Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
File:                     uZndWsAyJYRLa0kPkvA0fM8JZwg.mft (raw, json)
Hash identifier:          ujJb02GIpknvz80zi3WjAkhCrIDb9rC+u2CJfniPIEA=
Subject key identifier:   A0:0A:D3:90:AF:01:45:E8:DE:FB:38:7E:B9:54:13:C9:8D:95:2F:5F
Authority key identifier: B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08
Certificate issuer:       /CN=b999dd5ac03225844b6b490f92f0347ccf096708
Certificate serial:       019E31BC34633F33A344F3593EEC992AEC68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
Manifest number:          171B
Signing time:             Sat 16 May 2026 17:01:18 +0000
Manifest this update:     Sat 16 May 2026 17:01:18 +0000
Manifest next update:     Sun 17 May 2026 17:01:18 +0000
Files and hashes:         1: 0sG02fRT--XJolYuZ7_jXyMamw4.roa (hash: YsaXqtsrHkKSzKqIrNyEZ6rkNj200yF1XlYMTQ9by/Q=)
                          2: uZndWsAyJYRLa0kPkvA0fM8JZwg.crl (hash: aeeF6OpL62JEcDrCugTvITfSyfNlUnJnLgevMl9Myzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:bc:34:63:3f:33:a3:44:f3:59:3e:ec:99:2a:ec:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b999dd5ac03225844b6b490f92f0347ccf096708
        Validity
            Not Before: May 16 17:01:18 2026 GMT
            Not After : May 17 17:01:18 2026 GMT
        Subject: CN=a00ad390af0145e8defb387eb95413c98d952f5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e2:9c:08:d0:1c:32:48:27:49:aa:d4:d8:82:
                    e1:26:3e:ab:16:36:2d:3a:9b:99:70:49:8c:d8:d2:
                    0c:2f:13:f9:62:d9:fa:fc:c6:57:db:92:14:f6:40:
                    ab:a4:eb:ac:ae:f2:07:6b:a0:a4:fb:66:04:30:99:
                    9e:f7:bb:6c:16:13:c8:3d:be:8a:e9:43:6c:01:ff:
                    2c:dd:2e:c5:6e:06:99:a6:1e:2f:f0:08:c7:71:e1:
                    48:70:b9:2a:11:6b:fd:e0:30:58:fc:33:27:4a:cf:
                    14:29:6c:3e:9c:93:5d:63:70:0e:76:4d:8d:03:cb:
                    5c:66:61:a3:c3:9d:35:82:1f:f0:3a:42:9c:bc:b3:
                    0f:0a:80:96:68:7d:f7:81:e9:ff:3c:87:6c:e2:72:
                    71:5f:ed:d2:48:48:3e:81:af:22:bb:47:7e:62:85:
                    74:b1:19:04:40:72:fc:d6:ea:e0:a9:f9:2c:32:55:
                    25:3a:06:21:13:17:10:37:51:95:c8:af:58:8f:52:
                    b9:27:d6:50:7a:89:13:6b:81:0a:97:73:d8:70:bf:
                    72:b5:5d:ad:4e:04:b7:b2:e0:34:36:ae:89:6b:18:
                    a5:1b:bc:65:49:01:a2:c8:b7:80:b0:54:17:2b:9c:
                    79:39:7c:05:14:ee:50:c3:a0:42:ef:8c:78:61:e5:
                    fe:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:0A:D3:90:AF:01:45:E8:DE:FB:38:7E:B9:54:13:C9:8D:95:2F:5F
            X509v3 Authority Key Identifier:
