Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
File:                     Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft (raw, json)
Hash identifier:          cBOBFdX7eaZCAmt2wzV2/BvOym8KaciFWNUD6jC/JXA=
Subject key identifier:   64:1B:15:C5:DC:8B:01:23:7C:A6:17:66:DA:4F:64:BF:24:EC:8E:80
Authority key identifier: 51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32
Certificate issuer:       /CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
Certificate serial:       01A18E9DEC50183EB4E8A580CCE1B0E25D17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
Manifest number:          13F9
Signing time:             Fri 30 Oct 2026 21:01:16 +0000
Manifest this update:     Fri 30 Oct 2026 21:01:16 +0000
Manifest next update:     Sat 31 Oct 2026 21:01:16 +0000
Files and hashes:         1: Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl (hash: OT/heWiMIjvYk8Twq6+q4gn3xJcEEAjN+qA8jnAHN7g=)
                          2: bN1bEc4HqYXvavKXD6ssUfBHAew.roa (hash: YH+C7Jl70iieB5lOKkDQudIPzyOFnd5wp6oB5jVYQHo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8e:9d:ec:50:18:3e:b4:e8:a5:80:cc:e1:b0:e2:5d:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
        Validity
            Not Before: Oct 30 21:01:16 2026 GMT
            Not After : Oct 31 21:01:16 2026 GMT
        Subject: CN=641b15c5dc8b01237ca61766da4f64bf24ec8e80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:68:e7:27:1b:90:f7:17:ff:3f:08:57:17:87:
                    cb:f2:19:bc:f5:c1:2d:e0:b5:f6:64:79:86:66:a9:
                    ee:29:36:07:3d:df:f4:cb:34:33:60:f3:e3:f4:6b:
                    ec:aa:e6:05:9b:6e:37:77:bf:31:a4:9a:7a:53:d4:
                    98:3c:e7:aa:85:01:36:00:7e:c4:f9:c3:9c:3e:91:
                    2f:e0:79:35:a6:cf:c7:57:79:93:35:72:3e:5d:0d:
                    74:bf:67:9a:03:a9:8c:55:b4:6f:1b:b9:73:1c:6f:
                    66:44:5d:5b:12:f7:68:4b:1f:c7:aa:ce:8a:04:38:
                    c1:59:05:b1:da:31:82:4a:10:c7:9b:34:58:92:2b:
                    f8:84:80:05:0c:62:66:b3:bf:ed:14:4d:2f:2c:46:
                    bc:df:f6:67:9e:1c:55:a4:a0:23:d2:31:22:4f:85:
                    f2:b8:4c:c4:6a:73:43:bf:2a:cc:eb:d4:ad:ec:58:
                    74:5b:a5:60:95:41:96:d5:ea:9d:c2:82:20:e1:6d:
                    47:6a:fd:d8:fa:28:be:2a:14:be:9c:0c:24:00:05:
                    68:8d:ce:cc:10:09:1f:7c:41:04:ea:a2:92:89:2a:
                    cc:f4:49:a7:12:de:5f:8a:dc:85:e3:a2:b3:e4:b7:
                    a8:68:64:ac:4a:8a:5a:05:26:16:23:3f:56:88:e9:
                    b1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:1B:15:C5:DC:8B:01:23:7C:A6:17:66:DA:4F:64:BF:24:EC:8E:80
