Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft
File:                     uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft (raw, json)
Hash identifier:          ictvxGV0/vvLuDFMMvB/Ukw2y4WkJINZJUXnmmfN+d0=
Subject key identifier:   28:06:43:23:B8:09:8E:AC:6F:06:B4:E9:B6:A8:1B:8C:E8:E6:BD:CC
Authority key identifier: B8:7B:BF:8E:5C:74:A5:26:BA:AF:61:85:AB:D9:49:DA:FA:8F:6D:CB
Certificate issuer:       /CN=b87bbf8e5c74a526baaf6185abd949dafa8f6dcb
Certificate serial:       019FCBCAA70DDA63C678FACCF3A942BE006F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft
Manifest number:          0C5E
Signing time:             Tue 04 Aug 2026 08:01:23 +0000
Manifest this update:     Tue 04 Aug 2026 08:01:23 +0000
Manifest next update:     Wed 05 Aug 2026 08:01:23 +0000
Files and hashes:         1: DkZq0zpUFhASpEE4ImZTT8jsmXs.roa (hash: DqNcDnHcsyHeYm9qtIpPz2EwaV9dY65pLLq3MnQC1Qk=)
                          2: uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl (hash: mOuwFyZXpEZL9UWBZi2b/jlBs9ElU1dZOr06MPLoaRE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cb:ca:a7:0d:da:63:c6:78:fa:cc:f3:a9:42:be:00:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87bbf8e5c74a526baaf6185abd949dafa8f6dcb
        Validity
            Not Before: Aug  4 08:01:23 2026 GMT
            Not After : Aug  5 08:01:23 2026 GMT
        Subject: CN=28064323b8098eac6f06b4e9b6a81b8ce8e6bdcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bf:a5:a0:11:42:be:c3:86:ef:e2:76:7b:e4:
                    78:69:d6:00:ad:ed:97:44:ab:da:3f:37:ab:b0:57:
                    ee:83:b8:3e:a0:85:4a:b0:1e:c4:8d:c7:f5:84:34:
                    77:8b:28:b0:5c:6c:77:94:34:a2:46:7d:0b:76:f1:
                    49:e9:77:cc:29:94:14:e2:e8:84:7a:49:9f:e4:e9:
                    be:60:7b:79:bf:af:17:05:77:3a:6c:89:54:57:85:
                    6f:61:53:4c:50:ec:cb:90:9b:4c:d2:26:23:fd:c7:
                    ff:f4:bc:d0:36:60:91:6a:c0:3c:c0:2f:20:20:b7:
                    9a:90:0e:01:10:50:12:35:af:35:b6:49:ba:d0:fa:
                    f9:57:d2:b5:02:63:56:b3:68:a6:a1:70:a4:df:2c:
                    7f:f1:94:8b:42:82:96:f0:23:3c:97:ad:cc:92:e1:
                    b2:cf:a5:c5:40:71:e0:44:a5:58:37:2a:7a:07:f0:
                    2e:9f:65:19:26:e4:ea:d9:b6:03:1d:23:cd:27:d9:
                    8c:16:eb:03:c2:be:c3:79:21:81:4e:35:e0:de:15:
                    7a:d6:f5:b4:1d:3a:6e:ef:06:53:79:1c:a2:fc:b8:
                    ec:0a:97:97:f0:5f:07:4f:4a:93:c6:22:46:01:14:
                    8a:77:5f:c0:35:51:5c:d4:27:d4:3e:7a:2f:c2:ee:
                    17:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:06:43:23:B8:09:8E:AC:6F:06:B4:E9:B6:A8:1B:8C:E8:E6:BD:CC
            X509v3 Authority Key Identifier:
                keyid:B8:7B:BF:8E:5C:74:A5:26:BA:AF:61:85:AB:D9:49:DA:FA:8F:6D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:61:d2:c3:0c:46:4f:c4:0e:a2:3d:7d:c5:a9:af:95:0e:d4:
         98:1c:24:aa:75:e3:e7:27:b5:4a:4f:80:52:96:fa:11:c9:b8:
         dd:da:ee:fa:d7:8b:f3:b7:45:16:02:8d:76:39:7f:28:d4:39:
         8b:7f:fd:c2:b8:8a:27:32:be:96:94:ed:6c:f7:a2:36:53:d7:
         2f:ca:db:e5:44:07:30:56:81:ea:86:78:9e:23:34:16:bf:6c:
         dc:2d:25:06:7e:f2:38:7f:e0:9d:2c:78:b6:f1:37:65:32:d6:
         93:d2:8e:29:33:9e:59:6e:d6:fc:ad:3f:45:d6:c5:75:49:0e:
         b1:fe:f2:80:da:e7:db:8c:33:a1:01:6b:d3:19:57:bd:94:ac:
         75:01:f5:24:5a:5f:ab:73:6c:2b:25:dc:ea:94:a9:5d:fa:8c:
         5f:8c:37:3e:63:1d:18:ec:15:cf:97:15:d5:2d:a0:a3:6a:35:
         ff:2e:bc:84:ac:31:f8:f2:a6:44:f8:87:cc:0e:6a:3b:43:ac:
         09:50:59:dd:08:ce:05:e5:4f:7c:1f:15:41:c0:8e:73:49:07:
         96:4e:80:de:11:99:ec:ff:ba:f7:44:2b:46:86:5d:83:f4:85:
         28:2b:31:2a:7d:38:16:a8:1c:ea:b9:34:34:99:87:18:fc:35:
         d8:fc:8d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 14:00:45 2026 by rpki-client