Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
File:                     UhowB3IjwlxvN9z1lIB3jAtbEGg.mft (raw, json)
Hash identifier:          we/QGK55A8I+Qlkuas7KOETozaViDgzgpuQddxsFtYY=
Subject key identifier:   EE:47:89:12:7D:1B:D4:73:77:E0:2B:2C:E7:EA:BB:B9:FD:98:48:9E
Authority key identifier: 52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
Certificate issuer:       /CN=521a30077223c25c6f37dcf59480778c0b5b1068
Certificate serial:       01A01375AB7458E886870C92F9CAB08D2BA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
Manifest number:          07AF
Signing time:             Tue 18 Aug 2026 06:01:13 +0000
Manifest this update:     Tue 18 Aug 2026 06:01:13 +0000
Manifest next update:     Wed 19 Aug 2026 06:01:13 +0000
Files and hashes:         1: 84SPRa3_ewxAnHZXEwBV1kLi3VM.roa (hash: xgIumFcFLchK1z/1Csr0/oD3z8aKLtyk1tFqPTQqxyc=)
                          2: B27nWL7f9vpF233InTtbaWdT1gY.roa (hash: K0asGHISIlJb0z9vg2XL1HxPcsZDl9Isvqzrusz0DAM=)
                          3: HdV5DSl350h-lbh-TN4zh4FfqZg.roa (hash: Tf/ZSSv57NTvJyODzYy+ZLfHUFt2upVkz6yStWywhz8=)
                          4: UhowB3IjwlxvN9z1lIB3jAtbEGg.crl (hash: q5r6nP3HRWcYV6zpnAbPPWe2BkrhimNmm3c2vchhbjQ=)
                          5: _pMAzQKRKR13xl3uGDGCl2hCPIo.roa (hash: 5qQNZWBbvk2jxeJhrao+q24FJuEwboPGan3bLmujgOM=)
                          6: hCxkK3tHuqUrY0c51_Pu1X-lD1E.roa (hash: 2q6gI5yUFT+GtMB/2xyZdJMaVjKX7qKHcOOGGZrqRFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 19 Aug 2026 06:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:13:75:ab:74:58:e8:86:87:0c:92:f9:ca:b0:8d:2b:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521a30077223c25c6f37dcf59480778c0b5b1068
        Validity
            Not Before: Aug 18 06:01:13 2026 GMT
            Not After : Aug 19 06:01:13 2026 GMT
        Subject: CN=ee4789127d1bd47377e02b2ce7eabbb9fd98489e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:49:84:6d:9b:61:90:3e:34:9a:a2:82:45:cb:
                    91:e8:5d:b2:42:99:e1:2f:67:53:a4:c3:07:cd:e0:
                    b3:79:17:1b:37:c6:c1:f3:d0:fa:bc:27:82:d0:f0:
                    88:00:4a:69:b5:2c:f3:47:b8:77:7d:27:15:7f:6d:
                    58:1e:d4:cb:57:79:ff:04:36:dc:95:e9:e4:e9:a0:
                    cb:50:6f:44:20:ce:81:0b:6f:62:d9:bb:1f:e9:ba:
                    5a:7d:75:5e:28:9a:bc:60:6b:45:a0:63:92:db:35:
                    f9:66:b5:b8:8b:db:1f:a1:9c:de:ae:d9:37:c0:ef:
                    ad:d2:98:cf:71:20:2c:d9:0c:b2:70:34:05:a4:44:
                    63:06:25:f4:53:aa:78:4e:f5:f7:9e:bb:80:92:38:
                    e9:5b:77:35:a2:e6:e0:9f:7e:4b:55:41:bd:7d:49:
                    ef:0b:df:4b:28:54:f5:d6:ed:c1:72:51:f7:5a:b2:
                    f0:79:4d:7d:0f:d0:5d:87:28:88:73:65:d5:f7:b0:
                    f6:08:c2:d0:e5:f0:04:29:99:26:91:d0:c6:f2:fb:
                    fb:59:50:89:3d:e0:3e:7b:84:36:6f:c0:ae:fd:eb:
                    91:2b:8b:b1:25:ca:ac:f3:d5:96:6b:c1:67:d2:73:
                    46:96:bb:87:77:40:c7:4a:0d:36:77:bc:bb:03:c7:
                    d3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:47:89:12:7D:1B:D4:73:77:E0:2B:2C:E7:EA:BB:B9:FD:98:48:9E
            X509v3 Authority Key Identifier:
                keyid:52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:b3:54:ef:7a:37:65:3e:7c:61:7b:ea:1b:d0:3f:0b:9c:ea:
         30:3b:e4:8c:50:cb:99:a5:e2:e2:9d:29:5c:40:66:6e:40:71:
         6e:c7:75:bc:92:b8:f1:dd:46:3c:1b:26:fa:51:7c:fb:60:b8:
         b7:55:cf:23:bb:fb:7f:12:f5:68:ab:37:62:6c:3d:d4:d4:85:
         44:26:ef:87:ea:b6:25:d1:db:48:4b:11:32:32:0c:78:3e:b8:
         eb:9c:0a:72:25:b6:e1:0c:a1:33:c1:2e:b3:be:c2:bc:16:56:
         08:35:8e:33:48:9b:76:06:e0:78:21:37:97:df:1b:d6:a8:2d:
         7b:6d:2c:a8:ba:5b:0a:a6:ed:8d:3e:c6:e3:3b:d2:3f:1e:1d:
         41:9e:5b:92:74:87:17:cc:82:fc:1e:2b:58:3f:9d:99:af:a8:
         c4:35:6a:77:5e:71:bb:a5:b5:fc:99:e4:69:a9:f0:b4:9e:91:
         cc:31:25:24:16:8d:97:e7:69:11:0b:88:b6:2d:ac:08:6f:82:
         fb:bd:42:d4:6b:b2:84:85:73:23:8d:3b:27:ec:d7:3a:88:6a:
         c1:46:46:90:8e:f8:8c:c7:f2:a7:5f:cd:09:49:ee:b5:2a:a9:
         e0:df:58:62:ce:6d:b9:18:e7:b5:85:c5:d7:22:ff:71:6b:58:
         ba:65:69:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 10:40:25 2026 by rpki-client