            X509v3 Authority Key Identifier:
                keyid:51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:09:ec:cd:b8:fc:20:f2:fe:36:ec:e4:9d:c8:e2:f2:ce:9c:
         99:b9:73:f5:cb:65:42:c4:46:68:eb:cd:cf:8d:fa:d0:ef:0b:
         7b:0d:99:01:13:7d:33:1f:f1:7a:22:8f:fb:8c:c9:ad:fc:4c:
         5a:72:29:7c:89:b9:fc:f3:16:fa:27:62:2d:ed:ac:19:25:5d:
         65:08:d5:e6:6c:de:73:bf:3e:41:90:75:57:12:18:61:ee:93:
         cb:cb:1f:c3:77:a9:fb:e2:00:42:90:ee:01:e3:8a:33:c5:90:
         6d:3a:c9:c0:59:96:da:b4:4a:b2:93:8c:19:7c:f7:32:5b:d6:
         f8:60:95:4c:92:d3:53:12:1c:f8:ed:d5:e1:92:5f:f9:05:dd:
         6c:56:74:e2:e9:0d:bc:af:bd:e2:31:7d:8f:c3:93:33:61:26:
         a3:a0:18:ae:e9:42:b3:5d:2a:83:12:5e:d4:09:15:77:99:04:
         bd:bc:21:b2:22:49:61:2f:c0:73:dc:d7:59:12:de:b9:59:ec:
         a3:6d:39:04:c2:d7:d5:04:6c:e7:89:1d:78:10:bb:53:90:f7:
         6f:58:a2:1b:4a:15:0c:09:22:f9:30:e2:83:fc:c0:e0:28:70:
         9c:69:8f:f9:eb:60:eb:e8:47:f4:10:26:87:5d:bd:dd:ec:45:
         e4:69:7f:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGOnexQGD606KWAzOGw4l0XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYWM3ZTMzNzQ0YzI0OGY4N2RlMmRjNjNhYWJmMTlmNmM4
NGIwMzIwHhcNMjYxMDMwMjEwMTE2WhcNMjYxMDMxMjEwMTE2WjAzMTEwLwYDVQQD
Eyg2NDFiMTVjNWRjOGIwMTIzN2NhNjE3NjZkYTRmNjRiZjI0ZWM4ZTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmjnJxuQ9xf/PwhXF4fL8hm89cEt
4LX2ZHmGZqnuKTYHPd/0yzQzYPPj9GvsquYFm243d78xpJp6U9SYPOeqhQE2AH7E
+cOcPpEv4Hk1ps/HV3mTNXI+XQ10v2eaA6mMVbRvG7lzHG9mRF1bEvdoSx/Hqs6K
BDjBWQWx2jGCShDHmzRYkiv4hIAFDGJms7/tFE0vLEa83/ZnnhxVpKAj0jEiT4Xy
uEzEanNDvyrM69St7Fh0W6VglUGW1eqdwoIg4W1Hav3Y+ii+KhS+nAwkAAVojc7M
EAkffEEE6qKSiSrM9EmnEt5fityF46Kz5LeoaGSsSopaBSYWIz9WiOmxQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQbFcXciwEjfKYXZtpPZL8k7I6AMB8GA1UdIwQY
MBaAFFGsfjN0TCSPh94txjqr8Z9shLAyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWF4LU0zUk1KSS1IM2kzR09xdnhuMnlFc0RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9kZjNjNjEtNzhhZS00ZDFjLWE3NTYt
NjM0ODY0OTc3NGEyLzEvVWF4LU0zUk1KSS1IM2kzR09xdnhuMnlFc0RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9kZjNjNjEtNzhhZS00ZDFjLWE3NTYtNjM0ODY0OTc3NGEy
LzEvVWF4LU0zUk1KSS1IM2kzR09xdnhuMnlFc0RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmQnszbj8
IPL+Nuzkncji8s6cmblz9ctlQsRGaOvNz4360O8Lew2ZARN9Mx/xeiKP+4zJrfxM
WnIpfIm5/PMW+idiLe2sGSVdZQjV5mzec78+QZB1VxIYYe6Ty8sfw3ep++IAQpDu
AeOKM8WQbTrJwFmW2rRKspOMGXz3MlvW+GCVTJLTUxIc+O3V4ZJf+QXdbFZ04ukN
vK+94jF9j8OTM2Emo6AYrulCs10qgxJe1AkVd5kEvbwhsiJJYS/Ac9zXWRLeuVns
o205BMLX1QRs54kdeBC7U5D3b1iiG0oVDAki+TDig/zA4ChwnGmP+etg6+hH9BAm
h1293exF5Gl/3g==
-----END CERTIFICATE-----
Generated at Sat Oct 31 02:43:51 2026 by rpki-client