Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
File:                     ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft (raw, json)
Hash identifier:          FHP37kEQ+CYRi6fA40mWrhw4Q7QFYiZGivk8tGKxtoo=
Subject key identifier:   87:5D:D2:16:D4:82:5D:7B:46:2D:F6:F9:88:6E:6C:BA:7F:44:1B:72
Authority key identifier: BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94
Certificate issuer:       /CN=ba515836af300f7c71f71dd18b9c3f51c252bb94
Certificate serial:       01A178BA75B6F6E3CE7B7FAD20287C352A25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
Manifest number:          1186
Signing time:             Mon 26 Oct 2026 15:00:48 +0000
Manifest this update:     Mon 26 Oct 2026 15:00:48 +0000
Manifest next update:     Tue 27 Oct 2026 15:00:48 +0000
Files and hashes:         1: DhAYsKxO8WwtTQM9qN9EaLihdkc.roa (hash: ITzy4zYg5ewXMnbWQKg/M27oXczLD0pz5gjZoCMokoc=)
                          2: ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl (hash: EW7dP8CE1npba4+u6tch+D/V4jTeI2MTVRCjaIsrx90=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:78:ba:75:b6:f6:e3:ce:7b:7f:ad:20:28:7c:35:2a:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba515836af300f7c71f71dd18b9c3f51c252bb94
        Validity
            Not Before: Oct 26 15:00:48 2026 GMT
            Not After : Oct 27 15:00:48 2026 GMT
        Subject: CN=875dd216d4825d7b462df6f9886e6cba7f441b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e6:14:54:b8:be:ea:b9:fb:31:25:20:73:39:
                    f5:d4:91:4b:b7:70:d1:09:12:74:a6:9f:ae:c0:9e:
                    5c:43:40:a0:e0:6d:3d:81:ff:a1:df:f0:11:f9:d9:
                    6a:8a:aa:7e:16:ef:47:61:7a:89:cb:01:f8:c1:c5:
                    98:a2:ba:97:95:e2:f7:bd:71:ea:9c:64:d0:5c:6c:
                    1f:22:ef:8e:80:81:39:6e:ce:40:62:e2:b7:52:3d:
                    5b:8b:e7:4e:94:b5:2a:d4:c2:75:0d:85:b8:75:45:
                    75:29:cd:05:14:a6:1b:df:54:04:ed:ab:d3:e9:5b:
                    a3:8e:ca:2f:54:89:e0:6b:ea:6c:38:a4:87:f6:47:
                    ea:d3:20:6b:9c:65:1a:1d:e7:a2:a5:c3:84:9c:e9:
                    bc:e0:c1:87:11:6b:c5:19:2f:40:4d:c6:9a:ee:3d:
                    e7:7d:52:94:8e:0a:f4:58:c4:42:69:77:51:e4:46:
                    b0:84:54:86:e5:f6:f1:c5:c0:42:16:94:a5:b7:90:
                    72:cc:f1:a7:59:1d:6a:b5:d4:5e:ed:02:00:f2:ea:
                    5f:19:d8:26:c3:60:55:65:eb:ef:d6:ab:f5:e1:42:
                    52:b3:9d:0e:bf:37:db:e8:9e:9a:9b:83:c7:90:80:
                    9a:1e:53:0c:63:83:61:d9:52:8c:84:40:0e:c0:db:
                    43:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:5D:D2:16:D4:82:5D:7B:46:2D:F6:F9:88:6E:6C:BA:7F:44:1B:72
            X509v3 Authority Key Identifier:
                keyid:BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:64:c6:c3:ee:b9:d5:f9:f7:30:9b:e6:f3:8d:7f:9a:a4:83:
         9f:41:7c:c3:f8:75:04:31:c7:96:49:6e:8b:dd:ba:96:22:4d:
         15:a9:fa:ab:72:78:d4:38:32:69:68:66:cd:5c:a4:4f:57:75:
         c9:63:58:b7:81:7d:53:49:36:3c:82:85:94:38:12:18:25:98:
         a1:8e:a0:06:8a:66:26:ed:99:c2:10:3a:cb:99:34:11:55:75:
         9b:53:a7:27:b3:7e:ab:1c:c4:8d:23:60:40:2b:5e:6b:bd:52:
         13:54:a4:27:0d:50:70:66:a9:51:26:ac:1f:1a:b1:ef:eb:2b:
         23:cc:86:a9:17:9f:3b:83:a5:a3:48:c1:eb:0c:a2:7c:4b:a5:
         75:01:3a:c2:40:58:f3:73:dc:bd:91:e2:b3:0c:8b:6b:31:dd:
         2b:ec:1d:ae:2f:32:9a:2b:53:95:3d:a1:6d:18:c8:d1:1a:3b:
         79:b3:48:22:80:a1:15:7b:53:b0:ab:12:57:b5:2d:f0:42:a3:
         1e:65:3a:a6:50:0a:4a:93:9f:94:32:19:3d:30:19:8c:16:1f:
         7c:e0:bd:56:1a:af:59:68:30:ba:0c:ae:ab:d8:cb:e3:fd:9e:
         b0:83:ed:17:05:dc:c0:35:2f:09:a2:49:a9:67:74:1b:1c:c2:
         e9:74:c8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:17:11 2026 by rpki-client