Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
File:                     uNWz03nSEWLitSLEOAH7lgOYgkU.mft (raw, json)
Hash identifier:          uXpqrCB8JaDGsxf69ujQcDTDuPaMw6ZIOL2oBfGRCgE=
Subject key identifier:   6B:89:5F:A0:DE:EA:F8:72:9C:D3:38:39:84:C2:27:DC:61:0C:60:E0
Authority key identifier: B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45
Certificate issuer:       /CN=b8d5b3d379d21162e2b522c43801fb9603988245
Certificate serial:       01A0021413B0E7F9B0E22BB92D593F37E054
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
Manifest number:          1137
Signing time:             Fri 14 Aug 2026 21:01:05 +0000
Manifest this update:     Fri 14 Aug 2026 21:01:05 +0000
Manifest next update:     Sat 15 Aug 2026 21:01:05 +0000
Files and hashes:         1: 1-f_gAb-UQuyps_IPI3M8vQhRtGo.roa (hash: NsL25xCV1UtSE0/W9VwZvUIiaucE1NUxNcTSiDnaYao=)
                          2: ditshtsYxKYvOT3dCWLRDUMEGJ0.roa (hash: o6hcseRZVR0gI7jc0jlgzutuSsEvFXNX+MVW1GVHnBQ=)
                          3: eS8NOcR5VsM5X-FoIr-qZi-nfSQ.roa (hash: oTJIYUc5ybeC7DTGSDxwOuEroX+3xhqZe6zX/QEBvRI=)
                          4: uNWz03nSEWLitSLEOAH7lgOYgkU.crl (hash: DMsvia1SkOiwChlolnp0/jPURkMSXz4vHbaKvna0OIo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 21:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:14:13:b0:e7:f9:b0:e2:2b:b9:2d:59:3f:37:e0:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8d5b3d379d21162e2b522c43801fb9603988245
        Validity
            Not Before: Aug 14 21:01:05 2026 GMT
            Not After : Aug 15 21:01:05 2026 GMT
        Subject: CN=6b895fa0deeaf8729cd3383984c227dc610c60e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:97:c7:6c:e7:86:09:30:0b:24:14:cd:f9:00:
                    df:c2:63:0d:72:f8:aa:5a:ba:80:bc:5e:c5:64:fe:
                    7e:ba:ab:0b:a1:a3:73:ff:9d:6b:08:3e:c8:7f:75:
                    8f:f5:b3:20:cf:ab:cb:17:78:fa:c2:77:4b:53:8f:
                    20:27:9f:55:76:d7:4f:db:0d:3c:a3:43:da:27:39:
                    17:f1:69:b4:0e:4b:e9:f6:13:7c:18:3b:6d:e0:0a:
                    18:c9:ba:6c:96:5a:a9:8e:2d:0b:6e:64:32:c5:96:
                    4f:33:91:12:8c:a6:dd:a0:cf:6e:08:5f:d9:5f:13:
                    f1:cc:bd:29:d2:ac:5c:f0:db:b2:a8:71:6f:43:d3:
                    59:f3:b2:b0:aa:60:37:e7:c2:b0:2e:de:08:44:c2:
                    01:5f:10:fb:53:84:04:7d:01:26:6b:09:3e:24:ea:
                    1d:20:8d:d7:be:fa:a6:2a:a9:2f:e6:a9:68:39:f5:
                    3c:b9:ce:72:d4:5b:42:17:e6:d2:48:d5:88:4b:06:
                    73:e9:05:6e:64:a3:ef:d8:93:aa:e5:a6:b5:33:92:
                    a7:ad:61:a9:16:f3:b0:10:92:57:d4:43:ba:db:5f:
                    63:0a:81:4e:d6:47:e9:95:e3:c1:25:88:7b:c0:31:
                    33:9a:c2:2e:7f:7d:3a:d7:46:ff:1f:aa:e8:fe:e2:
                    d5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:89:5F:A0:DE:EA:F8:72:9C:D3:38:39:84:C2:27:DC:61:0C:60:E0
            X509v3 Authority Key Identifier:
                keyid:B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:73:c5:52:3b:d6:e3:95:e3:50:a9:ea:e3:32:e1:7f:dd:b0:
         74:4a:6a:ce:f0:ee:4a:d5:0d:b5:6a:72:c1:95:12:a8:a5:1b:
         e9:0c:ac:b4:37:ec:1c:95:80:81:69:80:96:29:e8:e8:2d:1a:
         3f:1f:04:63:b4:5c:67:db:cc:84:b9:9a:e9:4e:f0:c8:d8:ad:
         5c:3f:70:3e:34:95:55:e2:4a:2f:25:54:92:0f:2b:1d:31:55:
         ae:dc:f4:98:a4:da:85:bc:85:11:a4:ba:91:7e:9e:31:e9:41:
         1a:26:73:b1:d6:2d:39:c1:02:9a:9c:f1:7b:3f:cd:cc:30:98:
         59:1d:e0:e6:49:9e:29:d2:0a:ca:7c:d2:6e:8b:b5:fc:9e:00:
         c6:23:b2:25:68:e0:90:8f:a8:de:ab:22:3e:f6:a9:33:7e:90:
         17:1f:48:57:96:b1:09:af:a4:ab:eb:b9:4c:ca:72:00:82:23:
         b2:e2:0f:1f:4d:2e:78:8f:c3:f8:6d:35:3c:e4:d7:21:a5:a7:
         55:3b:62:25:77:52:71:fa:b9:b5:c2:d2:fa:09:82:f2:45:0a:
         b8:b3:23:df:a4:a4:49:c4:9e:43:c4:d8:7e:55:6b:59:d2:c9:
         34:1f:e6:0c:c2:df:e8:ad:3b:9f:17:6f:97:6c:f0:e6:22:c9:
         67:e6:bd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:03:29 2026 by rpki-client