Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft
File:                     uNJRxL_VJtoGLUzir1a25G6SURc.mft (raw, json)
Hash identifier:          09HKBwqPzP6XmN3OXhdeQKlrkb0GHLN/opLoZy0vOl0=
Subject key identifier:   EE:F4:4E:24:20:B4:1D:4E:4B:CE:DB:EE:C0:BE:B9:50:67:B8:21:D9
Authority key identifier: B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17
Certificate issuer:       /CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
Certificate serial:       01A17B84460D9A02B356BD8FC73CD6A02503
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft
Manifest number:          1AC7
Signing time:             Tue 27 Oct 2026 04:00:28 +0000
Manifest this update:     Tue 27 Oct 2026 04:00:28 +0000
Manifest next update:     Wed 28 Oct 2026 04:00:28 +0000
Files and hashes:         1: 9Q6nU6Ov__KOkTwmSpk1ZBP9x4s.roa (hash: zRA5CI+R45kbSe5Kp/RvwdAAuwY45TD/QhpgQ2cow9Q=)
                          2: 9zanIZ7MEeT1oHmM73KPnI3KUEM.roa (hash: Jme7qQGkxTK5eI1p9XNoTtTYwDVKr6hYwFmD3XiO9Sk=)
                          3: Et1_SdwbVg4dskwSsE8Bb6_r0BQ.roa (hash: fkDE9HZ2X/FoPpPBL/xBOgXNWoBnauSZriz8/UyefOQ=)
                          4: nJVTV_xC46i_jMWC0u5aQlLsYTI.roa (hash: 1PR1dDwuBSuvJYidaakEzx/AJjq3GTgS+XI3K+QB2/k=)
                          5: uNJRxL_VJtoGLUzir1a25G6SURc.crl (hash: /D6039hABzgDFgBE19uCAO/v7Z60noJ6YlkJ7jroEx8=)
                          6: xUOg3UnR5NzZnsoqQTCM2z8QcuA.roa (hash: 1+/9Z/D/KU/a6AJWSS+7jp2T1wnZtSaOlAbOLEGldwc=)
                          7: yN-B2V0Dka04y-vFp5uchumgtKY.roa (hash: HJDoxjycVkfIV6zIX1nmMl83dxZXyYJ/bjTRUSF4UQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 04:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:84:46:0d:9a:02:b3:56:bd:8f:c7:3c:d6:a0:25:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
        Validity
            Not Before: Oct 27 04:00:28 2026 GMT
            Not After : Oct 28 04:00:28 2026 GMT
        Subject: CN=eef44e2420b41d4e4bcedbeec0beb95067b821d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b1:31:e4:b1:03:f7:1c:4a:d0:14:7a:72:55:
                    b4:f6:e6:93:11:38:79:26:eb:26:89:8e:54:4a:d5:
                    97:05:a8:22:d5:d5:b1:2f:da:99:b9:87:1c:e3:4d:
                    33:1e:9e:b2:18:0e:18:37:8c:bb:03:9c:4e:97:72:
                    a8:6b:ba:7b:20:1c:cc:94:1a:88:4f:50:31:af:3e:
                    12:58:16:86:53:83:16:13:ac:17:e4:47:2b:0f:16:
                    62:d0:c7:e2:aa:0b:e7:aa:5c:95:76:cf:18:a0:ba:
                    27:f0:d6:4a:4f:0f:aa:af:a7:d5:ce:73:33:ab:47:
                    c6:a2:38:6e:04:de:e2:f3:b3:96:b4:f4:72:bd:09:
                    d5:5f:6a:dd:db:37:59:2e:12:5f:eb:a2:27:bb:61:
                    78:13:6a:e4:e2:49:25:80:ca:ac:57:69:3a:05:36:
                    a7:14:11:e5:86:a7:ed:78:ba:45:5e:95:eb:18:bf:
                    db:18:11:4c:40:98:28:92:52:00:d7:47:35:63:90:
                    2e:df:ac:57:45:bc:c8:5c:d7:0e:8b:f3:f5:32:e0:
                    6b:a7:1d:32:39:cb:b9:e5:d0:a9:d4:2c:b0:9f:d2:
