Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
File:                     UNpYj16aHCr1a-CPfmosmYGrYCY.mft (raw, json)
Hash identifier:          V3uSvENcs/MhkE0T4FsTgSjNrV9xoxWaDMzKndqyVkM=
Subject key identifier:   E0:DF:16:08:54:7A:79:8C:F6:7A:31:48:1F:9C:71:AB:B4:70:91:D8
Authority key identifier: 50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
Certificate issuer:       /CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Certificate serial:       01A0815283A3FF83B67915507490093CAD0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
Manifest number:          0EAF
Signing time:             Tue 08 Sep 2026 14:01:03 +0000
Manifest this update:     Tue 08 Sep 2026 14:01:03 +0000
Manifest next update:     Wed 09 Sep 2026 14:01:03 +0000
Files and hashes:         1: UNpYj16aHCr1a-CPfmosmYGrYCY.crl (hash: Tg5ESXwyWkMZTX5/nzXupdjuVPdYhXXEIgEBuLhJU14=)
                          2: e-at-P8xiBcITaRp9MWoA0_N7Yc.roa (hash: 9wLByEu5Ei2XqfeNnvQ5SxG/GiSaQBkbBEsIrzP6Rl8=)
                          3: uB1EV_9of9OBUO5nh6wjIcM7XYM.roa (hash: JxjVwCsJHpCurdGu1ulwE9pvdYXZMK7HdluGzn2poh0=)
                          4: zGkoogpOSV7OrRFE8ZxQlbFMmf0.roa (hash: Lv+rOmGoTKRisbrnO2jtdKQEexKh+o81CnIGv9g18ac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 09 Sep 2026 14:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:81:52:83:a3:ff:83:b6:79:15:50:74:90:09:3c:ad:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
        Validity
            Not Before: Sep  8 14:01:03 2026 GMT
            Not After : Sep  9 14:01:03 2026 GMT
        Subject: CN=e0df1608547a798cf67a31481f9c71abb47091d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:42:01:20:c9:28:d8:29:43:71:da:b7:e8:ae:
                    b0:c8:bc:8b:63:26:bb:52:40:0e:86:19:00:04:8c:
                    c0:71:d0:50:86:f1:1e:30:4e:ab:43:7e:c1:37:36:
                    35:19:36:a1:8e:bb:fb:cd:09:1e:ad:cc:f8:c9:b8:
                    11:f6:91:53:c4:de:11:f2:02:7e:22:d1:ae:c0:7e:
                    f1:9b:4d:ef:8f:5f:9d:7d:ec:c9:46:64:7e:f4:a1:
                    d3:70:48:51:67:01:e0:a2:dd:2a:4f:e2:53:8a:44:
                    75:0c:bb:09:06:7a:9c:e1:27:68:a1:ea:42:5b:ac:
                    b6:eb:56:43:6a:8b:67:85:d4:e7:e3:c7:54:d9:e9:
                    4c:50:07:c5:e0:97:3e:c4:b9:14:06:fe:ec:3e:e1:
                    5f:97:44:4c:93:0c:60:50:ee:77:e3:d1:b0:9f:23:
                    21:96:8e:a5:05:11:e3:aa:68:77:4e:23:c7:58:4e:
                    8b:fb:37:98:f2:45:00:2f:56:78:0b:e7:32:2e:6e:
                    36:97:91:cb:de:41:44:e4:e2:08:28:61:f4:c4:10:
                    2d:75:42:2b:c1:a0:fd:fc:ed:c0:d6:c8:c6:01:df:
                    6e:4a:c1:f6:9d:db:c7:69:ef:bc:5d:27:dd:cc:b3:
                    13:f2:ea:f3:f3:70:d1:03:95:9f:56:37:f2:5b:4e:
                    22:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:DF:16:08:54:7A:79:8C:F6:7A:31:48:1F:9C:71:AB:B4:70:91:D8
            X509v3 Authority Key Identifier:
                keyid:50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:2c:95:17:98:0d:fa:a3:75:0e:8a:2a:98:ac:61:cd:81:37:
         fe:c2:b7:41:63:fb:90:80:2b:71:4a:c2:e6:e0:6c:5f:d5:04:
         df:62:57:89:c7:4f:a9:13:b0:71:7d:ca:c3:2a:1f:32:ca:a8:
         1a:6a:82:e4:01:2e:3a:aa:0b:37:bf:e9:5d:72:b8:ce:90:44:
         35:88:c2:a8:c0:3f:74:e8:2c:2c:45:86:3a:e1:13:fe:55:f3:
         a4:22:fa:51:82:e9:10:64:8e:fb:4f:3d:c6:c7:65:70:36:fe:
         7a:8b:dc:27:a3:6f:3a:47:f7:9c:f2:bf:27:78:eb:b3:a6:dc:
         93:df:92:63:20:23:73:99:99:b6:55:29:fa:08:8c:a7:f2:2d:
         66:df:13:ec:21:dc:ba:3b:31:44:f3:b7:f7:75:9e:45:ba:69:
         ee:ba:d9:26:e0:22:86:13:50:87:65:49:93:0f:17:95:64:f9:
         d4:fa:16:5e:1a:4d:fa:d1:f0:a5:6f:97:85:e6:74:c3:79:de:
         a2:f2:1c:a9:23:fc:69:73:cc:3c:83:6e:7b:8b:81:d7:56:34:
         8f:24:92:1c:7f:09:b8:91:70:34:5d:ce:dd:49:e7:b3:e3:5c:
         35:bc:50:f4:66:88:24:bf:1c:96:f6:bb:43:f0:2c:54:6b:7e:
         26:1d:dd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 01:33:25 2026 by rpki-client