Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
File:                     uRRkdndz8SObZGu2a9z09_sSBs4.mft (raw, json)
Hash identifier:          Oz2JrWQBzloJO/JlcQOtnhqPHhAMyYqlurV+Z9fkUl0=
Subject key identifier:   06:7C:CA:F9:DF:DE:2B:C4:35:9D:A9:09:C8:05:24:37:09:7D:DE:4B
Authority key identifier: B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
Certificate issuer:       /CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Certificate serial:       01A0916A1D644CE9DB628C0D1E8054450CB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
Manifest number:          1A4E
Signing time:             Fri 11 Sep 2026 17:00:45 +0000
Manifest this update:     Fri 11 Sep 2026 17:00:45 +0000
Manifest next update:     Sat 12 Sep 2026 17:00:45 +0000
Files and hashes:         1: FxSV3pjhlX5ncwMd1BJ4YPhboEI.roa (hash: V6ldsVa/sdoxhFtU1dGezva/tghG5qZAguTA3/NtrDw=)
                          2: YG_wDFENOqVU5myZSFJwFFRQIGo.roa (hash: IKdcIVVEkC9wFm1DM+wG6bBK4y8HgYiZDQKQ7434QC4=)
                          3: lWRN_vpnN3jdO53Qf_s9sKGgAYI.roa (hash: DSGrSvYMDlk724DBlB7/WGTLaoZcHPiH4iyTmdQidKM=)
                          4: m-OAweDj7IYWvNC6YulzJlZP2oY.roa (hash: SiV8TM2QfFlhSK0UqbnB7bWFP5VUqLMFVQELQm9ocug=)
                          5: uRRkdndz8SObZGu2a9z09_sSBs4.crl (hash: zNpUO+r8FbWVvao4tdSUboEao48hilSCDkAsJej7Pv0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 12 Sep 2026 15:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:91:6a:1d:64:4c:e9:db:62:8c:0d:1e:80:54:45:0c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
        Validity
            Not Before: Sep 11 17:00:45 2026 GMT
            Not After : Sep 12 17:00:45 2026 GMT
        Subject: CN=067ccaf9dfde2bc4359da909c8052437097dde4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:83:40:ba:a6:3f:66:f8:92:48:85:2a:71:d9:
                    38:63:90:85:d9:5b:e8:1e:47:8f:f5:9c:e5:d9:cc:
                    9f:ec:d9:0f:ec:34:3f:82:b8:7f:ff:41:46:1b:0a:
                    38:d4:7d:5b:e8:a7:94:7e:81:dc:cf:b0:d9:f7:d8:
                    f2:51:5e:65:7a:f9:36:e4:20:de:ff:e9:a3:b8:73:
                    8a:a4:c2:8f:db:8a:10:08:01:50:dd:59:e5:0a:3c:
                    89:88:9e:0b:49:23:0b:a1:ab:ef:30:e1:28:17:7f:
                    16:d5:29:c0:51:b4:df:d2:c3:f3:89:8e:ba:e0:9b:
                    1d:43:d4:3e:d9:4c:21:88:58:84:97:ef:94:da:ee:
                    98:6c:a9:25:cb:7b:30:ce:bf:06:a3:50:0d:c8:e8:
                    bf:a9:3a:2e:ea:37:8d:31:3b:cd:69:c3:b9:15:d2:
                    6c:3a:67:b0:9f:d0:51:57:ae:c7:c8:1b:25:a6:0f:
                    85:97:3a:7a:52:08:f1:44:f6:6d:a5:5c:bb:35:fc:
                    7c:4a:09:5c:b2:2a:3a:c1:37:9d:59:e1:aa:e6:89:
                    8f:89:41:88:92:c7:6f:8f:ef:f9:77:92:03:6f:b5:
                    a0:23:15:ae:08:bb:40:00:4e:05:a9:0c:09:bd:5a:
                    67:35:e7:fd:2d:73:b2:03:a2:fe:c8:85:e9:5f:3b:
