Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.mft
File:                     uEboVBh_kzKVTGDgjDNRr83xCFs.mft (raw, json)
Hash identifier:          EbpvBG7vDlCY/t5BWgSDgXtL+6T8t3ksKyDY4Mqm16U=
Subject key identifier:   2F:67:DD:59:8C:3D:98:81:36:AE:70:C6:9D:AB:CB:CD:FB:84:FE:F5
Authority key identifier: B8:46:E8:54:18:7F:93:32:95:4C:60:E0:8C:33:51:AF:CD:F1:08:5B
Certificate issuer:       /CN=b846e854187f9332954c60e08c3351afcdf1085b
Certificate serial:       01A0B72E3D862C36649EC3784134797BA926
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uEboVBh_kzKVTGDgjDNRr83xCFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.mft
Manifest number:          0A8F
Signing time:             Sat 19 Sep 2026 01:00:55 +0000
Manifest this update:     Sat 19 Sep 2026 01:00:55 +0000
Manifest next update:     Sun 20 Sep 2026 01:00:55 +0000
Files and hashes:         1: LoU6bInR-t2CDpwfpMzLYbLy3pA.roa (hash: 7e0dmQJEvRFv5WAuIm9ehE3YMHYXzzfWjHPD+c3OUhs=)
                          2: uEboVBh_kzKVTGDgjDNRr83xCFs.crl (hash: 0HegWltpUw/t4XcRB1RxdGOmx43ut9eKpbFEqoljrno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uEboVBh_kzKVTGDgjDNRr83xCFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b7:2e:3d:86:2c:36:64:9e:c3:78:41:34:79:7b:a9:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b846e854187f9332954c60e08c3351afcdf1085b
        Validity
            Not Before: Sep 19 01:00:55 2026 GMT
            Not After : Sep 20 01:00:55 2026 GMT
        Subject: CN=2f67dd598c3d988136ae70c69dabcbcdfb84fef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b3:91:0b:9c:55:1b:7b:5d:ae:5c:eb:be:04:
                    f1:c8:b0:6c:30:01:32:b2:3f:51:9d:8c:90:57:d8:
                    c7:62:63:df:5b:45:4f:b0:eb:d8:0b:a0:ea:9e:95:
                    dc:93:e1:91:b8:a9:ec:50:98:b3:ae:58:e7:f2:5b:
                    fa:fa:96:c2:a0:aa:51:ce:9e:9e:4f:34:9f:d0:1d:
                    04:cd:7c:be:a1:6b:2f:f7:e8:77:ff:3f:d8:4b:14:
                    64:3e:88:da:50:f3:f3:4d:72:9e:73:37:e8:f6:64:
                    e9:00:62:23:3f:b4:09:31:f7:ed:dd:23:61:c7:c4:
                    34:ab:24:0b:4b:c8:8a:22:05:4c:33:d7:c3:83:8a:
                    22:5f:d8:cd:c0:1e:27:d4:0c:fe:c3:9d:ac:f3:fc:
                    fb:f8:d6:c4:e4:d9:76:8a:0c:25:d5:d3:06:43:80:
                    3a:28:ff:30:18:c0:2a:8a:0b:f7:5e:a9:ab:9b:8d:
                    98:e3:a0:90:8d:1a:b8:89:4f:f8:e8:cc:dc:c6:5c:
                    a5:13:9b:eb:81:d0:b4:85:27:44:04:72:e8:e0:2b:
                    54:0f:0f:2c:ab:f9:34:60:ef:4f:47:33:dd:53:5a:
                    81:fc:0f:71:bc:d7:68:d8:65:4b:1a:fd:71:b8:26:
                    48:f0:16:39:6c:8b:f5:d3:d5:f7:3b:dc:5e:e6:a7:
                    d2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:67:DD:59:8C:3D:98:81:36:AE:70:C6:9D:AB:CB:CD:FB:84:FE:F5
            X509v3 Authority Key Identifier:
                keyid:B8:46:E8:54:18:7F:93:32:95:4C:60:E0:8C:33:51:AF:CD:F1:08:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEboVBh_kzKVTGDgjDNRr83xCFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:b6:c7:63:b6:90:29:17:8e:0c:86:f8:22:68:c2:73:44:57:
         06:75:a1:65:e7:f5:39:3c:42:fe:0f:7c:33:7e:e6:45:93:b3:
         1d:c1:d4:3d:3b:13:af:75:b3:b4:37:9a:bf:39:86:22:fc:6e:
         33:74:be:f0:47:05:23:4b:8d:f6:11:65:56:13:b2:cf:f7:05:
         1b:4e:14:32:b9:d1:c8:5b:68:47:b4:eb:da:66:2b:81:8b:f6:
         75:b6:75:ff:ff:e6:97:5a:de:27:91:d9:19:64:1a:59:9e:62:
         fc:86:a9:1c:b4:83:1d:30:f6:69:59:d5:a3:61:10:03:74:1e:
         e5:3f:bf:17:c9:80:85:c0:a8:b0:4b:5c:f5:ae:38:e5:80:a5:
         44:5a:a7:86:95:4c:f6:81:4e:48:30:73:3d:4b:60:3f:35:3f:
         00:26:85:59:b3:3b:e8:71:7e:2a:f7:4b:66:d5:5d:6a:cc:39:
         50:72:e1:41:b7:fb:d8:40:2b:d0:a4:07:8a:48:38:cb:4d:a7:
         e9:37:2c:24:99:eb:58:8a:bc:b1:32:3b:e5:5e:2f:85:09:23:
         ae:f7:bb:da:d6:c4:c0:43:1d:0f:1d:ee:fd:e9:06:4a:42:46:
         54:d7:f4:80:50:84:06:6b:aa:bd:80:49:8e:7f:fb:9d:32:2b:
         38:b8:b7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 03:41:40 2026 by rpki-client