Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
File:                     uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft (raw, json)
Hash identifier:          ZV4gjjcv267sEv2CApcHPVynf/W+V4y3Xua6bXS3XeI=
Subject key identifier:   3A:08:B4:F2:B1:BF:1A:45:7A:44:A1:FE:35:7A:14:A7:6C:72:19:29
Authority key identifier: BA:E7:FA:77:F7:24:BB:46:73:25:AD:59:D7:DB:FC:63:39:9C:6E:79
Certificate issuer:       /CN=bae7fa77f724bb467325ad59d7dbfc63399c6e79
Certificate serial:       01A12C579B289B1BDA91B040AB2FF6D2DBDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
Manifest number:          1A46
Signing time:             Sun 11 Oct 2026 19:01:41 +0000
Manifest this update:     Sun 11 Oct 2026 19:01:41 +0000
Manifest next update:     Mon 12 Oct 2026 19:01:41 +0000
Files and hashes:         1: Lp4ADAtbUAnUUwmRXq0CRRE_xe4.roa (hash: /5OxQHC9qaJZIRED9fTxGtHMX/MOAtFVzPxTg7u1+8I=)
                          2: uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl (hash: P67Bj7Ky2K7jkzGgXBVBsfjn7cy5y/IhLeI92W8G3lc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2c:57:9b:28:9b:1b:da:91:b0:40:ab:2f:f6:d2:db:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bae7fa77f724bb467325ad59d7dbfc63399c6e79
        Validity
            Not Before: Oct 11 19:01:41 2026 GMT
            Not After : Oct 12 19:01:41 2026 GMT
        Subject: CN=3a08b4f2b1bf1a457a44a1fe357a14a76c721929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:33:88:57:a9:a0:45:f9:22:cb:a9:71:31:57:
                    a3:16:99:a0:19:c9:b8:3d:08:c2:14:7f:43:77:08:
                    de:1f:9d:9f:a8:b3:10:55:df:0a:4b:c4:8b:b4:a0:
                    b8:a0:f2:80:2d:9a:ba:9d:ac:e2:43:77:d3:62:cc:
                    42:03:0d:f3:83:e5:dd:69:56:24:d1:ff:29:c1:f0:
                    bd:9e:45:aa:de:75:f8:e0:33:ab:27:f3:15:bc:7f:
                    dd:a8:e2:a2:f9:e2:a7:f7:2c:03:a1:84:71:b1:58:
                    13:1e:b3:b5:6f:44:9e:0b:63:c2:90:16:f5:55:33:
                    7a:b9:03:9c:fb:4a:78:dd:00:a5:9a:0c:91:90:90:
                    b6:63:cc:0f:b0:b4:c6:fe:bf:a8:a1:5e:75:03:ac:
                    da:34:87:5e:54:c4:a9:2f:ce:1b:96:aa:a9:a3:2c:
                    53:5e:a3:a6:eb:28:90:4c:e2:35:b8:36:7d:4a:4c:
                    1a:14:c0:61:3a:78:ee:5f:c6:49:3d:5e:1c:51:02:
                    87:58:18:39:c8:48:b0:2b:31:6b:58:26:d6:8c:9d:
                    08:de:f1:93:43:0f:61:ac:f4:37:ae:e1:59:de:93:
                    88:cb:4d:7e:a6:cc:99:6c:cc:12:24:bd:dd:de:42:
                    ff:35:8f:c9:9c:59:97:e2:5d:d5:0d:18:39:41:90:
                    2a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:08:B4:F2:B1:BF:1A:45:7A:44:A1:FE:35:7A:14:A7:6C:72:19:29
            X509v3 Authority Key Identifier:
                keyid:BA:E7:FA:77:F7:24:BB:46:73:25:AD:59:D7:DB:FC:63:39:9C:6E:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:41:43:ab:79:0a:f9:80:e1:29:df:7c:85:a7:0f:5d:2d:16:
         00:1d:f1:a3:65:7f:8a:40:57:77:2c:6d:2e:e6:d8:a0:2a:f7:
         9d:f7:c3:48:af:1f:24:e7:bc:e5:42:a1:01:7f:30:d9:cd:be:
         26:de:d2:73:25:7d:49:2e:a7:66:f6:fa:97:a8:fe:85:ae:4a:
         08:e8:e4:dc:db:07:ea:08:48:61:6a:e4:11:fa:2a:90:8a:cc:
         06:65:7b:fb:1c:7b:ac:41:89:14:49:88:f6:79:81:7e:b5:61:
         7f:f9:ee:0f:ad:13:f6:5f:ae:b0:63:ae:38:7a:13:9e:3a:de:
         82:f1:34:0d:39:c3:07:1d:b6:2e:d0:d9:28:fa:a3:58:75:6b:
         93:14:b6:bb:f4:38:72:4a:30:b1:47:57:ad:a7:5f:e9:2a:6e:
         71:b7:8a:18:be:70:e6:da:3b:5a:88:df:cd:d7:9c:bc:f8:40:
         22:f2:bb:34:a2:5e:a6:46:0a:36:6e:11:96:75:12:75:26:ab:
         0e:ea:5f:10:10:60:56:3a:1b:42:f9:92:b1:5b:9f:bc:ba:97:
         5f:8a:d0:37:21:2e:38:f0:cf:2f:ae:f8:09:78:f3:7a:5a:96:
         c6:31:65:14:c5:87:a3:26:46:64:c5:0f:c8:c1:5c:f0:b8:9c:
         b4:de:ba:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:56:58 2026 by rpki-client