Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
File:                     uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft (raw, json)
Hash identifier:          yQYpN1w7T3S+0WfL9g2NP4rkJKKg0CpVpJ4WFL2nqkk=
Subject key identifier:   F7:83:12:68:9D:69:A8:0E:7B:D4:05:AC:5C:43:13:9B:5E:28:57:EC
Authority key identifier: BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4
Certificate issuer:       /CN=ba8861e17ebed57950ff32c7b377fc430413dbe4
Certificate serial:       01A11FE4D4AB344CB14551B823CFD4052751
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
Manifest number:          11BD
Signing time:             Fri 09 Oct 2026 09:00:52 +0000
Manifest this update:     Fri 09 Oct 2026 09:00:52 +0000
Manifest next update:     Sat 10 Oct 2026 09:00:52 +0000
Files and hashes:         1: 3xkUgPDW1_nU5u-zQWPWFuXblOU.roa (hash: TwymWVxNW7YipwcwZomXLwsBqGn5JSf6tMGWjIIvIuA=)
                          2: biwapYjW-yR38S3KZARQ10moe30.roa (hash: 1QN2loKj68piSOW4bamGYfAlPoY1h07q4+Z8Ry6dkfo=)
                          3: isbgVHj3TmGYN0uwFkd2CdHyHMU.roa (hash: QwGaFwSh5hfuRjoHH0+UtDhSsDuuueUvGza6DS4Ifsg=)
                          4: uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl (hash: O/eVzUESQx7D1kvdw2WOWHnfZnNsyNII7fz6utN95x8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 08:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1f:e4:d4:ab:34:4c:b1:45:51:b8:23:cf:d4:05:27:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba8861e17ebed57950ff32c7b377fc430413dbe4
        Validity
            Not Before: Oct  9 09:00:52 2026 GMT
            Not After : Oct 10 09:00:52 2026 GMT
        Subject: CN=f78312689d69a80e7bd405ac5c43139b5e2857ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:50:40:2c:34:eb:89:28:2a:6c:a2:cd:9a:19:
                    6e:0b:bd:0f:6d:84:26:48:1e:2e:e5:03:f0:5f:e1:
                    54:bc:50:10:1f:e3:a9:ad:ed:65:7c:2e:8a:5c:95:
                    14:7a:f1:b2:06:e4:82:ea:a3:4b:5e:94:d7:69:9e:
                    66:33:49:b1:f0:7a:fb:4b:20:f1:34:32:6a:b9:c3:
                    18:4d:90:27:c8:6f:bb:25:50:7e:62:2b:cb:1f:27:
                    57:1b:57:82:14:07:d3:27:74:5b:3b:12:61:d6:ab:
                    d0:1e:f3:2d:14:ce:46:05:74:fc:47:5c:a5:b8:f6:
                    a2:a1:ed:40:25:5d:66:34:17:e8:2b:67:e2:54:23:
                    8f:d1:f7:fe:14:21:a2:2b:6e:04:ba:36:f9:d7:ec:
                    06:a8:08:a3:65:d6:82:64:eb:4f:19:5a:6f:7f:9f:
                    2a:0e:a8:ab:6b:1f:17:f5:7f:36:63:cb:bd:0a:33:
                    3e:8a:96:8f:f2:93:b1:30:ba:cb:35:50:f2:fe:1a:
                    3a:70:68:84:2d:7b:05:ad:3a:b2:b9:c4:d2:2a:df:
                    81:21:e9:80:80:bc:49:a0:37:30:ff:7d:bb:22:7d:
                    fc:12:ba:36:ee:31:c6:4e:e1:67:65:7b:3e:57:50:
                    da:64:9b:48:d8:bc:fb:dc:96:af:2e:c7:3b:c9:df:
