Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft
File:                     uqSm69s4PhGdaVPHfxaGbnPvLbU.mft (raw, json)
Hash identifier:          oddB51lEwc4F5zhF/frYl6RTk/aYOwkiH5RevEoXpmg=
Subject key identifier:   06:46:1B:C4:4E:F7:FF:77:C0:C6:31:9D:98:71:B1:B0:AE:70:F6:60
Authority key identifier: BA:A4:A6:EB:DB:38:3E:11:9D:69:53:C7:7F:16:86:6E:73:EF:2D:B5
Certificate issuer:       /CN=baa4a6ebdb383e119d6953c77f16866e73ef2db5
Certificate serial:       019DDC55AF48152E60DFF3F39A12CA41B1DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft
Manifest number:          0131
Signing time:             Thu 30 Apr 2026 03:01:36 +0000
Manifest this update:     Thu 30 Apr 2026 03:01:36 +0000
Manifest next update:     Fri 01 May 2026 03:01:36 +0000
Files and hashes:         1: Hykty8ZT3B_khffcWdZGH8-bqU4.asa (hash: 1q5LAz7I6wf4mRO+VjAfuoGiwZX81t5qBHaYtssjPNg=)
                          2: uqSm69s4PhGdaVPHfxaGbnPvLbU.crl (hash: v4hIIJsnrpG7enQqa9uM/gGfHA518Xuf7qcTT1qYgcU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 03:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:dc:55:af:48:15:2e:60:df:f3:f3:9a:12:ca:41:b1:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baa4a6ebdb383e119d6953c77f16866e73ef2db5
        Validity
            Not Before: Apr 30 03:01:36 2026 GMT
            Not After : May  1 03:01:36 2026 GMT
        Subject: CN=06461bc44ef7ff77c0c6319d9871b1b0ae70f660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:73:c1:a5:f2:d0:96:07:4a:b5:b0:f9:f0:7e:
                    22:e9:d0:09:88:37:75:35:53:5b:67:c4:a1:14:3c:
                    1c:84:53:6d:c2:a7:4d:be:81:72:f8:01:9f:44:ea:
                    95:cc:8a:86:9b:82:2a:91:6b:2f:0b:ee:89:f0:1c:
                    63:db:20:9b:49:de:83:c6:eb:6b:70:90:3f:81:8e:
                    ab:d4:36:82:c7:6b:34:43:61:bc:4e:74:48:06:9c:
                    41:c9:7a:47:35:61:a1:b8:3a:de:03:bf:c4:30:b0:
                    50:ea:b5:cc:91:78:9f:38:46:aa:7a:39:1f:4a:48:
                    77:e6:91:20:8d:74:8c:e5:5c:a1:22:bd:02:70:58:
                    95:51:0d:9a:10:a8:03:8f:15:43:c0:c3:9d:52:b1:
                    db:31:bf:d3:74:80:32:6c:cf:9e:e5:d0:86:73:0e:
                    56:65:38:54:9a:63:34:14:5c:b2:1c:ea:d4:9b:33:
                    07:b2:5f:f1:64:e3:81:fd:ca:f5:13:3b:f9:ad:89:
                    cf:e6:50:47:98:f0:63:d1:27:b3:cb:b8:99:3e:e3:
                    b2:63:16:5d:72:3d:c5:99:95:6f:69:41:f1:b0:e4:
                    0a:05:15:13:ba:41:e7:ba:86:dc:46:33:5a:93:9e:
                    00:9f:7f:7b:97:33:b4:9e:56:6a:b1:56:81:e2:2e:
                    24:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:46:1B:C4:4E:F7:FF:77:C0:C6:31:9D:98:71:B1:B0:AE:70:F6:60
            X509v3 Authority Key Identifier:
                keyid:BA:A4:A6:EB:DB:38:3E:11:9D:69:53:C7:7F:16:86:6E:73:EF:2D:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:a7:aa:7a:d3:cb:09:0d:85:00:1b:92:68:26:54:f5:43:fa:
         ad:1b:be:4b:9c:2b:19:67:98:ff:72:4b:60:6b:c8:8d:20:ad:
         b1:56:13:97:b9:15:9d:90:ce:f9:70:43:0c:e9:1c:06:48:3b:
         3c:c1:c5:d8:eb:6b:88:f4:b7:ad:85:80:83:21:a9:97:a5:2d:
         33:26:15:96:f1:fa:59:18:00:c4:45:f5:9b:c4:2d:ae:b6:08:
         b5:88:18:42:de:48:89:0b:60:16:2c:e9:f1:5e:f7:79:a3:cf:
         a5:e2:59:a6:18:33:65:26:ca:ca:2d:84:f9:dc:44:51:c4:04:
         07:e7:1f:c6:9f:53:03:9d:dd:3b:c2:2e:62:69:e7:e2:f1:12:
         d1:ba:d0:ab:ad:ac:11:d5:30:3d:0c:dc:91:ba:d9:a9:c7:18:
         90:07:d6:b7:87:91:e5:6b:73:10:80:ad:1d:cd:f6:dc:3c:b7:
         4c:1f:15:77:0d:be:6e:d5:70:9e:4f:aa:68:1f:c3:6e:d6:c4:
         3e:13:85:53:0d:2f:ec:c7:42:e0:ed:5a:9a:16:d5:f7:8b:77:
         cb:9e:bc:a6:5c:b1:7d:d1:7b:d4:a9:53:eb:9e:f8:87:08:d0:
         78:74:a0:fc:c8:8f:ef:29:70:b5:fe:6f:62:5d:62:30:bb:2f:
         20:2c:9a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:48:32 2026 by rpki-client