Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/960ddf-2c00-4b52-ab43-25fd7429b26e/1/UvSJf3qHP0f6U1KhzfyQPSMmOJQ.mft
File:                     UvSJf3qHP0f6U1KhzfyQPSMmOJQ.mft (raw, json)
Hash identifier:          F+C+4Q5r+CT/qb9ohAHOiCSvx/XlRvidqAxbyMRkPPM=
Subject key identifier:   94:21:8C:FA:B2:02:7D:06:18:1C:F5:12:47:73:18:12:4E:82:4F:78
Authority key identifier: 52:F4:89:7F:7A:87:3F:47:FA:53:52:A1:CD:FC:90:3D:23:26:38:94
Certificate issuer:       /CN=52f4897f7a873f47fa5352a1cdfc903d23263894
Certificate serial:       01A06E0312BD431974F8AFD557346BE57750
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UvSJf3qHP0f6U1KhzfyQPSMmOJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/960ddf-2c00-4b52-ab43-25fd7429b26e/1/UvSJf3qHP0f6U1KhzfyQPSMmOJQ.mft
Manifest number:          01CD
Signing time:             Fri 04 Sep 2026 20:01:30 +0000
Manifest this update:     Fri 04 Sep 2026 20:01:30 +0000
Manifest next update:     Sat 05 Sep 2026 20:01:30 +0000
Files and hashes:         1: UvSJf3qHP0f6U1KhzfyQPSMmOJQ.crl (hash: Dafzq4FWw82REBUEVfjZIWHTQK6+DtHHltdj79ZyF3g=)
                          2: XbkH5_i2k4jHzcNh6FE4UyKwysc.roa (hash: 4o2UxH6bGJou1LD39yY2Re5P0lbU2Modup85oP1m1j8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/960ddf-2c00-4b52-ab43-25fd7429b26e/1/UvSJf3qHP0f6U1KhzfyQPSMmOJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/960ddf-2c00-4b52-ab43-25fd7429b26e/1/UvSJf3qHP0f6U1KhzfyQPSMmOJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UvSJf3qHP0f6U1KhzfyQPSMmOJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:03:12:bd:43:19:74:f8:af:d5:57:34:6b:e5:77:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52f4897f7a873f47fa5352a1cdfc903d23263894
        Validity
            Not Before: Sep  4 20:01:30 2026 GMT
            Not After : Sep  5 20:01:30 2026 GMT
        Subject: CN=94218cfab2027d06181cf512477318124e824f78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:60:57:63:7f:f3:d2:db:b5:31:b4:1b:f4:72:
                    b4:fa:f1:b5:6e:66:46:6b:7c:6b:de:76:6a:a7:7f:
                    eb:37:ec:c0:23:15:5d:db:d4:ea:12:57:93:9c:ea:
                    5f:1e:68:3a:53:6f:5c:22:25:6c:94:cc:bb:19:f0:
                    b2:9a:f6:ab:c4:fb:e6:63:9a:ad:8c:df:18:ad:28:
                    cf:0a:ac:75:9c:9a:ba:58:a1:4d:1b:25:08:bb:28:
                    08:3f:b6:1d:87:68:f9:2f:c9:7e:3a:0c:4a:b6:12:
                    0e:64:ba:75:d5:d8:ed:df:26:32:b3:78:57:5b:71:
                    ae:61:fd:b1:19:7a:99:a8:2f:e4:a1:19:30:a0:40:
                    f9:56:0d:a7:72:62:af:38:ba:d4:52:30:db:65:96:
                    2e:a8:0f:73:c9:33:2a:47:99:0f:cf:7e:ef:6f:97:
                    0b:04:8c:8c:69:bf:32:c9:1c:8e:bb:ef:4c:a7:9b:
                    3d:ef:d0:c2:73:d2:bd:0e:6b:76:60:be:47:14:07:
                    c0:b3:0d:f3:d9:15:48:ee:59:a2:0b:f8:81:9f:3c:
                    e8:72:fd:7f:3a:eb:9f:33:d9:da:c5:b3:4f:df:9b:
                    25:8e:fa:0a:ea:de:fc:15:1c:61:3f:8e:38:c3:57:
                    c2:9e:94:84:b9:5a:9f:33:b6:b5:41:67:e5:47:87:
                    bf:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:21:8C:FA:B2:02:7D:06:18:1C:F5:12:47:73:18:12:4E:82:4F:78
            X509v3 Authority Key Identifier:
                keyid:52:F4:89:7F:7A:87:3F:47:FA:53:52:A1:CD:FC:90:3D:23:26:38:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvSJf3qHP0f6U1KhzfyQPSMmOJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/960ddf-2c00-4b52-ab43-25fd7429b26e/1/UvSJf3qHP0f6U1KhzfyQPSMmOJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/960ddf-2c00-4b52-ab43-25fd7429b26e/1/UvSJf3qHP0f6U1KhzfyQPSMmOJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:b2:26:1e:da:55:36:6f:7a:d5:9f:e2:3e:94:51:8e:e7:74:
         30:16:55:94:37:ec:b0:98:be:4b:6b:6e:fe:c0:ac:f4:ee:df:
         2a:cf:c2:3f:0e:e2:df:28:f8:dc:ab:1c:c8:b5:85:94:33:ce:
         87:b4:ac:e3:51:85:0d:44:8f:a7:70:d9:f1:4f:fc:41:37:cb:
         5d:14:ed:bc:c6:84:da:58:8e:d6:1b:ce:05:fc:2b:31:f0:32:
         05:14:47:28:14:8b:3b:fd:3a:c9:b4:b5:64:5e:eb:05:ae:93:
         01:59:96:67:4e:58:98:5f:2e:24:7e:3c:65:c0:8c:f7:86:98:
         bb:31:9e:bd:2d:bc:45:72:78:f2:5f:bb:39:3c:cd:98:0b:95:
         a3:ec:b2:d7:bb:86:75:68:ff:76:e1:05:b7:35:11:63:e7:83:
         99:17:6d:2f:78:a5:77:45:23:a5:20:91:27:29:cc:3b:7b:41:
         9c:1d:ff:00:d7:ef:62:fd:e9:9a:32:a0:5e:9a:09:57:2d:df:
         ec:0d:f8:be:b1:7b:e5:fe:38:3a:5b:b1:4f:89:75:b0:42:1c:
         fe:f1:c0:53:95:94:8f:45:6f:69:a9:4c:2a:8f:2b:4a:f7:03:
         8b:81:bf:03:1b:21:1e:d4:d7:d8:a6:ca:40:03:98:05:14:86:
         41:ee:77:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:02:48 2026 by rpki-client