Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
File:                     uZndWsAyJYRLa0kPkvA0fM8JZwg.mft (raw, json)
Hash identifier:          wL9McQovnsRbZTiReFTrm++qLHNwWX89ajEloyJmYwc=
Subject key identifier:   E6:BD:20:DF:F5:D8:7F:50:49:71:6D:17:46:36:E7:7F:84:56:BF:F0
Authority key identifier: B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08
Certificate issuer:       /CN=b999dd5ac03225844b6b490f92f0347ccf096708
Certificate serial:       01A1479798B58DB489228E6EF0985A553A20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
Manifest number:          18B4
Signing time:             Sat 17 Oct 2026 02:01:19 +0000
Manifest this update:     Sat 17 Oct 2026 02:01:19 +0000
Manifest next update:     Sun 18 Oct 2026 02:01:19 +0000
Files and hashes:         1: 0sG02fRT--XJolYuZ7_jXyMamw4.roa (hash: YsaXqtsrHkKSzKqIrNyEZ6rkNj200yF1XlYMTQ9by/Q=)
                          2: uZndWsAyJYRLa0kPkvA0fM8JZwg.crl (hash: +rJuuuB4q7xCXwTZjGCtSEsXwDgMcTkBEvSNncxtKiA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 20:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:47:97:98:b5:8d:b4:89:22:8e:6e:f0:98:5a:55:3a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b999dd5ac03225844b6b490f92f0347ccf096708
        Validity
            Not Before: Oct 17 02:01:19 2026 GMT
            Not After : Oct 18 02:01:19 2026 GMT
        Subject: CN=e6bd20dff5d87f5049716d174636e77f8456bff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3d:03:0f:5b:9e:ec:25:67:84:4a:2b:be:86:
                    b9:37:0e:b8:97:e5:cf:64:a4:e1:9d:29:62:b0:cf:
                    23:41:66:ad:a1:c9:3e:89:ae:d5:4c:20:a1:c1:23:
                    a5:5a:59:43:d2:84:6c:51:a8:cd:f4:ac:92:55:9a:
                    9c:a9:25:3f:8b:d0:98:0d:95:8b:98:96:c2:ae:8d:
                    2f:1a:c9:5e:02:8f:c0:05:a3:23:05:fc:b5:c7:f5:
                    2b:ea:f2:09:e1:b4:09:e6:64:62:13:d8:fe:cb:eb:
                    6c:50:f7:14:37:e4:10:f0:37:52:5a:22:c7:08:7c:
                    b3:66:0d:b8:d4:85:ec:35:9b:79:3d:a3:69:c8:47:
                    bb:b2:93:01:3d:3b:a8:0c:c5:c3:6b:f8:e5:99:8a:
                    02:ca:39:6a:39:03:4f:95:63:9b:2d:e9:b9:8a:d1:
                    e1:d7:60:bf:02:a3:d9:dd:93:8d:1f:3a:68:fc:88:
                    c3:2b:55:8d:42:b2:19:2d:07:f4:91:53:ee:e5:b0:
                    14:8a:8e:ba:5f:0c:93:44:6e:ba:02:f2:b7:eb:52:
                    af:7e:80:f7:ff:fa:10:f9:bc:b7:68:5b:e3:f5:7a:
                    29:2c:7b:fd:84:0f:2a:6a:bd:a3:50:60:36:4e:5e:
                    15:25:b7:c8:ba:ef:5c:f0:4b:77:87:30:be:8f:06:
                    87:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:BD:20:DF:F5:D8:7F:50:49:71:6D:17:46:36:E7:7F:84:56:BF:F0
