Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
File:                     uveRJ-40o67pB5yOl5nEDw3I3KI.mft (raw, json)
Hash identifier:          ksT593ugSJ0JVWBKb/hfS+RHCef31lN7R9hI73Ui6QY=
Subject key identifier:   BA:28:7A:7B:C4:18:A4:7D:B4:6F:12:9C:91:56:8B:27:A0:09:16:D8
Authority key identifier: BA:F7:91:27:EE:34:A3:AE:E9:07:9C:8E:97:99:C4:0F:0D:C8:DC:A2
Certificate issuer:       /CN=baf79127ee34a3aee9079c8e9799c40f0dc8dca2
Certificate serial:       019FF9B6152BDBFDFB4D1C1B06D8783C4CDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uveRJ-40o67pB5yOl5nEDw3I3KI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
Manifest number:          0E16
Signing time:             Thu 13 Aug 2026 06:01:27 +0000
Manifest this update:     Thu 13 Aug 2026 06:01:27 +0000
Manifest next update:     Fri 14 Aug 2026 06:01:27 +0000
Files and hashes:         1: cBMWof3fzl2WvO-9iPNkwKq65UE.roa (hash: l4uhlHM36IRywwsHUvPgf8xitbWlb3IF/+WuiPml4uE=)
                          2: uveRJ-40o67pB5yOl5nEDw3I3KI.crl (hash: h5WFrJ7L7uPh8u6d7VhVdviqgSCw6RCuh61m8wcj1Ds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uveRJ-40o67pB5yOl5nEDw3I3KI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 06:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f9:b6:15:2b:db:fd:fb:4d:1c:1b:06:d8:78:3c:4c:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baf79127ee34a3aee9079c8e9799c40f0dc8dca2
        Validity
            Not Before: Aug 13 06:01:27 2026 GMT
            Not After : Aug 14 06:01:27 2026 GMT
        Subject: CN=ba287a7bc418a47db46f129c91568b27a00916d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a4:ae:16:26:04:58:6d:dc:1f:11:3f:ae:f1:
                    e2:fb:9f:49:cb:3b:d7:e5:ee:bb:40:c8:e9:41:7f:
                    81:b1:d2:59:7e:e4:f6:f5:9a:91:ff:c4:91:ea:6b:
                    38:26:ff:77:dc:c7:c2:af:44:c3:58:ca:00:7c:fe:
                    7b:72:96:3a:04:fe:37:25:31:ca:92:ff:04:0f:49:
                    23:a3:a8:e4:8c:02:0e:8b:0e:c6:8b:00:bc:5b:02:
                    e0:3c:06:cc:7b:c6:d4:03:7b:d5:70:6e:2f:ec:b8:
                    94:04:69:65:55:43:62:08:a3:7a:16:94:14:83:dc:
                    6a:85:33:be:d2:82:bb:40:eb:53:da:5f:6c:b5:20:
                    59:91:4d:13:1a:d6:e7:8e:93:d0:38:49:75:ed:be:
                    98:c5:59:33:66:cc:f8:7b:ef:20:88:35:90:00:8a:
                    cf:af:2e:b2:dc:c2:85:3e:6d:0f:31:8a:3c:d9:f1:
                    ed:e8:f8:fc:ec:27:d3:84:58:8d:38:80:36:d6:6b:
                    2b:90:16:8e:1d:5d:03:24:33:9a:fa:99:21:62:14:
                    ab:1a:c8:93:b5:e5:b4:ba:34:87:67:35:75:3c:85:
                    8e:be:e3:02:ea:2a:49:8f:2d:3c:0a:ec:ba:47:17:
                    a6:20:7a:6f:39:77:48:f9:2a:8a:5d:1f:02:5d:0a:
                    7e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:28:7A:7B:C4:18:A4:7D:B4:6F:12:9C:91:56:8B:27:A0:09:16:D8
            X509v3 Authority Key Identifier:
                keyid:BA:F7:91:27:EE:34:A3:AE:E9:07:9C:8E:97:99:C4:0F:0D:C8:DC:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uveRJ-40o67pB5yOl5nEDw3I3KI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:0e:ac:15:ee:f2:a0:c8:a2:e8:71:e0:9d:2b:eb:5c:d8:d4:
         36:75:b1:b7:a1:07:49:9f:6d:a1:f8:12:a2:da:86:3e:0a:ae:
         19:b1:12:5b:2f:b7:a9:71:a6:64:ed:8a:bc:9e:6f:49:86:8a:
         bd:c4:25:97:7e:17:7a:d7:d6:ef:fb:cd:76:42:54:c3:51:56:
         ce:46:15:47:e7:e7:43:f6:be:a7:06:61:8d:ee:ba:c5:3d:85:
         16:b1:e5:8e:f2:bd:3e:2c:09:3d:31:54:9d:c6:72:89:29:47:
         64:06:65:a1:78:96:e3:f8:23:08:d7:e6:05:de:f8:f6:87:5d:
         2e:93:d3:68:7b:43:c4:76:08:41:ae:c8:be:37:70:a2:ee:1e:
         40:e9:f9:2a:93:4b:6e:49:3a:e1:52:f9:2a:aa:d9:83:ad:ae:
         6f:a0:c6:3d:fd:d0:14:ca:63:2f:b7:1a:83:d3:68:70:07:be:
         89:dd:2a:c9:ab:78:bd:60:6f:9b:fd:1c:f3:e3:1e:f6:42:a0:
         5d:f2:4d:97:0b:be:ee:4f:3d:26:1b:96:c2:8f:60:6a:80:0e:
         3f:03:1f:fd:dd:f3:a9:24:d1:39:39:af:3b:21:be:51:1f:84:
         4b:f2:27:f8:ae:87:72:ca:ad:0c:32:88:da:31:8e:c3:2d:da:
         3b:5c:cd:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 13:40:31 2026 by rpki-client