Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.mft
File:                     UvbBEDFTJEhSvLPiO23ioWuqen8.mft (raw, json)
Hash identifier:          G31qq7Yk624rKTJ9wMx24U6RK/yERzyasgGhzQqlpxY=
Subject key identifier:   BF:52:EB:E1:6C:DF:B9:99:00:DD:15:C6:03:31:86:96:07:18:06:BD
Authority key identifier: 52:F6:C1:10:31:53:24:48:52:BC:B3:E2:3B:6D:E2:A1:6B:AA:7A:7F
Certificate issuer:       /CN=52f6c1103153244852bcb3e23b6de2a16baa7a7f
Certificate serial:       01A08B3102B2B9023A7C2779B21A189C1ADD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UvbBEDFTJEhSvLPiO23ioWuqen8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.mft
Manifest number:          1494
Signing time:             Thu 10 Sep 2026 12:00:39 +0000
Manifest this update:     Thu 10 Sep 2026 12:00:39 +0000
Manifest next update:     Fri 11 Sep 2026 12:00:39 +0000
Files and hashes:         1: UvbBEDFTJEhSvLPiO23ioWuqen8.crl (hash: wn9JyyVwTfctsTi435u2No/poqIPLtjDXWgBZ+BxLeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UvbBEDFTJEhSvLPiO23ioWuqen8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 12:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:31:02:b2:b9:02:3a:7c:27:79:b2:1a:18:9c:1a:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52f6c1103153244852bcb3e23b6de2a16baa7a7f
        Validity
            Not Before: Sep 10 12:00:39 2026 GMT
            Not After : Sep 11 12:00:39 2026 GMT
        Subject: CN=bf52ebe16cdfb99900dd15c603318696071806bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9b:bd:c9:43:30:86:ca:35:af:b3:cd:72:fc:
                    10:96:52:be:5a:8a:a4:95:48:43:74:a7:25:e5:8d:
                    e6:02:ff:0a:57:30:0e:49:61:75:a9:90:6c:1a:72:
                    fb:94:6b:3f:20:f7:eb:04:f0:e1:0f:45:28:cf:3b:
                    12:39:c6:4a:3e:8a:52:c0:5e:d6:a8:1a:8d:dd:96:
                    9b:30:16:e9:fc:93:02:c1:ae:f2:fa:35:50:10:55:
                    5e:d0:06:73:ef:dc:67:4c:1c:07:58:14:01:06:a3:
                    8f:25:9d:b5:3b:54:5e:c4:dc:f9:e2:50:80:99:d1:
                    89:56:36:af:98:95:8c:ab:73:1b:14:41:68:10:c0:
                    c9:8a:a6:43:5d:17:36:de:67:f0:b9:65:4c:6c:28:
                    bb:d6:a0:e1:fa:2a:62:a2:f5:21:4d:31:cc:f0:fe:
                    f3:41:ec:10:38:37:aa:74:ce:57:48:45:a2:ec:d0:
                    71:e2:7c:27:c5:8c:af:18:07:43:f3:be:2a:0f:50:
                    31:89:28:c2:bc:28:26:d5:be:1c:17:6a:ad:6c:5c:
                    2e:a9:68:2b:0d:f8:35:35:73:21:96:84:3c:35:c8:
                    ab:b2:ce:91:d5:d5:54:4f:6d:e0:99:f5:44:d4:22:
                    07:12:bd:ad:ac:1a:16:77:72:42:14:4e:f1:1d:df:
                    ae:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:52:EB:E1:6C:DF:B9:99:00:DD:15:C6:03:31:86:96:07:18:06:BD
            X509v3 Authority Key Identifier:
                keyid:52:F6:C1:10:31:53:24:48:52:BC:B3:E2:3B:6D:E2:A1:6B:AA:7A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvbBEDFTJEhSvLPiO23ioWuqen8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:02:8e:00:0f:1b:3b:8b:3b:80:ce:3b:c0:8b:26:67:0c:c2:
         36:36:04:7a:c7:2d:70:e0:43:97:87:cd:56:93:40:05:99:2b:
         80:7c:09:50:93:d5:41:28:16:84:97:b3:d8:89:33:4d:f9:fa:
         76:bc:ab:97:44:9e:de:ee:d1:c3:e8:56:a1:e9:d2:d4:33:6d:
         ef:01:27:79:2a:58:38:0e:ac:1a:86:31:ee:74:14:ea:c0:75:
         00:34:78:c3:3c:4a:bf:a1:77:e3:bb:d8:8c:f2:fa:b3:ac:63:
         6c:46:4d:4a:88:81:47:9f:da:af:36:e1:a6:fd:88:8c:19:8a:
         a9:d1:cf:53:49:ed:0a:f2:49:33:f2:c0:33:45:8a:48:03:45:
         90:5f:a5:1c:db:3d:bf:33:09:95:40:9e:0e:41:97:14:a3:34:
         23:9b:43:c1:41:05:dc:9b:0d:3c:28:dc:7f:d0:f0:f7:4b:7f:
         da:52:02:66:c1:64:89:2a:5c:55:1a:dd:44:69:20:5f:89:fc:
         67:f9:f2:f7:35:aa:8f:a2:aa:26:fa:4f:ae:d7:8a:4b:dc:7b:
         4b:c4:50:cd:bb:33:75:c4:7d:76:e4:0b:c1:ec:9a:99:cb:a4:
         ae:d6:d9:6f:a6:34:75:9a:8c:06:ef:d1:98:8d:bf:35:e3:21:
         dd:3e:91:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:47:54 2026 by rpki-client