Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft
File:                     Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft (raw, json)
Hash identifier:          XyzFevQhqoKdahcUWWuRmRW9sYAURrmdT9p+qD61eMA=
Subject key identifier:   B9:E1:46:03:68:FF:B0:F1:45:E9:85:E9:5B:39:32:6D:D1:C0:C5:CF
Authority key identifier: 52:89:B6:A8:BF:AA:C5:C8:C0:9A:48:C0:42:81:9D:FC:5E:A4:51:04
Certificate issuer:       /CN=5289b6a8bfaac5c8c09a48c042819dfc5ea45104
Certificate serial:       01A15EFA4EF547842EE56091A1B885FC2FEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft
Manifest number:          1AB2
Signing time:             Wed 21 Oct 2026 15:00:24 +0000
Manifest this update:     Wed 21 Oct 2026 15:00:24 +0000
Manifest next update:     Thu 22 Oct 2026 15:00:24 +0000
Files and hashes:         1: Uom2qL-qxcjAmkjAQoGd_F6kUQQ.crl (hash: E2jH9jy7etJpcKp0BQazWzfEK3LG+KA+8w7r6xfKV4g=)
                          2: tszARLbMXBEIxwdiymgQ3NHG6Wg.roa (hash: jAFxokkoCog3haWB8r0ULaLqiqrv63FYz7hJiW/N96w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 15:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5e:fa:4e:f5:47:84:2e:e5:60:91:a1:b8:85:fc:2f:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5289b6a8bfaac5c8c09a48c042819dfc5ea45104
        Validity
            Not Before: Oct 21 15:00:24 2026 GMT
            Not After : Oct 22 15:00:24 2026 GMT
        Subject: CN=b9e1460368ffb0f145e985e95b39326dd1c0c5cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b2:be:45:34:83:7c:7e:63:b9:7b:eb:19:21:
                    e8:9d:ad:39:f6:e0:ea:5d:0d:d9:f8:7a:a0:d3:bc:
                    fb:02:32:8c:45:b3:00:00:52:d0:ff:10:67:a9:cf:
                    fe:58:d8:44:3e:16:55:b9:d6:bf:a6:31:bc:ca:eb:
                    f4:59:72:08:49:a2:79:c3:c0:5e:0f:c6:6a:50:4e:
                    88:4b:34:20:2c:a9:8d:7a:6e:3f:62:ea:c6:09:f1:
                    58:7f:84:62:93:cb:33:6a:35:82:cd:30:ce:b8:7c:
                    df:4f:09:4d:fe:b8:8c:cd:d8:3b:16:cf:0d:35:21:
                    c2:84:39:b9:be:0d:c1:2c:a7:25:9e:d3:ff:7c:6b:
                    ba:d4:96:36:ab:fb:67:18:04:9a:4e:1c:69:ca:f8:
                    af:e4:a5:4e:ae:c6:f8:11:a1:92:94:b3:ec:c2:b1:
                    4f:0e:00:d7:97:05:48:cf:26:4b:d4:92:b7:88:d8:
                    d9:7c:aa:55:2d:c8:3b:e8:4e:bc:12:46:7f:4f:f6:
                    75:4b:66:49:ef:cf:dc:0a:a0:11:61:bf:f6:13:d4:
                    0b:19:8f:97:1d:44:68:59:d3:7f:4c:8e:ab:d7:f8:
                    a8:9f:9a:78:30:41:1f:fc:0a:bc:19:97:06:ce:7c:
                    32:72:9b:68:44:2b:e6:a2:04:f2:5f:fc:87:ae:a4:
                    65:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E1:46:03:68:FF:B0:F1:45:E9:85:E9:5B:39:32:6D:D1:C0:C5:CF
