
                    ff:c4:10:5c:6d:28:7f:94:ff:c8:69:df:87:05:8d:
                    97:51:5d:93:c2:35:9a:0b:60:fd:ed:99:3f:87:fe:
                    08:21:a1:df:67:06:da:1a:fe:b7:37:b4:9c:9a:f1:
                    29:aa:74:a7:98:00:11:8d:93:c1:c5:c4:46:9c:76:
                    84:f6:6b:8a:38:cf:41:71:4b:2f:23:65:24:f7:96:
                    f6:dd:ee:81:4e:07:5e:44:5f:ed:5e:99:1f:ed:8c:
                    b4:84:86:05:52:5e:e4:f0:d4:a4:72:c4:87:96:16:
                    33:df:f5:05:aa:2f:7b:db:b8:83:6d:1b:3f:a8:0d:
                    79:98:40:8c:ec:cd:c9:a5:0a:a7:94:ec:4b:2c:3c:
                    ac:7c:15:ea:60:87:c5:c6:c4:f5:d1:6f:3f:ab:2e:
                    e7:3c:b1:45:41:00:6f:cf:2b:26:b1:5b:c9:14:bf:
                    a5:ed:bf:85:24:ff:96:e4:55:aa:c7:bb:bf:f3:25:
                    4b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:40:45:84:54:E3:FE:AD:64:E6:7A:00:07:F7:E1:49:70:E0:6E:C9
            X509v3 Authority Key Identifier:
                keyid:D9:48:6F:7F:E4:EB:6D:94:9B:80:07:B4:E4:19:8C:E1:C8:78:30:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Uhvf-TrbZSbgAe05BmM4ch4MC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:aa:cf:cd:eb:03:62:1d:f2:ad:6c:64:7a:80:77:4d:2c:a5:
         e5:ce:85:21:2b:10:93:18:ce:d2:67:01:07:40:e9:dd:3d:c0:
         97:dd:47:4f:99:0a:a1:e9:c8:78:db:54:a9:a3:d6:87:36:0a:
         10:40:a6:46:34:13:39:5f:93:38:03:ac:c7:58:48:ba:5b:2c:
         ea:b8:3d:f5:a0:b1:a0:f1:cd:d0:68:25:3f:dd:99:e7:db:89:
         10:d2:3a:60:24:e2:ca:9f:f3:b0:7e:18:e7:67:b7:d4:d7:5b:
         b9:7f:69:fe:da:a8:b1:4e:59:70:fa:9c:00:6a:66:1c:e9:02:
         e6:18:4e:ce:d0:94:1f:a9:a1:1e:0f:ae:1b:65:a5:80:1c:a5:
         f5:be:71:09:f1:7c:b5:67:68:e0:d5:4f:d9:af:3a:d8:a9:78:
         49:ab:a3:31:be:cd:9a:c2:fe:e0:a5:20:60:87:bf:94:21:15:
         af:44:0e:3a:50:b3:71:b4:64:26:ff:89:36:80:3f:50:95:41:
         d3:9e:bf:44:b9:88:58:33:df:29:d3:4c:69:e8:b3:6b:3a:d6:
         69:01:bf:12:55:7d:04:ec:59:a8:c7:d7:b9:14:d6:4b:6d:c6:
         a8:a6:65:51:bd:47:fa:52:cd:49:16:3a:fc:3f:d8:93:bf:62:
         f3:38:37:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:52:31 2026 by rpki-client