Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft
File:                     uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft (raw, json)
Hash identifier:          pG2fZIqbRSEguay9a645HLlAtVa3dSLDi1QiqubaJD4=
Subject key identifier:   8C:4D:5B:06:A6:36:FB:E1:E7:88:6F:5C:75:A5:68:91:FD:A5:F1:45
Authority key identifier: B8:15:25:AE:1A:5A:FC:EF:19:3F:5A:40:17:7B:F2:73:88:83:10:78
Certificate issuer:       /CN=b81525ae1a5afcef193f5a40177bf27388831078
Certificate serial:       01A180AB6D59BDD196CF1E70F65C40813A7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft
Manifest number:          07E2
Signing time:             Wed 28 Oct 2026 04:01:20 +0000
Manifest this update:     Wed 28 Oct 2026 04:01:20 +0000
Manifest next update:     Thu 29 Oct 2026 04:01:20 +0000
Files and hashes:         1: uBUlrhpa_O8ZP1pAF3vyc4iDEHg.crl (hash: UVXzuzMR8osDIzVO0TSpDz3LzlyHfiJ3zIrxME0hhNs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:80:ab:6d:59:bd:d1:96:cf:1e:70:f6:5c:40:81:3a:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b81525ae1a5afcef193f5a40177bf27388831078
        Validity
            Not Before: Oct 28 04:01:20 2026 GMT
            Not After : Oct 29 04:01:20 2026 GMT
        Subject: CN=8c4d5b06a636fbe1e7886f5c75a56891fda5f145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:12:32:ae:6b:9c:0f:03:77:af:5e:56:f8:8e:
                    03:72:42:e5:02:37:24:42:b8:57:d2:22:31:d8:30:
                    bf:6e:7b:13:38:b4:20:1b:d9:ca:1b:ba:44:dd:73:
                    f0:fe:5c:f6:67:5f:5c:5c:36:9a:e8:65:c1:f7:ef:
                    33:3e:b2:a4:23:b5:fb:23:08:2b:55:c0:a0:0c:a4:
                    ce:87:7f:9e:6f:e9:cd:d7:21:44:93:9e:26:b0:a9:
                    dc:f1:d7:59:f7:19:54:6a:49:4d:09:54:c6:a9:83:
                    25:63:ec:29:79:47:02:d0:de:f4:8f:8c:43:33:5d:
                    f4:6c:c4:39:2e:71:65:0e:18:76:c2:38:bf:c1:84:
                    96:eb:4d:6c:2b:78:82:3b:ad:8d:c4:37:70:40:d9:
                    d1:3c:10:d3:9b:b2:33:08:5a:b0:8d:de:b2:47:d4:
                    4b:f7:ed:ba:c3:62:5f:b9:49:36:c3:52:ba:c4:db:
                    c4:bb:d5:5e:2e:96:e2:e0:99:10:b1:42:b9:64:38:
                    57:66:91:23:8a:38:82:ee:fe:76:21:2c:82:dc:48:
                    f3:c4:b1:3a:0c:f3:c6:f3:3c:76:39:6b:58:6d:e8:
                    a6:fd:d3:47:2c:9b:c8:6c:2f:e0:fb:c0:dd:d4:25:
                    84:a6:3f:80:a5:cb:66:50:1c:88:54:b9:c3:af:d5:
                    bb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:4D:5B:06:A6:36:FB:E1:E7:88:6F:5C:75:A5:68:91:FD:A5:F1:45
            X509v3 Authority Key Identifier:
                keyid:B8:15:25:AE:1A:5A:FC:EF:19:3F:5A:40:17:7B:F2:73:88:83:10:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:30:b4:a9:44:74:d4:42:4c:be:bf:2f:26:5b:01:e6:3a:f4:
         8f:5d:28:b6:63:24:92:06:ec:f8:17:28:d3:55:14:43:b5:7e:
         39:85:f2:f1:d7:6a:fe:a1:99:05:b9:93:48:c9:b9:a9:67:07:
         84:40:8c:67:2c:10:7e:6c:34:42:d7:f3:6c:1a:91:55:b3:88:
         c3:5e:62:00:f4:82:a5:2d:eb:bd:0f:5a:a6:05:a3:a0:9c:37:
         58:77:e0:2f:56:de:71:2a:a5:84:6a:79:42:e9:c5:f4:d4:ee:
         51:f9:22:88:54:f7:b7:d1:96:dd:75:b2:86:52:49:1a:1a:af:
         a3:4d:24:f1:e5:07:3b:07:4a:6c:75:6a:15:67:36:37:43:29:
         18:e4:46:1d:d6:29:1a:8d:47:67:03:3a:7a:6f:6e:37:10:d5:
         40:11:c5:28:07:80:48:79:fa:33:2c:d6:86:05:4a:97:db:f0:
         b0:64:d9:fe:a7:45:8f:46:39:65:d5:8c:ef:1f:91:bc:44:e9:
         49:d7:38:d3:f4:a9:34:df:38:ee:40:85:97:fa:71:55:91:c2:
         f9:0a:f7:fd:c7:62:99:99:9e:69:57:f9:11:a5:00:fb:a0:11:
         5e:91:5b:07:81:57:11:60:0a:d6:14:1e:0d:71:ab:ef:75:54:
         f5:fd:80:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:22:54 2026 by rpki-client