Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
File:                     UAm8siUutkaQLMv9TJhssMK5E5g.mft (raw, json)
Hash identifier:          YPdXo2TSZK5wJzj1W2FQ1pSvlxpv4xrW2sdJSLLdfhY=
Subject key identifier:   0A:4B:7C:72:1F:F1:7B:D2:19:E8:AD:10:A7:62:5E:57:F5:EB:C9:B8
Authority key identifier: 50:09:BC:B2:25:2E:B6:46:90:2C:CB:FD:4C:98:6C:B0:C2:B9:13:98
Certificate issuer:       /CN=5009bcb2252eb646902ccbfd4c986cb0c2b91398
Certificate serial:       01A14E06EE8C4B8F835ADA04BDF9D9680EFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
Manifest number:          05BA
Signing time:             Sun 18 Oct 2026 08:00:39 +0000
Manifest this update:     Sun 18 Oct 2026 08:00:39 +0000
Manifest next update:     Mon 19 Oct 2026 08:00:39 +0000
Files and hashes:         1: UAm8siUutkaQLMv9TJhssMK5E5g.crl (hash: 2KcFhFu0JROvaLaw6SvIDZRH8yn6D6E2t0YuXlhVHBY=)
                          2: s2NzqhDpn_MIzIu3sU4Nnz5OdmI.roa (hash: gFIZdnfNAaCxSgU4XX/5DvqZKxy3vUU3BhECHFZPGJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 08:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4e:06:ee:8c:4b:8f:83:5a:da:04:bd:f9:d9:68:0e:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5009bcb2252eb646902ccbfd4c986cb0c2b91398
        Validity
            Not Before: Oct 18 08:00:39 2026 GMT
            Not After : Oct 19 08:00:39 2026 GMT
        Subject: CN=0a4b7c721ff17bd219e8ad10a7625e57f5ebc9b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:fb:13:40:e4:c1:ee:f6:ae:89:40:2b:c7:f4:
                    6e:79:77:13:3c:0f:55:a1:2c:e2:01:85:5e:17:ea:
                    af:7d:78:d6:42:40:e0:bb:81:ac:38:39:6f:97:90:
                    e3:b7:2d:12:23:52:cf:43:4a:3c:df:04:38:ed:34:
                    cc:c3:2d:21:57:17:2f:79:2d:73:0f:e8:4f:64:9f:
                    3a:3a:e5:59:c8:f0:99:94:c1:a8:7c:34:94:02:99:
                    d4:81:70:85:5f:e6:b4:2c:94:88:ba:5e:56:e8:8c:
                    85:ac:88:3b:d9:d9:3f:18:a6:79:e5:12:08:97:0d:
                    4b:fb:8f:f6:64:c8:b0:99:2f:0e:9a:4d:d6:13:be:
                    2c:3f:53:42:ce:b1:67:6b:6b:3b:2f:fe:21:d6:12:
                    74:61:85:f5:05:48:1d:b0:e9:8e:bf:ad:99:7f:ac:
                    d4:53:d9:8f:d7:68:77:b7:20:f0:99:d8:ce:53:ce:
                    3b:87:69:b8:6c:07:72:f9:0b:3c:1f:35:fe:7b:f6:
                    ac:a6:64:7e:eb:c3:f2:4c:60:82:b6:f4:d9:ef:c5:
                    36:9b:48:96:61:95:af:a6:5c:a6:49:d6:c2:c7:aa:
                    89:fb:a9:b6:e8:fe:c3:8f:f2:7d:79:3a:86:d0:9f:
                    96:0f:de:b5:8a:fc:21:e0:58:4b:33:61:8c:b7:ca:
                    31:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:4B:7C:72:1F:F1:7B:D2:19:E8:AD:10:A7:62:5E:57:F5:EB:C9:B8
            X509v3 Authority Key Identifier:
