Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/1-uVkXZvEmKXdjb7pPxd8AvmmEmo.mft
File:                     1-uVkXZvEmKXdjb7pPxd8AvmmEmo.mft (raw, json)
Hash identifier:          QhBX5svY7mxr5FMFnU3ZM7RrwES541ajjGVqEb00If0=
Subject key identifier:   08:36:1B:30:DE:9A:22:7D:B8:8B:13:AE:F2:FD:DE:27:38:32:6E:91
Authority key identifier: FA:E5:64:5D:9B:C4:98:A5:DD:8D:BE:E9:3F:17:7C:02:F9:A6:12:6A
Certificate issuer:       /CN=fae5645d9bc498a5dd8dbee93f177c02f9a6126a
Certificate serial:       01A0B508BB5A44FFB98330C32F93C0E6AA37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uVkXZvEmKXdjb7pPxd8AvmmEmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/1-uVkXZvEmKXdjb7pPxd8AvmmEmo.mft
Manifest number:          D7
Signing time:             Fri 18 Sep 2026 15:00:43 +0000
Manifest this update:     Fri 18 Sep 2026 15:00:43 +0000
Manifest next update:     Sat 19 Sep 2026 15:00:43 +0000
Files and hashes:         1: 1-uVkXZvEmKXdjb7pPxd8AvmmEmo.crl (hash: CQMe6WaJxQ3q29qUC+RuvvRJQT2safYo4Bnxo5jlQjU=)
                          2: uwzxrH7NIE-q1j_lxiuYaoOWd50.asa (hash: tiF0BpVFfc++mp+oDIIX0YXSnNLzkExC3lldvN2c2+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/1-uVkXZvEmKXdjb7pPxd8AvmmEmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/1-uVkXZvEmKXdjb7pPxd8AvmmEmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-uVkXZvEmKXdjb7pPxd8AvmmEmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 15:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b5:08:bb:5a:44:ff:b9:83:30:c3:2f:93:c0:e6:aa:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae5645d9bc498a5dd8dbee93f177c02f9a6126a
        Validity
            Not Before: Sep 18 15:00:43 2026 GMT
            Not After : Sep 19 15:00:43 2026 GMT
        Subject: CN=08361b30de9a227db88b13aef2fdde2738326e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9f:85:e6:8e:bc:6c:e3:17:0c:99:9a:93:63:
                    a7:ce:e3:ef:e8:65:84:88:95:0b:7e:9e:1e:95:41:
                    9e:25:fd:ea:1f:2e:b7:dd:95:9f:24:44:86:5d:01:
                    d2:b0:8a:6a:e5:21:d0:e6:47:27:f2:08:3c:bf:9b:
                    cb:3d:69:01:52:13:34:ae:fd:36:b8:a3:d7:41:2e:
                    01:d7:71:8a:fa:02:a7:c4:36:f7:f0:ab:b7:11:3b:
                    20:c7:4d:73:2e:57:63:cb:84:47:b8:d0:9e:f4:c1:
                    bb:25:00:59:c6:f8:04:a3:b9:06:3f:79:51:46:7b:
                    49:3c:ee:46:e9:45:31:06:48:93:09:f5:d2:58:03:
                    f1:5d:2a:dd:ca:17:45:c5:87:be:51:3a:80:2a:ad:
                    79:32:bc:e3:a0:19:22:5e:3b:f2:7d:a3:03:b5:ee:
                    97:d7:14:b1:ce:b8:fd:5e:02:17:2a:82:58:ab:ce:
                    23:86:9a:2f:01:20:9b:df:e2:ec:ed:ee:0f:1f:2d:
                    c2:d4:45:0d:79:1b:a7:5b:77:f8:6c:af:2a:5f:e0:
                    c1:fc:84:f7:1d:3d:32:6f:4b:71:45:de:69:5b:5b:
                    6f:59:21:6c:e1:e5:01:19:45:44:55:80:f8:b9:01:
                    2b:0f:f7:a6:53:62:df:9f:8c:0f:a4:dc:2e:95:de:
                    b6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:36:1B:30:DE:9A:22:7D:B8:8B:13:AE:F2:FD:DE:27:38:32:6E:91
