Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft
File:                     uMiqGHMPSoPihSxWklUau1se5-o.mft (raw, json)
Hash identifier:          3JZB2FhyHe/Odaf7ipdSB2kPaNZSaISJZhcPfeh0Dp8=
Subject key identifier:   29:F6:45:CA:38:A7:E4:E8:0C:32:74:64:6D:C5:34:67:F8:5D:A9:1E
Authority key identifier: B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
Certificate issuer:       /CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Certificate serial:       019E9A3B4210E56AFAD91D8F4D97FFEDE185
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft
Manifest number:          1953
Signing time:             Sat 06 Jun 2026 00:00:35 +0000
Manifest this update:     Sat 06 Jun 2026 00:00:35 +0000
Manifest next update:     Sun 07 Jun 2026 00:00:35 +0000
Files and hashes:         1: 1-FwXe7PZZn8pbfNoA5f3LaxA9Z4.roa (hash: VNrmRdyCEMk5sVsUYPMlRs6jibn3G+c48bYYZcPJruY=)
                          2: 1v0gzSVrdpHJ1kxvOwfKSyYCpL8.roa (hash: cmDo8iK0CyxoS3TeSJaKn0b54YS7ZfZ1R+BFgSwd9T4=)
                          3: BeOlGfd4kyL56CFBTNlFeg1iQCc.roa (hash: 6DQD4VPy7IHhfQDtQNtD6rCp0/TWA+VmwTvJtNQ72aQ=)
                          4: etyrPt1aZEu7O63zljCUb1u_zQU.roa (hash: hrkIclXJJEK/pVdQYztmKRJMv7stBIcGF3RpANQ6FpQ=)
                          5: kltDPSTcnTIrexoD1sMXoWEDfig.roa (hash: +J8BVLpkJ8G69eEnylV5tiIBeDgKZy+3hkMu5nlYDBM=)
                          6: uMiqGHMPSoPihSxWklUau1se5-o.crl (hash: ssAkLnKZ+S7M16C5ZSliZ+Wo4lbw6G3sF9q78azzlW0=)
                          7: yP46kIpWtOqNANJHH7Ze_2pu2vw.roa (hash: oclUAkD+j2AdtktvuOa/dXAYpExh9g3kYwl48UqmTJE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 00:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9a:3b:42:10:e5:6a:fa:d9:1d:8f:4d:97:ff:ed:e1:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
        Validity
            Not Before: Jun  6 00:00:35 2026 GMT
            Not After : Jun  7 00:00:35 2026 GMT
        Subject: CN=29f645ca38a7e4e80c3274646dc53467f85da91e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:59:a8:aa:77:dc:d6:2d:a4:f9:9a:37:1b:89:
                    90:fe:1a:ce:e0:ad:38:3c:24:4f:60:56:e8:30:e4:
                    17:90:7f:58:b9:f1:e7:38:5b:ad:86:e5:15:af:e3:
                    a7:cf:ab:3e:0a:dc:c0:6c:75:0d:c3:42:26:17:22:
                    31:da:eb:2a:f5:57:5a:97:2d:68:93:ca:da:79:f7:
                    a6:a3:59:37:d4:51:61:f3:e3:6a:f4:18:24:83:9f:
                    a3:3f:26:2a:45:17:45:70:0d:f2:66:fa:cb:7a:64:
                    08:e7:86:2f:21:91:44:02:e6:c0:8b:f8:b2:34:47:
                    5f:34:55:11:09:6b:61:36:58:a5:ec:27:7a:33:bc:
                    4a:9a:41:fa:3b:73:79:fd:cc:91:41:14:d0:2a:53:
                    16:16:5c:bb:70:8a:5e:cf:3c:34:45:e8:36:13:89:
                    85:34:ab:22:25:3a:d9:fd:07:0c:3a:ea:8f:29:37:
                    83:0c:0a:b7:c1:2b:4f:02:a1:66:1d:7c:0d:b1:ec:
                    50:8e:cd:b1:b5:52:97:fc:9d:0d:73:53:47:06:0c:
                    7f:0c:d5:99:8b:27:67:26:75:a2:2d:85:3f:8a:52:
