Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft
File:                     uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft (raw, json)
Hash identifier:          DgJcj7QblprAhAWu4zUg59IowePPPSHgKNaBKonwqg0=
Subject key identifier:   4A:A3:90:E0:8A:36:5B:B4:DA:FA:3C:B7:EE:CA:95:42:40:3C:0E:11
Authority key identifier: BA:11:AE:23:A3:E9:C8:BC:6F:5A:79:C7:15:FA:99:A7:8C:F8:5D:FE
Certificate issuer:       /CN=ba11ae23a3e9c8bc6f5a79c715fa99a78cf85dfe
Certificate serial:       019FA1BC1502981FCFF7962B6DB95D74103E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft
Manifest number:          0D03
Signing time:             Mon 27 Jul 2026 04:01:25 +0000
Manifest this update:     Mon 27 Jul 2026 04:01:25 +0000
Manifest next update:     Tue 28 Jul 2026 04:01:25 +0000
Files and hashes:         1: KP9ZK8Mm0n7oCIGFwbCMB_IJtD4.roa (hash: 9E7/dOsgEeSFLc8nXYfohFpko6PoMkA7jZYSR5wWOOU=)
                          2: uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl (hash: YJa0CoXoQPMACl/fxCN9wNHo8IuaVFHn08iXLrra1MM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 04:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:bc:15:02:98:1f:cf:f7:96:2b:6d:b9:5d:74:10:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba11ae23a3e9c8bc6f5a79c715fa99a78cf85dfe
        Validity
            Not Before: Jul 27 04:01:25 2026 GMT
            Not After : Jul 28 04:01:25 2026 GMT
        Subject: CN=4aa390e08a365bb4dafa3cb7eeca9542403c0e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6f:5f:49:bf:15:50:13:2d:fc:74:8f:cb:bc:
                    8b:08:c2:d8:96:93:90:38:ec:7a:1d:5a:f1:c1:92:
                    82:af:a6:ab:51:76:62:23:5e:09:6f:4b:04:99:1f:
                    43:09:99:7a:81:de:a6:90:19:6e:eb:23:ec:2f:5f:
                    42:35:a5:0b:c2:58:75:b1:6f:8e:ef:74:64:84:73:
                    b7:99:32:b9:b5:12:97:9d:35:6a:b4:6b:67:98:57:
                    44:70:8d:9c:84:23:07:f4:8a:e5:6b:73:e4:15:f3:
                    41:29:69:26:83:3f:15:5e:2f:f9:3c:f0:9c:e1:07:
                    59:bc:62:be:fd:7d:a5:a4:b8:11:cb:8d:91:0a:25:
                    cb:2b:18:ca:e0:d9:ee:b5:9a:ee:da:c3:d0:24:a2:
                    ca:61:69:70:ae:aa:f8:0e:c0:53:92:6a:75:1a:32:
                    48:5b:a5:ba:98:2a:02:7d:3d:38:0b:9d:d5:d9:2c:
                    e6:4e:66:24:13:0b:f0:61:67:b9:a3:64:f1:f4:bc:
                    d9:f8:8c:b8:d8:9f:ca:eb:d8:6e:af:5c:03:b8:94:
                    b2:7c:81:fe:12:c8:47:3d:c9:30:87:3d:81:e9:2b:
                    c0:b3:e6:5b:c2:ae:16:31:06:39:02:1c:cb:aa:b6:
                    61:44:a0:f7:72:6e:8e:1e:5d:45:f0:35:1f:3b:a2:
                    4e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A3:90:E0:8A:36:5B:B4:DA:FA:3C:B7:EE:CA:95:42:40:3C:0E:11
            X509v3 Authority Key Identifier:
                keyid:BA:11:AE:23:A3:E9:C8:BC:6F:5A:79:C7:15:FA:99:A7:8C:F8:5D:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:d6:94:9b:d2:6c:35:af:d4:9a:d5:18:09:ff:a7:97:e1:d0:
         9d:3b:87:ec:9f:2c:9c:13:d4:4a:ad:57:92:09:14:74:12:96:
         ed:3d:e0:2e:c1:ed:26:ea:66:3c:02:52:4f:48:4f:c3:d6:7a:
         8d:cb:13:a0:fa:03:be:bc:0c:e1:0d:ed:56:7d:d7:69:f3:24:
         a9:7f:2b:89:87:62:de:81:11:3f:58:cd:d5:1f:f5:10:bf:23:
         9d:f7:07:7e:54:95:d9:46:c9:df:93:3c:1c:b8:1b:0d:ea:36:
         38:79:eb:ef:cc:8c:16:98:f4:eb:17:f8:01:34:04:21:f1:b8:
         32:1c:fd:c6:b3:b7:53:51:9b:47:1e:ec:84:54:30:0a:cf:dd:
         52:7f:28:5e:74:ab:ba:7e:77:eb:f9:82:ae:db:c3:b8:0a:85:
         8c:e6:1d:19:25:88:45:e3:75:25:c1:79:5e:2e:e6:ae:4c:78:
         26:ba:ae:ce:50:15:dc:0a:55:f8:dc:d1:ba:39:5a:60:85:c0:
         08:8d:52:a0:c5:3f:a3:a1:bd:65:1d:47:c7:e5:96:58:f1:5a:
         a0:04:87:ad:2f:76:1e:4f:15:5c:7a:08:38:d9:28:6b:3c:bb:
         75:bf:85:42:ea:d3:5f:44:67:da:c5:6a:b9:dc:29:66:57:b7:
         55:24:c4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:44:23 2026 by rpki-client