                    3e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7C:CA:F9:DF:DE:2B:C4:35:9D:A9:09:C8:05:24:37:09:7D:DE:4B
            X509v3 Authority Key Identifier:
                keyid:B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:38:96:17:77:91:fa:b2:11:d9:5d:54:51:91:68:88:52:e0:
         14:10:3d:65:44:96:fa:6f:45:c4:36:83:ae:04:a9:85:ae:1a:
         dd:a9:01:f5:c7:49:80:b5:8b:6d:26:72:03:60:d5:09:02:c5:
         9b:30:9f:4b:d0:93:f5:6b:e8:48:47:15:91:30:26:8e:b7:6f:
         b7:e2:a5:d5:6a:89:9d:43:47:93:b4:03:bc:4a:f6:d1:20:87:
         43:f5:71:6b:90:10:2b:e1:a9:0f:de:2a:1c:fa:93:95:d3:79:
         fa:c6:19:b2:79:9a:bd:3a:46:85:01:24:6c:b8:aa:14:8a:49:
         34:7b:86:55:75:f4:8e:c5:9e:93:39:f3:c4:94:be:aa:3c:bb:
         e8:de:c6:22:83:a5:f7:dc:2e:46:c5:eb:c3:03:f2:07:ac:e4:
         9d:d4:55:2b:c6:2d:80:ac:4b:d6:90:19:b4:a8:28:9c:12:08:
         fe:ac:a2:ed:3e:55:b6:f2:19:32:68:4b:57:2e:7c:1a:98:ef:
         6b:08:e4:25:ce:05:79:c5:34:97:f3:e0:f9:a5:a1:ee:dc:cf:
         eb:5a:95:55:dc:1b:76:ba:81:69:11:25:97:34:3c:0d:53:63:
         06:93:e0:d1:db:1d:5e:44:0c:0b:2c:cc:4d:70:b8:cb:2c:90:
         86:ef:a3:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCRah1kTOnbYowNHoBURQy2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MTQ2NDc2Nzc3M2YxMjM5YjY0NmJiNjZiZGNmNGY3ZmIx
MjA2Y2UwHhcNMjYwOTExMTcwMDQ1WhcNMjYwOTEyMTcwMDQ1WjAzMTEwLwYDVQQD
EygwNjdjY2FmOWRmZGUyYmM0MzU5ZGE5MDljODA1MjQzNzA5N2RkZTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxINAuqY/ZviSSIUqcdk4Y5CF2Vvo
HkeP9Zzl2cyf7NkP7DQ/grh//0FGGwo41H1b6KeUfoHcz7DZ99jyUV5levk25CDe
/+mjuHOKpMKP24oQCAFQ3VnlCjyJiJ4LSSMLoavvMOEoF38W1SnAUbTf0sPziY66
4JsdQ9Q+2UwhiFiEl++U2u6YbKkly3swzr8Go1ANyOi/qTou6jeNMTvNacO5FdJs
Omewn9BRV67HyBslpg+Flzp6UgjxRPZtpVy7Nfx8Sglcsio6wTedWeGq5omPiUGI
ksdvj+/5d5IDb7WgIxWuCLtAAE4FqQwJvVpnNef9LXOyA6L+yIXpXzs+nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZ8yvnf3ivENZ2pCcgFJDcJfd5LMB8GA1UdIwQY
MBaAFLkUZHZ3c/Ejm2Rrtmvc9Pf7EgbOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJSa2RuZHo4U09iWkd1MmE5ejA5X3NTQnM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xM2ZjZDEtZDgwNi00ZTU2LTg1MzMt
NDc1ZGJiYjBjMDhjLzEvdVJSa2RuZHo4U09iWkd1MmE5ejA5X3NTQnM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8xM2ZjZDEtZDgwNi00ZTU2LTg1MzMtNDc1ZGJiYjBjMDhj
LzEvdVJSa2RuZHo4U09iWkd1MmE5ejA5X3NTQnM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyDiWF3eR
+rIR2V1UUZFoiFLgFBA9ZUSW+m9FxDaDrgSpha4a3akB9cdJgLWLbSZyA2DVCQLF
mzCfS9CT9WvoSEcVkTAmjrdvt+Kl1WqJnUNHk7QDvEr20SCHQ/Vxa5AQK+GpD94q
HPqTldN5+sYZsnmavTpGhQEkbLiqFIpJNHuGVXX0jsWekznzxJS+qjy76N7GIoOl
99wuRsXrwwPyB6zkndRVK8YtgKxL1pAZtKgonBII/qyi7T5VtvIZMmhLVy58Gpjv
awjkJc4FecU0l/Pg+aWh7tzP61qVVdwbdrqBaREllzQ8DVNjBpPg0dsdXkQMCyzM
TXC4yyyQhu+jfw==
-----END CERTIFICATE-----
Generated at Fri Sep 11 19:33:49 2026 by rpki-client