                    3b:a0:b0:3a:de:c1:83:a6:4a:b7:34:44:44:54:67:
                    4a:3c:2f:34:6d:3e:4c:26:99:e9:c8:24:8f:6e:9d:
                    87:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F6:45:CA:38:A7:E4:E8:0C:32:74:64:6D:C5:34:67:F8:5D:A9:1E
            X509v3 Authority Key Identifier:
                keyid:B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:80:25:56:bd:2e:9c:b7:a4:c8:3b:2e:5b:25:37:ee:4c:77:
         ae:3b:50:68:5b:40:0c:77:c8:62:06:0a:64:e9:af:78:9e:ff:
         8d:e4:13:eb:c7:48:fc:c1:f3:08:99:37:de:0f:6f:07:b9:1d:
         95:17:43:e0:03:c3:36:d9:ba:f2:c9:2b:95:51:7c:2f:00:1d:
         d4:67:6b:5f:ae:ad:a8:34:a8:61:c8:34:48:ec:d1:a9:60:6c:
         c3:04:9e:92:26:f4:d7:ff:4a:76:69:9a:12:ac:68:40:1d:b1:
         10:28:a9:31:69:be:48:1e:05:25:ea:51:27:23:af:ac:75:b7:
         97:b3:ad:38:08:d6:3a:d1:bd:88:33:fd:da:c3:f3:5b:29:dd:
         18:ba:02:f7:07:de:3e:d3:79:c0:ef:9d:83:b5:e5:c5:a8:c5:
         39:f3:6d:a8:d2:87:c3:20:98:4e:da:21:6c:a9:1e:66:c7:bd:
         2e:c0:f0:96:f7:b4:9a:93:b6:2f:45:4a:f9:6b:67:94:c7:ad:
         db:c2:f4:5e:ac:ae:3e:1a:21:a3:69:31:e1:c7:a9:36:1a:1f:
         b4:3f:d8:4d:37:b5:80:20:11:46:d6:4f:dc:fe:f4:3b:85:35:
         52:47:08:3a:48:38:7c:49:80:4c:cf:b2:5e:3d:4c:0a:30:c1:
         83:e7:e7:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6aO0IQ5Wr62R2PTZf/7eGFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4YzhhYTE4NzMwZjRhODNlMjg1MmM1NjkyNTUxYWJiNWIx
ZWU3ZWEwHhcNMjYwNjA2MDAwMDM1WhcNMjYwNjA3MDAwMDM1WjAzMTEwLwYDVQQD
EygyOWY2NDVjYTM4YTdlNGU4MGMzMjc0NjQ2ZGM1MzQ2N2Y4NWRhOTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1moqnfc1i2k+Zo3G4mQ/hrO4K04
PCRPYFboMOQXkH9YufHnOFuthuUVr+Onz6s+CtzAbHUNw0ImFyIx2usq9Vdaly1o
k8raefemo1k31FFh8+Nq9Bgkg5+jPyYqRRdFcA3yZvrLemQI54YvIZFEAubAi/iy
NEdfNFURCWthNlil7Cd6M7xKmkH6O3N5/cyRQRTQKlMWFly7cIpezzw0Reg2E4mF
NKsiJTrZ/QcMOuqPKTeDDAq3wStPAqFmHXwNsexQjs2xtVKX/J0Nc1NHBgx/DNWZ
iydnJnWiLYU/ilI7oLA63sGDpkq3NEREVGdKPC80bT5MJpnpyCSPbp2HpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCn2Rco4p+ToDDJ0ZG3FNGf4XakeMB8GA1UdIwQY
MBaAFLjIqhhzD0qD4oUsVpJVGrtbHufqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU1pcUdITVBTb1BpaFN4V2tsVWF1MXNlNS1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9hOTQ5OTItNTY2Yi00YjZmLWE2ODkt
YTU3NjA0YTNmNmJiLzEvdU1pcUdITVBTb1BpaFN4V2tsVWF1MXNlNS1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9hOTQ5OTItNTY2Yi00YjZmLWE2ODktYTU3NjA0YTNmNmJi
LzEvdU1pcUdITVBTb1BpaFN4V2tsVWF1MXNlNS1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArIAlVr0u
nLekyDsuWyU37kx3rjtQaFtADHfIYgYKZOmveJ7/jeQT68dI/MHzCJk33g9vB7kd
lRdD4APDNtm68skrlVF8LwAd1GdrX66tqDSoYcg0SOzRqWBswwSekib01/9Kdmma
EqxoQB2xECipMWm+SB4FJepRJyOvrHW3l7OtOAjWOtG9iDP92sPzWyndGLoC9wfe
PtN5wO+dg7XlxajFOfNtqNKHwyCYTtohbKkeZse9LsDwlve0mpO2L0VK+WtnlMet
28L0XqyuPhoho2kx4cepNhoftD/YTTe1gCARRtZP3P70O4U1UkcIOkg4fEmATM+y
Xj1MCjDBg+fnjw==
-----END CERTIFICATE-----
Generated at Sat Jun 6 07:05:44 2026 by rpki-client