Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
File:                     uqpkzSnJTM3hREj2GhcsdjseQFA.mft (raw, json)
Hash identifier:          9aTiW7lhI/+bUJUdPFjCSGDEXETARbfVjB9+fUbAHmg=
Subject key identifier:   1E:F3:8A:55:B5:3F:6A:4F:5D:7F:CC:84:0A:65:BF:85:87:D2:F9:68
Authority key identifier: BA:AA:64:CD:29:C9:4C:CD:E1:44:48:F6:1A:17:2C:76:3B:1E:40:50
Certificate issuer:       /CN=baaa64cd29c94ccde14448f61a172c763b1e4050
Certificate serial:       01A15176A511E6BD6B35513DD6EEFFA0C138
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
Manifest number:          0B09
Signing time:             Mon 19 Oct 2026 00:01:32 +0000
Manifest this update:     Mon 19 Oct 2026 00:01:32 +0000
Manifest next update:     Tue 20 Oct 2026 00:01:32 +0000
Files and hashes:         1: E4sPSePQU0Utg0rJy2Bu8An_0ws.roa (hash: lddKB3Pjbr9HauWjyZqgv8uF8Jy8PbuIeHF9FT0DhEQ=)
                          2: uqpkzSnJTM3hREj2GhcsdjseQFA.crl (hash: eoxiyuFuXmmssqE/dVTUEBeRxz9k8bogIeeXgy2aY2U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 17:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:51:76:a5:11:e6:bd:6b:35:51:3d:d6:ee:ff:a0:c1:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baaa64cd29c94ccde14448f61a172c763b1e4050
        Validity
            Not Before: Oct 19 00:01:32 2026 GMT
            Not After : Oct 20 00:01:32 2026 GMT
        Subject: CN=1ef38a55b53f6a4f5d7fcc840a65bf8587d2f968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:79:29:25:91:11:9d:cb:28:c1:f4:e4:10:05:
                    a5:04:a5:9a:72:89:6c:a6:cc:46:97:68:6c:66:7c:
                    87:9e:49:2b:33:f5:69:d2:0b:a4:0e:bb:c3:04:e9:
                    21:58:69:3f:f4:12:19:c2:98:fc:2e:45:c2:8d:19:
                    75:df:50:b0:ef:f0:5c:32:d6:3c:00:63:3e:90:53:
                    e3:aa:60:75:1e:61:a5:f8:0d:8c:1c:7f:fd:5a:bd:
                    5c:23:ee:90:34:20:24:ae:c6:b8:30:dc:51:be:cf:
                    f7:90:b5:bb:b1:28:89:83:cb:6a:67:3c:ec:03:b0:
                    c1:7c:68:58:f7:cb:95:48:58:6a:45:e1:a5:d3:1f:
                    83:11:ed:aa:00:09:f8:42:cd:c9:ed:cf:d2:f0:b8:
                    1f:7f:01:e3:78:ff:86:b6:6a:66:c9:78:83:da:7c:
                    56:dd:10:9c:8e:ba:cb:e3:83:6d:5e:b7:2b:90:3c:
                    d2:b6:9d:88:f4:03:d5:c6:8e:9d:7f:41:38:97:88:
                    8b:95:df:3f:ca:b8:1a:50:03:11:5e:78:07:02:a3:
                    d2:d8:9c:4e:f4:0d:63:1a:3f:ff:09:c6:9e:bb:cf:
                    d7:18:05:32:f4:71:ac:0d:61:53:9d:0b:96:15:f1:
                    f1:a7:84:d9:e7:54:3b:98:b9:5f:29:f5:06:dd:54:
                    ce:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F3:8A:55:B5:3F:6A:4F:5D:7F:CC:84:0A:65:BF:85:87:D2:F9:68
            X509v3 Authority Key Identifier:
