Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft
File:                     uqSm69s4PhGdaVPHfxaGbnPvLbU.mft (raw, json)
Hash identifier:          uQ7MqkgRdsuHHtYIXEwLWEwQ1h4g/jRZkDrxOYEAsOw=
Subject key identifier:   F3:25:FC:AC:16:37:EA:B0:CA:35:D8:26:91:3B:6C:16:4D:D6:FE:8E
Authority key identifier: BA:A4:A6:EB:DB:38:3E:11:9D:69:53:C7:7F:16:86:6E:73:EF:2D:B5
Certificate issuer:       /CN=baa4a6ebdb383e119d6953c77f16866e73ef2db5
Certificate serial:       019CC261241CFECBE8F199AAF85D467DCDB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft
Manifest number:          9F
Signing time:             Fri 06 Mar 2026 09:01:11 +0000
Manifest this update:     Fri 06 Mar 2026 09:01:11 +0000
Manifest next update:     Sat 07 Mar 2026 09:01:11 +0000
Files and hashes:         1: Hykty8ZT3B_khffcWdZGH8-bqU4.asa (hash: 1q5LAz7I6wf4mRO+VjAfuoGiwZX81t5qBHaYtssjPNg=)
                          2: uqSm69s4PhGdaVPHfxaGbnPvLbU.crl (hash: 7KPHplCPynUTfUElQQhT8weufbTNAi8VDylKjemFCyw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Mar 2026 09:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c2:61:24:1c:fe:cb:e8:f1:99:aa:f8:5d:46:7d:cd:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baa4a6ebdb383e119d6953c77f16866e73ef2db5
        Validity
            Not Before: Mar  6 09:01:11 2026 GMT
            Not After : Mar  7 09:01:11 2026 GMT
        Subject: CN=f325fcac1637eab0ca35d826913b6c164dd6fe8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7b:7f:c8:1c:8a:65:ae:27:6a:8d:a6:60:8a:
                    df:54:50:d9:63:7b:c2:80:78:52:9a:6a:ed:f5:33:
                    da:3e:15:2c:b6:62:87:31:38:35:22:c7:91:b8:25:
                    df:64:b8:d5:ef:75:d6:17:17:73:38:07:bd:a9:f5:
                    ed:79:d6:0d:c4:0f:07:d5:9a:67:a7:98:ea:b7:4b:
                    36:b6:ca:15:5e:dc:eb:44:e1:c6:51:43:ce:cd:98:
                    e0:33:b3:12:51:aa:e9:79:0b:5e:8b:44:80:a8:57:
                    25:54:c7:30:f0:c4:6c:cc:46:08:78:a0:c5:b8:95:
                    56:56:24:fb:69:61:60:9b:c4:3a:5d:aa:52:5b:fc:
                    eb:50:ec:b0:e7:cc:99:73:64:1b:d7:31:e7:18:02:
                    e8:73:d6:83:12:51:9f:40:ec:18:87:be:e1:30:61:
                    06:dc:55:07:e4:2a:4b:da:be:44:e1:28:bf:68:09:
                    d3:ce:95:97:85:d5:c3:d0:00:65:ab:7c:42:d7:a8:
                    9c:7c:8a:7b:51:45:51:d9:78:d7:91:0f:7e:54:f1:
                    d0:23:8b:7a:38:57:4e:c2:10:a4:c9:fe:6c:f1:1f:
                    25:a2:86:a4:35:2e:5e:cc:00:71:c8:74:fb:0a:c6:
                    0b:74:c3:01:40:d7:df:4d:10:78:50:16:b7:eb:17:
                    ca:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:25:FC:AC:16:37:EA:B0:CA:35:D8:26:91:3B:6C:16:4D:D6:FE:8E
            X509v3 Authority Key Identifier:
                keyid:BA:A4:A6:EB:DB:38:3E:11:9D:69:53:C7:7F:16:86:6E:73:EF:2D:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:03:82:09:55:cd:9f:4d:ab:50:87:30:a6:f8:5f:9e:18:c8:
         2e:15:67:41:c1:fe:56:0e:3a:12:44:dc:7c:06:35:6f:ba:a5:
         71:f7:16:8a:18:a8:be:45:a4:6f:71:ab:20:65:a4:f2:bc:af:
         05:09:ed:94:a1:91:f3:61:9a:4d:39:eb:16:a7:ea:a3:92:02:
         bb:b4:31:95:d9:d2:cd:a5:f3:43:d3:96:95:03:85:7f:66:10:
         06:d1:1f:6f:f6:b1:8b:2d:4b:fd:76:08:d1:f2:90:7e:af:45:
         59:aa:f0:9d:f4:d6:d2:c4:fd:77:a4:bd:ea:48:a9:1d:04:a1:
         3a:74:66:15:96:e8:8e:0a:9d:b0:ad:9b:29:28:75:fd:6b:e6:
         44:c0:13:8e:c5:ab:d4:7f:f7:f5:ed:71:84:72:41:7f:5c:64:
         8e:aa:5f:f4:dd:b0:06:1b:9c:04:ba:60:10:b5:90:bc:6e:a4:
         77:af:15:f4:8a:af:49:7f:06:df:5f:b0:d9:16:bf:ff:e4:e9:
         c4:d7:80:06:3c:3f:48:96:ef:32:cd:bf:fa:b0:79:ed:2c:ab:
         ec:60:8a:1b:e8:ac:e4:e8:ff:d0:0c:b1:1e:3d:05:02:ee:61:
         b8:9e:91:7a:02:3b:fb:df:c0:56:56:d1:8b:0d:16:6c:5b:ee:
         1c:ad:70:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 15:58:02 2026 by rpki-client