            X509v3 Authority Key Identifier:
                keyid:B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:05:9f:a1:72:9f:1b:8f:cb:71:75:09:a7:1a:ea:8a:71:0c:
         aa:eb:c8:c4:08:d7:ac:f7:47:a2:21:55:f2:0a:8e:74:f9:bc:
         8d:66:89:52:a5:cd:21:45:bf:6f:89:1c:a0:04:78:94:ac:fe:
         8d:b7:fa:c9:c8:68:16:99:13:de:32:24:5e:47:a2:fb:bb:71:
         94:bd:b0:e9:da:93:e0:96:43:91:93:08:6a:b5:de:6b:98:33:
         00:08:ec:09:84:20:db:79:d7:c8:1a:b1:c8:de:08:69:25:2e:
         be:9f:73:66:e3:4d:e6:eb:db:47:cb:c5:32:20:4f:50:f4:c8:
         3d:c5:c1:f3:5e:2b:26:2f:08:66:ed:93:6b:14:59:c1:81:9f:
         08:7d:17:e2:58:44:35:1e:65:9a:7c:78:64:55:da:6e:ad:0d:
         07:55:46:1c:30:40:a1:f0:97:38:ac:c8:53:e3:5a:c1:af:07:
         95:0c:52:48:8b:f4:fd:99:b4:95:04:84:f5:be:5b:8a:b7:d1:
         cf:f2:c0:76:38:50:f8:c6:be:8a:d7:e0:53:da:ca:12:f9:1b:
         fb:48:1d:b6:b4:05:cd:54:cc:f5:05:b8:2e:1d:bc:63:44:e7:
         fa:0f:81:2c:c8:aa:0e:68:d0:87:9a:a3:d0:6a:71:54:f3:de:
         ab:b5:a6:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFHl5i1jbSJIo5u8JhaVTogMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTlkZDVhYzAzMjI1ODQ0YjZiNDkwZjkyZjAzNDdjY2Yw
OTY3MDgwHhcNMjYxMDE3MDIwMTE5WhcNMjYxMDE4MDIwMTE5WjAzMTEwLwYDVQQD
EyhlNmJkMjBkZmY1ZDg3ZjUwNDk3MTZkMTc0NjM2ZTc3Zjg0NTZiZmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzj0DD1ue7CVnhEorvoa5Nw64l+XP
ZKThnSlisM8jQWatock+ia7VTCChwSOlWllD0oRsUajN9KySVZqcqSU/i9CYDZWL
mJbCro0vGsleAo/ABaMjBfy1x/Ur6vIJ4bQJ5mRiE9j+y+tsUPcUN+QQ8DdSWiLH
CHyzZg241IXsNZt5PaNpyEe7spMBPTuoDMXDa/jlmYoCyjlqOQNPlWObLem5itHh
12C/AqPZ3ZONHzpo/IjDK1WNQrIZLQf0kVPu5bAUio66XwyTRG66AvK361KvfoD3
//oQ+by3aFvj9XopLHv9hA8qar2jUGA2Tl4VJbfIuu9c8Et3hzC+jwaHJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOa9IN/12H9QSXFtF0Y253+EVr/wMB8GA1UdIwQY
MBaAFLmZ3VrAMiWES2tJD5LwNHzPCWcIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpuZFdzQXlKWVJMYTBrUGt2QTBmTThKWndnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9jN2YwNWQtMzVmNS00MTE1LTlmN2Yt
ZmNhYWYyZWYzNjAxLzEvdVpuZFdzQXlKWVJMYTBrUGt2QTBmTThKWndnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9jN2YwNWQtMzVmNS00MTE1LTlmN2YtZmNhYWYyZWYzNjAx
LzEvdVpuZFdzQXlKWVJMYTBrUGt2QTBmTThKWndnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYgWfoXKf
G4/LcXUJpxrqinEMquvIxAjXrPdHoiFV8gqOdPm8jWaJUqXNIUW/b4kcoAR4lKz+
jbf6ychoFpkT3jIkXkei+7txlL2w6dqT4JZDkZMIarXea5gzAAjsCYQg23nXyBqx
yN4IaSUuvp9zZuNN5uvbR8vFMiBPUPTIPcXB814rJi8IZu2TaxRZwYGfCH0X4lhE
NR5lmnx4ZFXabq0NB1VGHDBAofCXOKzIU+Nawa8HlQxSSIv0/Zm0lQSE9b5birfR
z/LAdjhQ+Ma+itfgU9rKEvkb+0gdtrQFzVTM9QW4Lh28Y0Tn+g+BLMiqDmjQh5qj
0GpxVPPeq7WmZA==
-----END CERTIFICATE-----
Generated at Sat Oct 17 05:54:12 2026 by rpki-client