Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft
File:                     UoPLS4EObFkudHmvpCEY91XH-H4.mft (raw, json)
Hash identifier:          iwBRGQYJEdiZ7HNxVbuXJhg4K1oi9RNrsNN0otEkwd4=
Subject key identifier:   0B:5E:19:7C:08:FF:F9:34:E2:54:7F:57:08:5B:BA:38:02:0B:34:16
Authority key identifier: 52:83:CB:4B:81:0E:6C:59:2E:74:79:AF:A4:21:18:F7:55:C7:F8:7E
Certificate issuer:       /CN=5283cb4b810e6c592e7479afa42118f755c7f87e
Certificate serial:       01A18AC0256E74623615DB83E23DFCED57E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UoPLS4EObFkudHmvpCEY91XH-H4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft
Manifest number:          0A62
Signing time:             Fri 30 Oct 2026 03:00:10 +0000
Manifest this update:     Fri 30 Oct 2026 03:00:10 +0000
Manifest next update:     Sat 31 Oct 2026 03:00:10 +0000
Files and hashes:         1: HmNqE0h2Fdp2DXd4XO_8pqpFAsM.roa (hash: +R7voTq5Oy//ohBpR1uYG9F4X7IsrLd7JvniEXqhDlQ=)
                          2: UoPLS4EObFkudHmvpCEY91XH-H4.crl (hash: juC8L2xKZAHOCIgrHOT3EVkM86B+Pr7HhsNYUKV+Q4c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UoPLS4EObFkudHmvpCEY91XH-H4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8a:c0:25:6e:74:62:36:15:db:83:e2:3d:fc:ed:57:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5283cb4b810e6c592e7479afa42118f755c7f87e
        Validity
            Not Before: Oct 30 03:00:10 2026 GMT
            Not After : Oct 31 03:00:10 2026 GMT
        Subject: CN=0b5e197c08fff934e2547f57085bba38020b3416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e6:94:f6:c3:51:b5:4b:18:1e:43:50:fc:e8:
                    a5:a3:fb:e2:4b:65:ae:4a:eb:bd:e4:67:45:7e:d6:
                    61:7d:c5:28:e6:e6:a2:81:2e:59:51:11:99:12:8e:
                    fb:79:30:08:e5:7b:fa:9e:1e:ef:75:23:24:e5:c3:
                    1c:f5:85:8b:d7:fb:89:0f:a4:b3:85:a8:7d:e7:5e:
                    b6:18:9e:93:3d:4e:99:a2:99:12:48:77:e7:f2:7f:
                    43:c0:a5:2f:75:36:06:75:1b:bd:de:0b:02:58:04:
                    9d:fe:95:7d:5f:ca:af:56:1f:50:b8:55:d8:eb:0e:
                    82:c4:f1:cb:9c:21:2a:d3:de:ba:b2:c2:a6:3d:ae:
                    84:46:6e:33:6b:98:cd:e6:c5:38:c8:77:e7:ba:fd:
                    5b:0e:07:c5:fc:df:13:88:be:08:5f:3a:db:ae:a9:
                    b9:08:23:be:2b:1c:2a:69:f8:db:a7:f7:d9:3f:d0:
                    f9:3a:2f:99:44:5f:24:0f:ed:00:d8:4d:bf:16:66:
                    76:6d:e9:a0:91:32:a7:9e:69:1b:d8:fb:0c:21:6d:
                    0e:74:09:8e:44:8e:6e:b8:53:4c:a4:59:66:41:4f:
                    50:ac:ae:c5:d8:92:13:31:49:b4:91:3c:86:68:66:
                    1e:67:61:d2:90:5b:1b:1a:25:b7:62:87:d3:d7:cb:
                    58:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:5E:19:7C:08:FF:F9:34:E2:54:7F:57:08:5B:BA:38:02:0B:34:16