                keyid:B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:a3:f2:74:03:28:29:14:f8:31:1a:62:da:65:0e:b7:ff:49:
         29:cb:21:dd:f7:cf:9f:d8:30:37:6d:a5:c2:66:10:0f:01:69:
         40:28:68:28:55:40:2e:4f:7a:6d:47:32:5e:8d:27:bf:90:0c:
         25:e0:77:52:2f:1c:2d:e6:14:29:60:81:5f:45:5e:37:80:e1:
         08:1f:43:0e:15:76:de:ff:dc:a9:c6:df:b8:e5:5a:1d:81:dc:
         82:f3:fd:44:2f:81:d0:a0:fe:ca:ec:54:ea:48:27:25:e0:07:
         7a:1a:50:50:52:0d:fa:b1:02:48:b5:14:e5:18:d1:c5:89:dd:
         81:a3:aa:1d:45:4a:52:f8:92:1d:4d:1f:74:d0:57:e3:63:aa:
         79:f4:b8:6e:69:05:2e:a3:c1:ad:b7:89:0a:cc:36:f1:ad:a6:
         e8:6c:39:bb:dd:44:97:87:6d:54:95:42:9a:ce:5f:fd:83:29:
         e6:a3:76:da:0c:c0:f6:62:68:67:e9:bd:fa:58:40:f2:8c:ac:
         0b:a7:ad:f7:8b:54:6f:59:57:99:b1:0b:7f:95:03:3c:67:08:
         94:94:54:da:0e:f3:32:e6:3f:b7:47:61:bb:d7:7f:23:9b:80:
         5a:f7:cc:20:c3:05:7f:89:48:16:60:e0:b2:4e:d9:69:20:ac:
         a7:63:ab:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xvDRjPzOjRPNZPuyZKuxoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTlkZDVhYzAzMjI1ODQ0YjZiNDkwZjkyZjAzNDdjY2Yw
OTY3MDgwHhcNMjYwNTE2MTcwMTE4WhcNMjYwNTE3MTcwMTE4WjAzMTEwLwYDVQQD
EyhhMDBhZDM5MGFmMDE0NWU4ZGVmYjM4N2ViOTU0MTNjOThkOTUyZjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+KcCNAcMkgnSarU2ILhJj6rFjYt
OpuZcEmM2NIMLxP5Ytn6/MZX25IU9kCrpOusrvIHa6Ck+2YEMJme97tsFhPIPb6K
6UNsAf8s3S7FbgaZph4v8AjHceFIcLkqEWv94DBY/DMnSs8UKWw+nJNdY3AOdk2N
A8tcZmGjw501gh/wOkKcvLMPCoCWaH33gen/PIds4nJxX+3SSEg+ga8iu0d+YoV0
sRkEQHL81urgqfksMlUlOgYhExcQN1GVyK9Yj1K5J9ZQeokTa4EKl3PYcL9ytV2t
TgS3suA0Nq6JaxilG7xlSQGiyLeAsFQXK5x5OXwFFO5Qw6BC74x4YeX+MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKAK05CvAUXo3vs4frlUE8mNlS9fMB8GA1UdIwQY
MBaAFLmZ3VrAMiWES2tJD5LwNHzPCWcIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpuZFdzQXlKWVJMYTBrUGt2QTBmTThKWndnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9jN2YwNWQtMzVmNS00MTE1LTlmN2Yt
ZmNhYWYyZWYzNjAxLzEvdVpuZFdzQXlKWVJMYTBrUGt2QTBmTThKWndnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9jN2YwNWQtMzVmNS00MTE1LTlmN2YtZmNhYWYyZWYzNjAx
LzEvdVpuZFdzQXlKWVJMYTBrUGt2QTBmTThKWndnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnaPydAMo
KRT4MRpi2mUOt/9JKcsh3ffPn9gwN22lwmYQDwFpQChoKFVALk96bUcyXo0nv5AM
JeB3Ui8cLeYUKWCBX0VeN4DhCB9DDhV23v/cqcbfuOVaHYHcgvP9RC+B0KD+yuxU
6kgnJeAHehpQUFIN+rECSLUU5RjRxYndgaOqHUVKUviSHU0fdNBX42OqefS4bmkF
LqPBrbeJCsw28a2m6Gw5u91El4dtVJVCms5f/YMp5qN22gzA9mJoZ+m9+lhA8oys
C6et94tUb1lXmbELf5UDPGcIlJRU2g7zMuY/t0dhu9d/I5uAWvfMIMMFf4lIFmDg
sk7ZaSCsp2Orgw==
-----END CERTIFICATE-----
Generated at Sat May 16 21:14:11 2026 by rpki-client