Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
File:                     uWCxR0bFh1JErjtpQWLsbYxjJV4.mft (raw, json)
Hash identifier:          ywbmUi7Py/Jw9PY9A44eEzGWXmFFBsq0BwHFgvbjGo8=
Subject key identifier:   7F:FE:CF:02:2C:B3:5B:B7:F4:05:98:2D:C0:D3:30:98:74:8D:98:0A
Authority key identifier: B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E
Certificate issuer:       /CN=b960b14746c5875244ae3b694162ec6d8c63255e
Certificate serial:       01A0BBE62D74C4E264221AEF91C43C833DEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
Manifest number:          1A64
Signing time:             Sat 19 Sep 2026 23:00:19 +0000
Manifest this update:     Sat 19 Sep 2026 23:00:19 +0000
Manifest next update:     Sun 20 Sep 2026 23:00:19 +0000
Files and hashes:         1: c8CsVa9fXYgke6S-ngSoGNntydo.roa (hash: Fwv89IU2a8LpbILl9PnyWFIyy2FdK+fO/FwW2CCp7u4=)
                          2: uWCxR0bFh1JErjtpQWLsbYxjJV4.crl (hash: LZ8nTYuyiYOXtd7JdfXmcoH+C6dWfOC7xqkp+yu/xL4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Sep 2026 20:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bb:e6:2d:74:c4:e2:64:22:1a:ef:91:c4:3c:83:3d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b960b14746c5875244ae3b694162ec6d8c63255e
        Validity
            Not Before: Sep 19 23:00:19 2026 GMT
            Not After : Sep 20 23:00:19 2026 GMT
        Subject: CN=7ffecf022cb35bb7f405982dc0d33098748d980a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:60:9f:39:2e:ef:53:51:75:63:dd:57:38:b4:
                    86:e9:80:58:0c:81:9f:76:c1:85:e8:f5:3b:ef:02:
                    a6:6b:22:69:6a:18:62:b3:56:60:73:94:39:b3:89:
                    27:ca:13:15:60:3a:11:5f:bd:5d:12:3f:60:39:a3:
                    85:e6:82:7f:b0:68:32:05:8d:1d:c9:ec:af:51:10:
                    8c:70:03:04:40:f7:b4:dd:cf:74:9c:79:8c:04:90:
                    56:55:ad:fa:d6:fe:5c:36:f9:8f:45:04:63:04:c4:
                    dc:a6:32:0d:de:08:0d:66:2b:d8:cc:06:e7:ee:9c:
                    bc:e1:13:a5:32:95:25:ff:57:f8:a6:75:b7:bc:e7:
                    be:ec:5d:01:7f:46:7c:ce:e8:04:01:e4:9a:3c:81:
                    9a:04:6d:a1:c2:cf:80:dd:27:b3:a9:4b:7e:82:4a:
                    d8:2a:e0:9a:cd:24:80:43:0f:93:fe:f8:ae:d6:dc:
                    41:f1:fa:b7:f0:c6:3f:27:42:6c:69:52:c0:6b:bb:
                    c1:d6:a0:08:e6:21:65:5d:fa:b0:51:bf:5a:53:2f:
                    e6:44:6c:2b:30:11:69:ea:de:cb:4d:97:15:77:78:
                    61:e5:85:31:00:7e:b2:55:cc:ea:3a:37:56:5e:6c:
                    45:9e:b8:28:f9:00:5c:09:20:e2:af:89:cf:9c:27:
                    47:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:FE:CF:02:2C:B3:5B:B7:F4:05:98:2D:C0:D3:30:98:74:8D:98:0A
            X509v3 Authority Key Identifier:
                keyid:B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:19:a2:c8:ce:94:eb:67:66:a3:b9:b2:4a:dc:59:59:86:71:
         59:5a:c0:6d:ed:bf:55:50:02:ab:9e:9c:df:b8:6c:69:62:ca:
         ec:5a:dd:a7:6d:d7:ce:ab:03:76:82:68:4b:c0:f6:49:40:11:
         47:73:a0:35:61:08:39:a2:26:d0:dd:e1:2e:aa:3a:5e:ad:f8:
         af:e4:40:58:8d:f3:c9:22:64:79:1d:c8:05:e6:29:98:03:3f:
         2c:8c:53:6b:a4:cc:61:9a:3d:7e:3f:a6:57:98:74:6c:57:4a:
         7e:38:28:6f:7d:e9:11:73:7e:84:56:e0:38:68:c7:9f:93:f9:
         6e:b7:df:45:d5:33:86:90:d2:80:29:02:53:6c:ae:9d:10:b6:
         72:1b:1a:f1:ec:06:9a:e8:3b:d7:52:d0:c7:dd:6d:15:91:0f:
         82:c9:49:06:d9:88:05:95:2d:81:cc:2c:e7:56:a4:25:5c:51:
         46:38:fa:5c:d6:45:20:cf:67:79:68:5f:0b:18:2c:88:e7:cd:
         18:39:fa:b7:c3:e8:ac:bc:bd:47:0a:68:0c:a4:53:66:a3:d2:
         ee:bf:4e:10:87:5f:4a:cc:51:1c:7f:9b:a4:5e:14:9a:4e:38:
         13:a4:3b:5f:c2:74:5e:52:cf:2b:6c:0f:e4:b5:54:3f:2c:10:
         7a:5d:15:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 02:34:42 2026 by rpki-client