Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
File:                     uUTKLZktd4WAC91VJNPhE4PZ8d4.mft (raw, json)
Hash identifier:          Ac8IMAGJpFwc4ZAHZvbSCf4mxWHMQImxgNOmAHpq1c8=
Subject key identifier:   D2:0A:23:C4:30:FD:39:92:C5:92:D2:C1:94:53:3B:B0:91:4A:0C:F0
Authority key identifier: B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE
Certificate issuer:       /CN=b944ca2d992d7785800bdd5524d3e11383d9f1de
Certificate serial:       01A14B0683995248AF35F997611CE19C2133
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
Manifest number:          16E0
Signing time:             Sat 17 Oct 2026 18:01:20 +0000
Manifest this update:     Sat 17 Oct 2026 18:01:20 +0000
Manifest next update:     Sun 18 Oct 2026 18:01:20 +0000
Files and hashes:         1: UhAbETd73I_RNmPinYlIjwaxS5A.roa (hash: 72Y1aXwOgGGk1TvFfLXba73tNjzJqcFFrwUxU2i0lEg=)
                          2: uUTKLZktd4WAC91VJNPhE4PZ8d4.crl (hash: ZSu6CKDoclFb6zglGHbVReZr7gG/mRjEVk/Huj49/v0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 18:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4b:06:83:99:52:48:af:35:f9:97:61:1c:e1:9c:21:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b944ca2d992d7785800bdd5524d3e11383d9f1de
        Validity
            Not Before: Oct 17 18:01:20 2026 GMT
            Not After : Oct 18 18:01:20 2026 GMT
        Subject: CN=d20a23c430fd3992c592d2c194533bb0914a0cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4c:92:5d:6f:15:e7:e6:74:41:f9:9d:84:e5:
                    49:a4:1e:44:a7:fd:a9:5d:c4:ef:61:63:8d:90:db:
                    39:42:a6:1c:5a:e0:88:e7:ac:f1:1a:7d:46:1a:46:
                    ac:25:7b:33:9b:d9:b7:cf:f8:7b:48:28:f7:81:fb:
                    78:ad:f6:08:5d:73:64:0e:e1:2b:a4:07:ce:ff:e0:
                    44:a6:7a:dd:db:73:b5:45:91:8e:c8:f1:f5:b5:1e:
                    e0:6d:13:6f:85:6a:28:b4:0d:57:a0:a2:e2:bd:ca:
                    aa:b4:e7:b8:c7:27:75:c7:68:47:02:42:80:71:00:
                    d8:4b:8a:7c:9f:68:82:0c:19:2b:90:3f:cc:49:0d:
                    e0:b0:77:b4:f4:fe:f7:33:fe:db:8c:92:c6:a5:4e:
                    46:38:bb:ff:36:81:b0:1d:02:53:60:df:f1:85:4f:
                    7b:b7:3d:94:3f:d1:e9:92:01:6b:ea:35:db:2e:78:
                    d7:4b:6d:f9:59:3a:59:3c:2b:a5:92:fd:83:72:e5:
                    21:fe:1d:5e:f6:d7:43:84:eb:7f:11:22:f7:3a:36:
                    8e:e0:33:59:f3:0c:71:2d:2e:72:56:f6:ac:22:df:
                    54:bd:5c:4e:0c:95:35:82:80:b5:9b:d9:2b:bf:96:
                    b0:0f:66:55:5e:c0:38:e7:a0:a0:cd:02:e5:07:6a:
                    69:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:0A:23:C4:30:FD:39:92:C5:92:D2:C1:94:53:3B:B0:91:4A:0C:F0
            X509v3 Authority Key Identifier:
                keyid:B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:d7:d4:5f:53:7b:3a:0b:b9:76:3f:4a:97:20:9e:38:2d:8e:
         8f:5e:91:02:c3:f9:a9:fe:44:47:1d:b5:ea:f1:d5:62:ff:8f:
         d0:16:26:86:b6:90:b7:f0:5f:9e:b0:4b:89:f1:37:4b:27:03:
         bb:6e:43:b3:d7:55:37:f0:4b:6f:41:5d:c9:0f:49:26:47:75:
         cc:27:c5:78:2b:9f:0a:04:be:79:eb:fa:1e:5e:c0:8b:f0:57:
         ff:a2:cb:f5:10:dd:0d:c8:1b:42:4b:2f:04:36:d6:05:58:bf:
         4b:26:bd:03:f3:da:77:14:b5:e6:06:8f:1c:4f:b8:5b:a4:b1:
         70:82:93:51:f2:52:0d:05:e1:c6:bb:98:71:2f:df:4b:44:ef:
         05:c8:04:df:46:29:bc:fb:1d:4f:d9:c0:08:a6:50:39:12:9c:
         6b:ee:d7:01:3f:c0:b1:ed:50:06:b8:4d:3a:28:09:26:61:5e:
         84:ad:d9:6b:6b:fe:6c:6d:e0:dd:6e:6c:f1:00:da:49:89:bb:
         ff:ac:a5:f3:4a:4f:3d:f9:bc:70:3a:e8:ae:71:b4:e8:c3:0c:
         d4:54:a1:a8:08:fc:95:50:56:7b:db:e0:34:5d:a4:0a:2a:10:
         82:ae:77:0d:59:d6:67:01:3e:95:2c:4a:66:52:48:1f:ac:0f:
         59:1f:17:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 03:19:31 2026 by rpki-client