Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft
File:                     uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft (raw, json)
Hash identifier:          63zYDMVt6bVSms/yTn9Uug6bRajPseWEHjm3vxvbBqE=
Subject key identifier:   15:8D:7E:39:3A:CB:B1:33:4E:BB:30:8F:3B:CA:5B:30:FB:8B:74:CC
Authority key identifier: B8:7B:BF:8E:5C:74:A5:26:BA:AF:61:85:AB:D9:49:DA:FA:8F:6D:CB
Certificate issuer:       /CN=b87bbf8e5c74a526baaf6185abd949dafa8f6dcb
Certificate serial:       01A0B576C45F7AE31FE2D9453E9381E9C46B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft
Manifest number:          0CD7
Signing time:             Fri 18 Sep 2026 17:00:54 +0000
Manifest this update:     Fri 18 Sep 2026 17:00:54 +0000
Manifest next update:     Sat 19 Sep 2026 17:00:54 +0000
Files and hashes:         1: DkZq0zpUFhASpEE4ImZTT8jsmXs.roa (hash: DqNcDnHcsyHeYm9qtIpPz2EwaV9dY65pLLq3MnQC1Qk=)
                          2: uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl (hash: QCVMP7Uo09XsmUrgY/7opiK/gyz2R4IK+Z2+1FP/pYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 16:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b5:76:c4:5f:7a:e3:1f:e2:d9:45:3e:93:81:e9:c4:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87bbf8e5c74a526baaf6185abd949dafa8f6dcb
        Validity
            Not Before: Sep 18 17:00:54 2026 GMT
            Not After : Sep 19 17:00:54 2026 GMT
        Subject: CN=158d7e393acbb1334ebb308f3bca5b30fb8b74cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:21:e6:c6:a6:f8:31:05:4e:b7:1d:c1:5f:15:
                    0c:e8:14:95:da:09:c5:ca:81:fe:0e:f4:fc:59:ca:
                    23:43:12:d8:31:04:10:64:9e:b7:b1:2b:f1:93:21:
                    90:b7:9f:63:c3:9b:63:53:95:0a:c5:6d:53:a5:5a:
                    27:ff:b1:49:95:25:1b:df:5a:7b:90:d1:db:1e:f5:
                    9b:00:ff:98:17:8b:fd:93:44:60:5a:3e:c6:56:1e:
                    e6:30:7d:2a:55:c7:55:b3:41:84:ab:5c:57:f5:13:
                    b7:3e:96:4f:48:2f:de:08:b3:40:c8:e6:14:c0:0d:
                    a3:5e:4e:49:dd:1a:24:40:46:bd:21:a9:e4:17:40:
                    97:a3:e6:70:18:eb:09:f3:09:85:22:3d:a1:15:ed:
                    56:cc:f2:29:21:d4:8c:21:0a:47:37:aa:c0:a1:c5:
                    6e:04:c4:83:db:c6:27:75:0b:af:aa:89:b5:27:66:
                    c9:f3:9e:1d:c4:42:d4:dc:2e:5e:17:71:d8:1a:69:
                    29:5b:30:7b:bd:2b:e9:05:89:0e:7e:40:44:fb:e7:
                    43:d5:a9:1c:80:89:e4:03:1b:e1:8a:c3:b1:97:bf:
                    43:0a:0f:75:0e:b1:17:59:be:5f:ac:7e:78:25:ef:
                    f7:aa:51:e8:13:8a:c1:35:cb:ed:9c:89:54:77:6f:
                    2f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:8D:7E:39:3A:CB:B1:33:4E:BB:30:8F:3B:CA:5B:30:FB:8B:74:CC
            X509v3 Authority Key Identifier:
                keyid:B8:7B:BF:8E:5C:74:A5:26:BA:AF:61:85:AB:D9:49:DA:FA:8F:6D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:7a:a1:b8:0a:44:8d:7e:01:8a:74:90:aa:ca:72:e2:3d:de:
         f5:7f:b6:ad:2a:da:ab:0b:de:54:2d:7c:c3:ea:56:28:da:c9:
         4c:ac:3a:7e:f8:1a:a6:c5:7e:2f:d5:f6:f3:8b:48:7c:34:55:
         62:79:38:84:47:17:19:11:28:fd:ba:37:b0:d7:74:07:9c:a4:
         dd:f1:c0:d3:64:97:14:3b:e8:31:1b:33:48:ad:b3:c8:da:f8:
         54:bb:50:6f:35:d3:a2:1e:77:b9:b7:b4:22:ec:5e:34:fc:92:
         c7:a7:65:93:03:17:7c:4c:88:4d:e6:f1:26:1b:bf:5d:76:92:
         32:6f:54:18:5e:03:cf:a6:e7:42:9d:55:8f:9e:c6:ce:45:4f:
         64:0a:01:f5:8d:36:1e:15:1a:bf:fb:a4:f4:12:94:00:fc:24:
         1f:ba:e0:d5:b1:cc:bb:ff:86:5f:a3:9a:19:a0:90:5c:ad:f4:
         d5:8b:d2:8e:b6:fe:dc:b3:ca:09:ac:e4:1e:37:c1:40:43:22:
         f7:7c:2f:67:a8:77:ea:18:ef:2e:51:ce:27:0b:ba:73:1c:6c:
         71:76:59:ff:89:99:7b:02:f8:8e:c4:56:e2:eb:ff:df:f9:8e:
         31:94:21:a5:fa:92:c9:55:4a:92:a3:03:e9:ab:03:93:20:92:
         5b:a8:f8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 23:05:58 2026 by rpki-client