            X509v3 Authority Key Identifier:
                keyid:52:83:CB:4B:81:0E:6C:59:2E:74:79:AF:A4:21:18:F7:55:C7:F8:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoPLS4EObFkudHmvpCEY91XH-H4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:e1:fc:65:44:e8:16:df:9d:0d:36:58:18:43:7e:d0:de:4d:
         17:6a:80:af:36:94:ea:29:1f:08:35:08:1e:83:42:36:ee:5c:
         ff:55:0b:be:c5:b4:c4:7e:da:60:e1:5b:9c:2d:45:8d:65:78:
         94:e4:90:e2:f1:c8:0c:d8:a8:ce:53:d1:e2:c2:25:31:2e:22:
         0b:24:b8:9c:8d:4a:ec:25:4b:08:90:fa:27:fd:20:3b:76:df:
         ac:c9:9a:d5:5a:54:85:16:e7:73:a3:bf:c0:92:97:c8:38:a3:
         68:6c:c4:a2:f4:b3:78:95:b7:65:b2:5d:7e:98:ad:7d:7d:e9:
         5c:ea:98:25:15:09:3d:3c:4f:c1:f8:f2:32:e8:92:ce:24:a0:
         ab:74:e9:63:a0:4b:47:e4:9c:c8:49:1f:bf:24:a5:6b:ea:5d:
         8d:71:f6:a4:5a:44:27:2e:69:dc:71:78:ab:4e:11:91:b6:0c:
         58:86:43:b6:ab:6c:7b:9d:e4:d8:07:ac:fe:f2:7f:2f:ed:7c:
         74:d1:12:9a:d1:af:7d:bb:fe:4a:23:50:fc:ed:fe:aa:55:f6:
         0b:0e:7f:73:a4:d4:92:88:65:56:1a:ea:00:b8:f4:7c:a9:10:
         ad:4a:1b:8c:9c:b0:16:c9:3a:9f:70:3f:82:27:95:b0:69:ff:
         e4:34:c4:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGKwCVudGI2FduD4j387VfgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyODNjYjRiODEwZTZjNTkyZTc0NzlhZmE0MjExOGY3NTVj
N2Y4N2UwHhcNMjYxMDMwMDMwMDEwWhcNMjYxMDMxMDMwMDEwWjAzMTEwLwYDVQQD
EygwYjVlMTk3YzA4ZmZmOTM0ZTI1NDdmNTcwODViYmEzODAyMGIzNDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquaU9sNRtUsYHkNQ/Oilo/viS2Wu
Suu95GdFftZhfcUo5uaigS5ZURGZEo77eTAI5Xv6nh7vdSMk5cMc9YWL1/uJD6Sz
hah95162GJ6TPU6ZopkSSHfn8n9DwKUvdTYGdRu93gsCWASd/pV9X8qvVh9QuFXY
6w6CxPHLnCEq0966ssKmPa6ERm4za5jN5sU4yHfnuv1bDgfF/N8TiL4IXzrbrqm5
CCO+Kxwqafjbp/fZP9D5Oi+ZRF8kD+0A2E2/FmZ2bemgkTKnnmkb2PsMIW0OdAmO
RI5uuFNMpFlmQU9QrK7F2JITMUm0kTyGaGYeZ2HSkFsbGiW3YofT18tYcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAteGXwI//k04lR/VwhbujgCCzQWMB8GA1UdIwQY
MBaAFFKDy0uBDmxZLnR5r6QhGPdVx/h+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW9QTFM0RU9iRmt1ZEhtdnBDRVk5MVhILUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS82NWFhZjQtYTAwNS00NTFiLTkwMjYt
ZGZmMzUxOWIyYTA2LzEvVW9QTFM0RU9iRmt1ZEhtdnBDRVk5MVhILUg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS82NWFhZjQtYTAwNS00NTFiLTkwMjYtZGZmMzUxOWIyYTA2
LzEvVW9QTFM0RU9iRmt1ZEhtdnBDRVk5MVhILUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYOH8ZUTo
Ft+dDTZYGEN+0N5NF2qArzaU6ikfCDUIHoNCNu5c/1ULvsW0xH7aYOFbnC1FjWV4
lOSQ4vHIDNiozlPR4sIlMS4iCyS4nI1K7CVLCJD6J/0gO3bfrMma1VpUhRbnc6O/
wJKXyDijaGzEovSzeJW3ZbJdfpitfX3pXOqYJRUJPTxPwfjyMuiSziSgq3TpY6BL
R+ScyEkfvySla+pdjXH2pFpEJy5p3HF4q04RkbYMWIZDtqtse53k2Aes/vJ/L+18
dNESmtGvfbv+SiNQ/O3+qlX2Cw5/c6TUkohlVhrqALj0fKkQrUobjJywFsk6n3A/
gieVsGn/5DTEKw==
-----END CERTIFICATE-----
Generated at Fri Oct 30 05:09:24 2026 by rpki-client