                    2d:96:c1:1b:a1:6c:f7:a8:87:55:e1:a5:5e:66:0a:
                    b8:36:59:33:23:fd:a8:05:00:02:3b:df:13:62:f2:
                    93:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F4:4E:24:20:B4:1D:4E:4B:CE:DB:EE:C0:BE:B9:50:67:B8:21:D9
            X509v3 Authority Key Identifier:
                keyid:B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:63:ba:03:5b:4b:24:ea:d1:62:b6:6e:37:46:59:11:ea:32:
         b9:6f:83:50:5a:34:f4:f7:11:87:ee:f0:dd:b2:ca:38:51:f7:
         6c:c1:be:13:49:a5:76:5a:5c:bc:d5:22:ad:7c:60:40:0b:aa:
         a7:99:18:e2:45:b7:11:2f:85:30:f0:e0:80:0a:f5:d8:2a:a9:
         62:98:0f:d8:d4:72:c4:ff:25:a6:b3:96:11:5a:e5:0f:88:81:
         42:4e:48:75:df:78:c6:1d:f7:6c:b9:1a:5a:d4:6e:02:21:cc:
         99:27:6c:75:04:02:cd:5b:d2:f1:7b:88:7f:0b:4b:fe:1e:da:
         cc:dd:a2:8b:b0:07:0c:fc:47:f7:e2:45:6e:ec:7e:9b:a3:10:
         81:66:27:01:6e:24:fd:26:b1:e8:e7:51:8a:4b:4f:47:e0:0e:
         a4:d2:91:9e:c8:09:81:5a:76:ba:ea:b5:9a:57:42:a2:9a:47:
         b9:3d:11:13:30:2b:0f:f9:14:0a:c0:a4:a5:27:e7:d2:eb:38:
         e4:a2:26:69:e6:0d:e4:9e:c2:02:ec:8b:fe:67:a0:c1:06:a5:
         74:e3:99:02:c6:05:83:3b:e6:fc:8d:ec:8b:21:16:ec:2d:a6:
         75:24:0b:34:da:2b:f0:a0:93:c0:28:10:60:48:95:b8:cf:bb:
         78:c6:4d:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF7hEYNmgKzVr2PxzzWoCUDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZDI1MWM0YmZkNTI2ZGEwNjJkNGNlMmFmNTZiNmU0NmU5
MjUxMTcwHhcNMjYxMDI3MDQwMDI4WhcNMjYxMDI4MDQwMDI4WjAzMTEwLwYDVQQD
EyhlZWY0NGUyNDIwYjQxZDRlNGJjZWRiZWVjMGJlYjk1MDY3YjgyMWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibEx5LED9xxK0BR6clW09uaTETh5
JusmiY5UStWXBagi1dWxL9qZuYcc400zHp6yGA4YN4y7A5xOl3Koa7p7IBzMlBqI
T1Axrz4SWBaGU4MWE6wX5EcrDxZi0MfiqgvnqlyVds8YoLon8NZKTw+qr6fVznMz
q0fGojhuBN7i87OWtPRyvQnVX2rd2zdZLhJf66Inu2F4E2rk4kklgMqsV2k6BTan
FBHlhqfteLpFXpXrGL/bGBFMQJgoklIA10c1Y5Au36xXRbzIXNcOi/P1MuBrpx0y
Ocu55dCp1Cywn9ItlsEboWz3qIdV4aVeZgq4NlkzI/2oBQACO98TYvKTTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO70TiQgtB1OS87b7sC+uVBnuCHZMB8GA1UdIwQY
MBaAFLjSUcS/1SbaBi1M4q9WtuRuklEXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU5KUnhMX1ZKdG9HTFV6aXIxYTI1RzZTVVJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi82MjE5NDEtZjUzYy00NDhmLWJkMzAt
NDJiM2Q2OGI1Njc2LzEvdU5KUnhMX1ZKdG9HTFV6aXIxYTI1RzZTVVJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi82MjE5NDEtZjUzYy00NDhmLWJkMzAtNDJiM2Q2OGI1Njc2
LzEvdU5KUnhMX1ZKdG9HTFV6aXIxYTI1RzZTVVJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQWO6A1tL
JOrRYrZuN0ZZEeoyuW+DUFo09PcRh+7w3bLKOFH3bMG+E0mldlpcvNUirXxgQAuq
p5kY4kW3ES+FMPDggAr12CqpYpgP2NRyxP8lprOWEVrlD4iBQk5Idd94xh33bLka
WtRuAiHMmSdsdQQCzVvS8XuIfwtL/h7azN2ii7AHDPxH9+JFbux+m6MQgWYnAW4k
/Sax6OdRiktPR+AOpNKRnsgJgVp2uuq1mldCoppHuT0REzArD/kUCsCkpSfn0us4
5KImaeYN5J7CAuyL/megwQaldOOZAsYFgzvm/I3siyEW7C2mdSQLNNor8KCTwCgQ
YEiVuM+7eMZNFA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:10:19 2026 by rpki-client