                keyid:BA:AA:64:CD:29:C9:4C:CD:E1:44:48:F6:1A:17:2C:76:3B:1E:40:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:56:d6:63:42:25:ac:ac:e4:f8:11:4f:86:a0:ea:82:4a:2d:
         f9:91:8e:0b:49:65:2a:ca:ce:3b:93:53:f3:f1:2e:3a:48:1c:
         b7:e9:d8:b3:ce:0f:0a:11:4a:27:5e:1d:fa:8c:97:86:05:9c:
         a0:13:21:40:10:7e:d5:b1:35:6f:14:52:5b:db:d5:80:59:e5:
         75:1f:83:70:7e:53:b9:d0:26:c4:36:4d:4e:fd:ee:de:9b:4e:
         9d:1a:93:cc:e8:d9:e8:aa:43:89:ef:25:f7:ec:25:d2:56:cd:
         04:86:26:c5:2d:60:a7:78:76:58:a7:9c:68:e7:35:d8:98:e0:
         15:fc:6a:e8:8a:12:30:eb:9b:4b:a4:bf:00:7b:ab:9d:3c:14:
         18:bd:bd:cc:c7:eb:52:de:39:31:4a:e3:9c:52:4d:18:36:32:
         af:d6:4b:15:68:dd:3e:13:87:d8:8a:36:b4:60:f7:30:60:bf:
         18:08:7f:a0:d7:bc:f9:27:cd:3d:f5:f3:81:60:fc:74:ab:61:
         59:ac:fd:50:4e:ca:63:6e:7c:64:ff:74:dd:a7:cd:b5:23:2a:
         12:4b:29:e0:b4:9a:9f:8b:c9:1f:76:fb:79:38:d8:94:c4:02:
         14:69:d6:fd:23:96:0f:3f:3f:f1:63:1a:39:51:5d:ed:7d:19:
         ba:59:98:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFRdqUR5r1rNVE91u7/oME4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYWE2NGNkMjljOTRjY2RlMTQ0NDhmNjFhMTcyYzc2M2Ix
ZTQwNTAwHhcNMjYxMDE5MDAwMTMyWhcNMjYxMDIwMDAwMTMyWjAzMTEwLwYDVQQD
EygxZWYzOGE1NWI1M2Y2YTRmNWQ3ZmNjODQwYTY1YmY4NTg3ZDJmOTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3kpJZERncsowfTkEAWlBKWacols
psxGl2hsZnyHnkkrM/Vp0gukDrvDBOkhWGk/9BIZwpj8LkXCjRl131Cw7/BcMtY8
AGM+kFPjqmB1HmGl+A2MHH/9Wr1cI+6QNCAkrsa4MNxRvs/3kLW7sSiJg8tqZzzs
A7DBfGhY98uVSFhqReGl0x+DEe2qAAn4Qs3J7c/S8LgffwHjeP+GtmpmyXiD2nxW
3RCcjrrL44NtXrcrkDzStp2I9APVxo6df0E4l4iLld8/yrgaUAMRXngHAqPS2JxO
9A1jGj//Ccaeu8/XGAUy9HGsDWFTnQuWFfHxp4TZ51Q7mLlfKfUG3VTOSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7zilW1P2pPXX/MhAplv4WH0vloMB8GA1UdIwQY
MBaAFLqqZM0pyUzN4URI9hoXLHY7HkBQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXFwa3pTbkpUTTNoUkVqMkdoY3NkanNlUUZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83MWY0MzktMmIxYi00ZWYwLWI2YTUt
OGZjYWE2OTM2YzZjLzEvdXFwa3pTbkpUTTNoUkVqMkdoY3NkanNlUUZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS83MWY0MzktMmIxYi00ZWYwLWI2YTUtOGZjYWE2OTM2YzZj
LzEvdXFwa3pTbkpUTTNoUkVqMkdoY3NkanNlUUZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXlbWY0Il
rKzk+BFPhqDqgkot+ZGOC0llKsrOO5NT8/EuOkgct+nYs84PChFKJ14d+oyXhgWc
oBMhQBB+1bE1bxRSW9vVgFnldR+DcH5TudAmxDZNTv3u3ptOnRqTzOjZ6KpDie8l
9+wl0lbNBIYmxS1gp3h2WKecaOc12JjgFfxq6IoSMOubS6S/AHurnTwUGL29zMfr
Ut45MUrjnFJNGDYyr9ZLFWjdPhOH2Io2tGD3MGC/GAh/oNe8+SfNPfXzgWD8dKth
Waz9UE7KY258ZP903afNtSMqEksp4LSan4vJH3b7eTjYlMQCFGnW/SOWDz8/8WMa
OVFd7X0ZulmYoQ==
-----END CERTIFICATE-----
Generated at Mon Oct 19 04:07:57 2026 by rpki-client