            X509v3 Authority Key Identifier:
                keyid:52:89:B6:A8:BF:AA:C5:C8:C0:9A:48:C0:42:81:9D:FC:5E:A4:51:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:d6:42:65:f4:32:4b:7e:6e:30:2f:47:f9:a6:61:0c:21:d1:
         9e:69:65:e1:e9:9f:14:1e:f0:9e:7e:28:b0:5b:9a:06:7e:91:
         9a:3a:b7:17:18:99:ba:cd:08:38:b2:fd:cd:ec:66:96:08:3e:
         82:fa:6e:e4:6f:f8:7e:77:8e:9f:ed:dd:6d:9b:0c:13:6e:a6:
         33:69:34:d6:d6:b3:84:ce:33:10:f2:99:ad:f5:57:5b:1b:92:
         c4:fb:20:a2:44:db:c0:62:af:bc:0d:b5:78:57:82:98:9f:3b:
         3c:21:6e:e8:a6:53:71:fa:a5:bd:70:61:8d:df:72:8e:6d:fa:
         bb:4e:32:56:b0:6e:71:7d:02:4d:de:89:af:ad:f0:b9:6c:03:
         28:5e:48:d5:84:65:c1:87:c5:2c:9f:9f:27:65:34:29:ae:77:
         92:96:77:1f:38:b6:4b:98:d4:c2:d5:01:60:42:6d:eb:f6:b4:
         20:9d:48:b8:88:df:4b:e6:c0:cf:8c:3e:c1:89:3d:8b:f8:d9:
         24:89:21:05:ab:b9:b8:e7:07:3e:e9:d8:65:72:56:7f:26:9b:
         9d:55:03:be:7e:94:45:1d:bc:6d:25:85:88:25:b8:4c:7a:0f:
         cf:34:bb:6a:cc:2b:5b:5e:8b:2a:f2:1a:a9:13:be:00:42:be:
         a7:b9:27:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFe+k71R4Qu5WCRobiF/C/rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyODliNmE4YmZhYWM1YzhjMDlhNDhjMDQyODE5ZGZjNWVh
NDUxMDQwHhcNMjYxMDIxMTUwMDI0WhcNMjYxMDIyMTUwMDI0WjAzMTEwLwYDVQQD
EyhiOWUxNDYwMzY4ZmZiMGYxNDVlOTg1ZTk1YjM5MzI2ZGQxYzBjNWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7K+RTSDfH5juXvrGSHona059uDq
XQ3Z+Hqg07z7AjKMRbMAAFLQ/xBnqc/+WNhEPhZVuda/pjG8yuv0WXIISaJ5w8Be
D8ZqUE6ISzQgLKmNem4/YurGCfFYf4Rik8szajWCzTDOuHzfTwlN/riMzdg7Fs8N
NSHChDm5vg3BLKclntP/fGu61JY2q/tnGASaThxpyviv5KVOrsb4EaGSlLPswrFP
DgDXlwVIzyZL1JK3iNjZfKpVLcg76E68EkZ/T/Z1S2ZJ78/cCqARYb/2E9QLGY+X
HURoWdN/TI6r1/ion5p4MEEf/Aq8GZcGznwycptoRCvmogTyX/yHrqRlaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnhRgNo/7DxRemF6Vs5Mm3RwMXPMB8GA1UdIwQY
MBaAFFKJtqi/qsXIwJpIwEKBnfxepFEEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW9tMnFMLXF4Y2pBbWtqQVFvR2RfRjZrVVFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9iNjZjMmMtM2QwMS00YmRiLThjNGMt
YjJkYTk3N2U0MDdkLzEvVW9tMnFMLXF4Y2pBbWtqQVFvR2RfRjZrVVFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9iNjZjMmMtM2QwMS00YmRiLThjNGMtYjJkYTk3N2U0MDdk
LzEvVW9tMnFMLXF4Y2pBbWtqQVFvR2RfRjZrVVFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADdZCZfQy
S35uMC9H+aZhDCHRnmll4emfFB7wnn4osFuaBn6Rmjq3FxiZus0IOLL9zexmlgg+
gvpu5G/4fneOn+3dbZsME26mM2k01tazhM4zEPKZrfVXWxuSxPsgokTbwGKvvA21
eFeCmJ87PCFu6KZTcfqlvXBhjd9yjm36u04yVrBucX0CTd6Jr63wuWwDKF5I1YRl
wYfFLJ+fJ2U0Ka53kpZ3Hzi2S5jUwtUBYEJt6/a0IJ1IuIjfS+bAz4w+wYk9i/jZ
JIkhBau5uOcHPunYZXJWfyabnVUDvn6URR28bSWFiCW4THoPzzS7aswrW16LKvIa
qRO+AEK+p7knLA==
-----END CERTIFICATE-----
Generated at Thu Oct 22 03:10:00 2026 by rpki-client