                    3e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:83:12:68:9D:69:A8:0E:7B:D4:05:AC:5C:43:13:9B:5E:28:57:EC
            X509v3 Authority Key Identifier:
                keyid:BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:59:e3:b4:6c:04:d5:75:21:09:c7:24:7c:12:09:49:75:83:
         a4:80:75:b1:72:2f:e3:7c:e6:93:8e:dd:a7:07:d1:8c:30:04:
         46:f9:4b:64:5e:a4:c1:53:9f:f6:15:32:db:29:c7:db:8d:69:
         26:b9:45:d2:e0:06:b5:28:b4:4c:b3:6f:c3:48:76:00:a2:66:
         49:7c:06:3c:c1:c2:47:22:a8:26:34:56:cb:8a:cb:a9:6a:da:
         c2:02:d6:83:bf:30:17:93:31:9f:a0:01:f5:e3:f5:41:19:52:
         5c:80:b9:5c:53:8a:4d:89:d5:67:e4:c8:d6:ce:3e:78:6a:5f:
         73:d7:0b:dc:2c:96:eb:a3:7a:88:e6:bf:0e:7e:20:e0:c8:e9:
         d4:4f:dc:37:59:7e:fc:ec:0d:c5:55:ff:52:4f:72:40:55:c4:
         c5:3f:92:dc:bc:a1:7a:4e:0e:67:bf:08:70:b2:84:27:72:8c:
         ef:87:18:47:e0:fe:4f:52:3b:97:e4:02:0d:99:f1:79:2e:ba:
         44:1e:d6:3e:3a:9a:60:68:9c:ea:29:c3:c2:2b:82:f6:c3:be:
         52:e8:22:ce:40:97:82:a4:d9:37:67:50:af:4a:eb:96:0b:0f:
         17:c7:56:ff:f9:1e:0e:eb:c5:39:fd:f5:5e:56:02:10:db:9a:
         82:cb:30:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEf5NSrNEyxRVG4I8/UBSdRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhODg2MWUxN2ViZWQ1Nzk1MGZmMzJjN2IzNzdmYzQzMDQx
M2RiZTQwHhcNMjYxMDA5MDkwMDUyWhcNMjYxMDEwMDkwMDUyWjAzMTEwLwYDVQQD
EyhmNzgzMTI2ODlkNjlhODBlN2JkNDA1YWM1YzQzMTM5YjVlMjg1N2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VBALDTriSgqbKLNmhluC70PbYQm
SB4u5QPwX+FUvFAQH+Opre1lfC6KXJUUevGyBuSC6qNLXpTXaZ5mM0mx8Hr7SyDx
NDJqucMYTZAnyG+7JVB+YivLHydXG1eCFAfTJ3RbOxJh1qvQHvMtFM5GBXT8R1yl
uPaioe1AJV1mNBfoK2fiVCOP0ff+FCGiK24Eujb51+wGqAijZdaCZOtPGVpvf58q
Dqirax8X9X82Y8u9CjM+ipaP8pOxMLrLNVDy/ho6cGiELXsFrTqyucTSKt+BIemA
gLxJoDcw/327In38Ero27jHGTuFnZXs+V1DaZJtI2Lz73JavLsc7yd8+yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPeDEmidaagOe9QFrFxDE5teKFfsMB8GA1UdIwQY
MBaAFLqIYeF+vtV5UP8yx7N3/EMEE9vkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW9oaDRYNi0xWGxRX3pMSHMzZjhRd1FUMi1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8xMGQxNTMtYzNjMy00MDExLTk3Y2Yt
MTBmZGNhMzg1ZWE0LzEvdW9oaDRYNi0xWGxRX3pMSHMzZjhRd1FUMi1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8xMGQxNTMtYzNjMy00MDExLTk3Y2YtMTBmZGNhMzg1ZWE0
LzEvdW9oaDRYNi0xWGxRX3pMSHMzZjhRd1FUMi1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW1njtGwE
1XUhCcckfBIJSXWDpIB1sXIv43zmk47dpwfRjDAERvlLZF6kwVOf9hUy2ynH241p
JrlF0uAGtSi0TLNvw0h2AKJmSXwGPMHCRyKoJjRWy4rLqWrawgLWg78wF5Mxn6AB
9eP1QRlSXIC5XFOKTYnVZ+TI1s4+eGpfc9cL3CyW66N6iOa/Dn4g4Mjp1E/cN1l+
/OwNxVX/Uk9yQFXExT+S3Lyhek4OZ78IcLKEJ3KM74cYR+D+T1I7l+QCDZnxeS66
RB7WPjqaYGic6inDwiuC9sO+UugizkCXgqTZN2dQr0rrlgsPF8dW//keDuvFOf31
XlYCENuagsswXw==
-----END CERTIFICATE-----
Generated at Fri Oct 9 20:04:00 2026 by rpki-client