Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
File:                     uRFN_za5SLVsIR0l85h1HTW5PMI.mft (raw, json)
Hash identifier:          as3Dzhv6rvmK0i4dbmJxGJ2ZzKKsPqBt1NvS2XNnJMk=
Subject key identifier:   5F:95:0B:BB:12:29:1C:D8:86:0A:35:59:74:B5:3E:17:10:99:2D:40
Authority key identifier: B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
Certificate issuer:       /CN=b9114dff36b948b56c211d25f398751d35b93cc2
Certificate serial:       01A08E3247ED07AA9600E039F815F0991EAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
Manifest number:          1255
Signing time:             Fri 11 Sep 2026 02:00:54 +0000
Manifest this update:     Fri 11 Sep 2026 02:00:54 +0000
Manifest next update:     Sat 12 Sep 2026 02:00:54 +0000
Files and hashes:         1: D-37R8pTtaYyRSvFF1cIYOk-kgs.roa (hash: VVl+RrZKwp2SWM55JhoijG/n/TZ6UrTZnaeJgiQh+QM=)
                          2: gkon8URGKawWYsPCktsOv4GJyC0.roa (hash: wGsl+Lv3yiWPoxNTkh9Ez43KMkCIutQ7CbBGSolZmCM=)
                          3: u9H8ycoJJ73XLzdk1mG2YZJ6YlA.roa (hash: Akg2+wCDxoYDDb6kxdKsIcm/cpM8e7ZCMW+TrYVEbRA=)
                          4: uRFN_za5SLVsIR0l85h1HTW5PMI.crl (hash: gptc2nQfZ+nAGYCC83aWrPtlonhvB49DxXkPl6GFpq0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8e:32:47:ed:07:aa:96:00:e0:39:f8:15:f0:99:1e:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9114dff36b948b56c211d25f398751d35b93cc2
        Validity
            Not Before: Sep 11 02:00:54 2026 GMT
            Not After : Sep 12 02:00:54 2026 GMT
        Subject: CN=5f950bbb12291cd8860a355974b53e1710992d40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2c:b3:62:ae:2c:8b:71:e3:dd:6d:2c:d2:e9:
                    27:48:8c:0f:83:9f:cd:bc:68:b4:fa:99:da:28:20:
                    55:de:6f:b9:a7:0d:fc:bc:24:cb:1c:bd:48:26:e1:
                    2d:a3:79:c1:62:fb:f7:fb:58:2e:34:1f:9d:19:05:
                    09:1f:68:f9:ac:6c:82:bc:6c:0c:f1:9d:28:9a:90:
                    28:04:bb:5e:8a:ab:62:55:87:5d:15:2a:30:6d:3a:
                    e0:7a:59:a0:b2:5f:76:81:af:92:ba:9d:eb:7c:db:
                    67:86:a4:e6:80:e3:f3:93:a8:53:85:eb:7e:f6:bd:
                    86:c1:4f:00:e0:42:6a:2c:a5:ff:6b:72:c9:0a:be:
                    05:26:1d:14:8c:4f:c6:bd:05:27:5f:9a:46:ee:63:
                    6c:63:ea:30:46:84:c3:6e:a7:3a:21:d0:e9:0c:3f:
                    51:b3:c2:06:6e:f1:83:bc:91:f0:39:7d:e9:51:15:
                    19:4a:6e:f1:04:ba:22:48:90:2f:61:be:6e:bc:c2:
                    42:04:34:48:07:11:31:bd:70:87:5c:43:4f:8d:55:
                    47:ef:61:2c:c6:49:76:45:14:98:63:28:06:84:3e:
                    50:c5:a1:7b:62:30:0e:12:45:42:29:41:50:92:f3:
                    13:e8:8f:cc:4f:0f:b7:ae:66:88:60:0e:c6:0b:9e:
                    9d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:95:0B:BB:12:29:1C:D8:86:0A:35:59:74:B5:3E:17:10:99:2D:40
            X509v3 Authority Key Identifier:
                keyid:B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:40:5c:12:40:b1:5e:35:86:7c:e4:07:94:dc:a8:50:ea:b8:
         da:f4:4d:4b:d0:5a:45:ca:76:28:05:da:c6:76:0c:d1:bb:42:
         b7:11:b3:e8:b4:ab:4e:f0:a7:c0:72:93:5a:cd:4b:ff:18:d6:
         18:bd:82:c6:a6:d1:98:b9:d5:5e:aa:f9:b3:32:20:72:48:e6:
         52:b2:a3:a4:e8:5a:67:ee:ed:87:f0:ae:60:58:1d:a9:24:95:
         68:01:77:b1:8c:f8:3c:ec:5a:75:c7:d1:d0:b1:67:95:82:16:
         4c:e5:43:49:72:2e:4e:c8:65:68:0d:ae:97:4e:c5:27:17:f2:
         c8:d0:8b:63:52:79:35:a6:7f:26:f7:f0:71:9c:3f:3f:3f:33:
         a9:c6:db:2d:b4:e9:9e:6b:86:2c:85:ea:7a:38:bd:5f:03:28:
         94:a0:90:34:81:8a:2b:58:9e:ae:75:d7:dc:b8:9d:a8:24:80:
         ce:11:65:01:6e:5b:26:77:5e:4b:e6:c5:9c:a3:de:64:9b:de:
         2d:30:8d:4e:c8:3a:63:3a:0a:c3:2a:de:e3:4c:0f:34:d7:2f:
         88:c5:e1:a0:bf:54:00:34:2a:57:37:1d:07:86:9c:0f:23:b4:
         ff:f1:1a:2f:f2:0b:62:d0:fc:1e:57:26:25:1f:4c:8e:7c:13:
         c9:6b:cb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:09:05 2026 by rpki-client