                keyid:50:09:BC:B2:25:2E:B6:46:90:2C:CB:FD:4C:98:6C:B0:C2:B9:13:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:d3:db:7d:9a:4b:e2:9f:16:87:5b:d6:02:06:4a:01:ef:1d:
         17:b1:f6:03:89:96:da:f1:05:6c:3d:d2:1f:ba:42:45:cb:2c:
         2a:df:a4:e2:f1:d1:5d:11:bd:ea:22:32:ed:40:92:a3:af:e9:
         51:dd:92:9d:2b:7a:35:bc:63:b4:7e:9e:ab:f0:dc:92:b1:c1:
         26:61:a9:da:2c:a0:8a:50:89:88:a9:8f:8c:7f:25:ff:9c:e5:
         4c:38:56:87:ad:9f:f6:c5:6c:98:05:49:a7:0f:66:ad:eb:d7:
         f6:33:fb:27:89:ab:f1:68:f2:09:b4:78:bf:33:eb:e5:e2:b7:
         68:5c:89:bb:6a:cc:3d:1c:5f:ac:79:fb:ee:7c:0d:2f:38:7d:
         99:61:05:c5:59:fe:4b:e2:dd:c4:26:a8:53:3d:ae:9b:4c:7c:
         a4:c7:93:6a:c2:6e:ef:f7:0c:22:77:79:9d:b2:08:ee:95:87:
         c0:02:00:b8:99:06:31:08:f1:82:81:b1:bd:7f:39:30:57:dd:
         05:ca:93:0b:bb:1e:7b:f1:75:12:39:fe:70:7e:5a:41:ae:ca:
         db:75:cb:62:99:f3:8c:36:57:67:4d:7a:3f:97:6b:70:a4:23:
         2b:56:43:b9:cf:e2:a9:c8:ed:04:f1:bf:8d:6b:5d:d2:56:aa:
         42:73:56:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFOBu6MS4+DWtoEvfnZaA7/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMDliY2IyMjUyZWI2NDY5MDJjY2JmZDRjOTg2Y2IwYzJi
OTEzOTgwHhcNMjYxMDE4MDgwMDM5WhcNMjYxMDE5MDgwMDM5WjAzMTEwLwYDVQQD
EygwYTRiN2M3MjFmZjE3YmQyMTllOGFkMTBhNzYyNWU1N2Y1ZWJjOWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9fsTQOTB7vauiUArx/RueXcTPA9V
oSziAYVeF+qvfXjWQkDgu4GsODlvl5Djty0SI1LPQ0o83wQ47TTMwy0hVxcveS1z
D+hPZJ86OuVZyPCZlMGofDSUApnUgXCFX+a0LJSIul5W6IyFrIg72dk/GKZ55RII
lw1L+4/2ZMiwmS8Omk3WE74sP1NCzrFna2s7L/4h1hJ0YYX1BUgdsOmOv62Zf6zU
U9mP12h3tyDwmdjOU847h2m4bAdy+Qs8HzX+e/aspmR+68PyTGCCtvTZ78U2m0iW
YZWvplymSdbCx6qJ+6m26P7Dj/J9eTqG0J+WD961ivwh4FhLM2GMt8oxHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApLfHIf8XvSGeitEKdiXlf168m4MB8GA1UdIwQY
MBaAFFAJvLIlLrZGkCzL/UyYbLDCuROYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUFtOHNpVXV0a2FRTE12OVRKaHNzTUs1RTVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9mMTJkODAtZGViNi00YmY1LTg1M2Mt
ZDVkYTg1OGUxNWZiLzEvVUFtOHNpVXV0a2FRTE12OVRKaHNzTUs1RTVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9mMTJkODAtZGViNi00YmY1LTg1M2MtZDVkYTg1OGUxNWZi
LzEvVUFtOHNpVXV0a2FRTE12OVRKaHNzTUs1RTVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvdPbfZpL
4p8Wh1vWAgZKAe8dF7H2A4mW2vEFbD3SH7pCRcssKt+k4vHRXRG96iIy7UCSo6/p
Ud2SnSt6NbxjtH6eq/DckrHBJmGp2iygilCJiKmPjH8l/5zlTDhWh62f9sVsmAVJ
pw9mrevX9jP7J4mr8WjyCbR4vzPr5eK3aFyJu2rMPRxfrHn77nwNLzh9mWEFxVn+
S+LdxCaoUz2um0x8pMeTasJu7/cMInd5nbII7pWHwAIAuJkGMQjxgoGxvX85MFfd
BcqTC7see/F1Ejn+cH5aQa7K23XLYpnzjDZXZ016P5drcKQjK1ZDuc/iqcjtBPG/
jWtd0laqQnNWnw==
-----END CERTIFICATE-----
Generated at Sun Oct 18 18:31:15 2026 by rpki-client