            X509v3 Authority Key Identifier:
                keyid:FA:E5:64:5D:9B:C4:98:A5:DD:8D:BE:E9:3F:17:7C:02:F9:A6:12:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uVkXZvEmKXdjb7pPxd8AvmmEmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/1-uVkXZvEmKXdjb7pPxd8AvmmEmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/1-uVkXZvEmKXdjb7pPxd8AvmmEmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:8d:3e:fb:72:4c:7c:a5:76:8d:d9:82:4b:db:c8:62:bd:a1:
         f1:4a:7d:ae:77:99:b2:bb:7a:17:c4:f8:f9:5f:1d:99:13:c6:
         f2:f1:23:1e:83:de:c1:15:18:76:fa:cc:48:c0:bb:0b:fd:1a:
         fd:18:23:5d:9a:8a:11:c6:a9:d9:6f:6b:06:09:a0:ac:af:5e:
         89:d4:b5:d1:5d:12:d6:99:73:f8:c7:d6:7a:f4:1c:de:f1:b1:
         df:c5:3d:bf:99:37:26:7f:7e:c2:87:7e:6e:e1:76:e1:eb:75:
         a5:47:65:58:9f:9d:28:79:1c:22:d5:b5:63:75:04:00:f4:06:
         26:58:e0:de:6a:a1:0a:bc:0d:6b:66:e0:0c:7e:e2:1a:ef:70:
         a5:b6:5c:4f:10:22:5c:ba:a3:03:60:10:f9:58:09:bf:6d:71:
         cd:4a:c7:07:f7:53:d5:fd:7f:39:3d:6a:39:31:9f:23:d3:28:
         9f:2a:f9:d6:c0:05:b4:2e:15:34:97:f5:1c:1f:32:b1:ac:74:
         b0:79:49:cc:56:37:34:f0:dd:77:a0:d9:3d:86:c9:2c:ec:8e:
         65:98:38:c9:a2:94:57:e2:08:bb:af:57:2e:a7:c4:7d:46:9a:
         a6:79:77:c4:60:fd:50:7a:8b:5e:5d:d5:42:2b:3c:4a:6f:f3:
         1e:e9:3f:11
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaC1CLtaRP+5gzDDL5PA5qo3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZTU2NDVkOWJjNDk4YTVkZDhkYmVlOTNmMTc3YzAyZjlh
NjEyNmEwHhcNMjYwOTE4MTUwMDQzWhcNMjYwOTE5MTUwMDQzWjAzMTEwLwYDVQQD
EygwODM2MWIzMGRlOWEyMjdkYjg4YjEzYWVmMmZkZGUyNzM4MzI2ZTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Z+F5o68bOMXDJmak2OnzuPv6GWE
iJULfp4elUGeJf3qHy633ZWfJESGXQHSsIpq5SHQ5kcn8gg8v5vLPWkBUhM0rv02
uKPXQS4B13GK+gKnxDb38Ku3ETsgx01zLldjy4RHuNCe9MG7JQBZxvgEo7kGP3lR
RntJPO5G6UUxBkiTCfXSWAPxXSrdyhdFxYe+UTqAKq15MrzjoBkiXjvyfaMDte6X
1xSxzrj9XgIXKoJYq84jhpovASCb3+Ls7e4PHy3C1EUNeRunW3f4bK8qX+DB/IT3
HT0yb0txRd5pW1tvWSFs4eUBGUVEVYD4uQErD/emU2Lfn4wPpNwuld62WQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAg2GzDemiJ9uIsTrvL93ic4Mm6RMB8GA1UdIwQY
MBaAFPrlZF2bxJil3Y2+6T8XfAL5phJqMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS11VmtYWnZFbUtYZGpiN3BQeGQ4QXZtbUVtby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvMGE1NmNlLWZmZWYtNDllNC1hZWZj
LTY1OTNjNjQxYTMyMC8xLzEtdVZrWFp2RW1LWGRqYjdwUHhkOEF2bW1FbW8ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzUxLzBhNTZjZS1mZmVmLTQ5ZTQtYWVmYy02NTkzYzY0MWEz
MjAvMS8xLXVWa1hadkVtS1hkamI3cFB4ZDhBdm1tRW1vLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUI0+
+3JMfKV2jdmCS9vIYr2h8Up9rneZsrt6F8T4+V8dmRPG8vEjHoPewRUYdvrMSMC7
C/0a/RgjXZqKEcap2W9rBgmgrK9eidS10V0S1plz+MfWevQc3vGx38U9v5k3Jn9+
wod+buF24et1pUdlWJ+dKHkcItW1Y3UEAPQGJljg3mqhCrwNa2bgDH7iGu9wpbZc
TxAiXLqjA2AQ+VgJv21xzUrHB/dT1f1/OT1qOTGfI9Monyr51sAFtC4VNJf1HB8y
sax0sHlJzFY3NPDdd6DZPYbJLOyOZZg4yaKUV+IIu69XLqfEfUaapnl3xGD9UHqL
Xl3VQis8Sm/zHuk/EQ==
-----END CERTIFICATE-----
Generated at Fri Sep 18 19:39:52 2026 by rpki-client