Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft
File:                     uUQn2LeWZF92S05mvxmtOOSr7hw.mft (raw, json)
Hash identifier:          hhDpmU1T5Tn4Ui6HO6tmBd3D0Y7j+5DT0wFfH50KGhM=
Subject key identifier:   4B:FF:2E:FC:C4:E9:AC:E3:DD:9D:AB:52:46:C5:B7:5C:CD:C6:1F:7F
Authority key identifier: B9:44:27:D8:B7:96:64:5F:76:4B:4E:66:BF:19:AD:38:E4:AB:EE:1C
Certificate issuer:       /CN=b94427d8b796645f764b4e66bf19ad38e4abee1c
Certificate serial:       01A002817EC90326AB0274029E4016159515
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUQn2LeWZF92S05mvxmtOOSr7hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft
Manifest number:          0350
Signing time:             Fri 14 Aug 2026 23:00:36 +0000
Manifest this update:     Fri 14 Aug 2026 23:00:36 +0000
Manifest next update:     Sat 15 Aug 2026 23:00:36 +0000
Files and hashes:         1: uUQn2LeWZF92S05mvxmtOOSr7hw.crl (hash: EhCTBefXYqt319F+w+0CZcsoDb1Is8tiIbp3/QcUSf8=)
                          2: y8g_KNg4CQpGLUtViNE4UcIwqGE.roa (hash: 3BP+uFbBHzZ2F6fJMPn4trgJdQyNQ1NxWfOoEPvI+IQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUQn2LeWZF92S05mvxmtOOSr7hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:81:7e:c9:03:26:ab:02:74:02:9e:40:16:15:95:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b94427d8b796645f764b4e66bf19ad38e4abee1c
        Validity
            Not Before: Aug 14 23:00:36 2026 GMT
            Not After : Aug 15 23:00:36 2026 GMT
        Subject: CN=4bff2efcc4e9ace3dd9dab5246c5b75ccdc61f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e4:a0:33:ba:42:48:5e:cf:29:b4:b8:d5:19:
                    4c:34:d3:8d:a1:85:72:a9:77:86:1a:63:dd:c6:57:
                    ea:5d:2d:d7:f1:08:81:3a:e9:1f:1e:6e:8d:92:a6:
                    98:8a:a8:fb:d3:d6:2e:48:d9:50:7b:d0:1b:c0:7c:
                    70:60:75:35:a5:cb:25:2e:bd:63:d8:59:2f:aa:9d:
                    74:37:55:fd:4e:9b:eb:95:88:f2:8f:81:02:f1:49:
                    cd:15:6d:33:c7:09:dc:bb:8e:28:97:04:c5:6e:dd:
                    43:78:38:d7:8e:41:e7:bf:fc:ac:03:93:49:d0:2c:
                    1d:19:b2:26:79:75:c8:88:b0:a4:43:c7:bb:6a:76:
                    ab:93:f7:df:0c:1e:b7:ae:f2:4c:98:d4:d7:0e:de:
                    5a:01:09:77:64:95:1d:ea:d9:70:d0:e4:b6:20:a6:
                    36:e3:20:67:02:bc:b9:07:05:70:6b:d8:50:bb:b7:
                    04:7f:bb:9f:43:51:c3:31:f8:56:df:78:86:3a:53:
                    78:0c:15:67:27:95:98:11:10:c4:e5:8b:2f:74:9f:
                    a9:60:37:54:6b:0f:3a:d2:e4:6b:8e:50:39:90:91:
                    50:b3:30:46:f8:73:c6:4c:be:9d:e5:88:f1:93:22:
                    85:1a:bb:2f:93:7f:6d:3d:5a:43:21:db:44:9b:b7:
                    bb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:FF:2E:FC:C4:E9:AC:E3:DD:9D:AB:52:46:C5:B7:5C:CD:C6:1F:7F
            X509v3 Authority Key Identifier:
                keyid:B9:44:27:D8:B7:96:64:5F:76:4B:4E:66:BF:19:AD:38:E4:AB:EE:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUQn2LeWZF92S05mvxmtOOSr7hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:f4:e5:e9:86:3d:00:ec:bf:3a:29:3d:34:c9:e5:17:22:c7:
         0b:a3:a0:54:0a:79:ce:ce:34:42:ff:1a:3c:e4:49:9c:cf:3d:
         29:0b:7e:c7:24:f0:34:b2:ce:06:fa:ee:04:96:bc:a4:f8:3b:
         f6:bc:df:5d:83:0c:20:8f:d1:79:90:09:0c:70:ee:7e:b8:0b:
         b7:82:d2:8d:59:ac:66:90:aa:30:e2:c7:85:2f:6a:f5:1a:a5:
         a1:1c:9b:8f:fc:f2:94:47:30:86:b3:c5:1a:3e:9a:ad:0b:72:
         b9:15:c8:ea:e0:07:d0:6b:e6:39:d2:15:82:29:f7:df:96:57:
         74:39:be:ff:7e:3b:d5:75:70:73:4a:e7:6b:18:33:60:b2:4d:
         bd:68:35:12:8f:a6:c8:ee:59:3b:76:75:ab:b3:53:06:6f:b0:
         55:80:42:b5:1a:40:d9:d9:81:d9:53:70:7b:df:f1:07:c9:67:
         ca:ca:07:23:b5:20:95:95:b9:f5:19:45:68:2a:8e:2c:a6:d8:
         29:44:f9:57:ae:e4:84:55:54:bf:ce:3b:16:e2:99:ba:41:6f:
         39:1c:d0:29:6b:50:dc:c1:c9:bc:6a:a6:95:a5:89:4b:17:a5:
         d6:13:50:7e:25:ac:aa:33:b7:80:e0:b6:15:9d:e4:88:ce:ff:
         22:eb:fa:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACgX7JAyarAnQCnkAWFZUVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NDQyN2Q4Yjc5NjY0NWY3NjRiNGU2NmJmMTlhZDM4ZTRh
YmVlMWMwHhcNMjYwODE0MjMwMDM2WhcNMjYwODE1MjMwMDM2WjAzMTEwLwYDVQQD
Eyg0YmZmMmVmY2M0ZTlhY2UzZGQ5ZGFiNTI0NmM1Yjc1Y2NkYzYxZjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+SgM7pCSF7PKbS41RlMNNONoYVy
qXeGGmPdxlfqXS3X8QiBOukfHm6NkqaYiqj709YuSNlQe9AbwHxwYHU1pcslLr1j
2Fkvqp10N1X9TpvrlYjyj4EC8UnNFW0zxwncu44olwTFbt1DeDjXjkHnv/ysA5NJ
0CwdGbImeXXIiLCkQ8e7anark/ffDB63rvJMmNTXDt5aAQl3ZJUd6tlw0OS2IKY2
4yBnAry5BwVwa9hQu7cEf7ufQ1HDMfhW33iGOlN4DBVnJ5WYERDE5YsvdJ+pYDdU
aw860uRrjlA5kJFQszBG+HPGTL6d5YjxkyKFGrsvk39tPVpDIdtEm7e7VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEv/LvzE6azj3Z2rUkbFt1zNxh9/MB8GA1UdIwQY
MBaAFLlEJ9i3lmRfdktOZr8ZrTjkq+4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVVRbjJMZVdaRjkyUzA1bXZ4bXRPT1NyN2h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9kOWNmN2UtYWE3ZS00ODIzLTk5Zjkt
NDdmNWMxYzUyY2UyLzEvdVVRbjJMZVdaRjkyUzA1bXZ4bXRPT1NyN2h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9kOWNmN2UtYWE3ZS00ODIzLTk5ZjktNDdmNWMxYzUyY2Uy
LzEvdVVRbjJMZVdaRjkyUzA1bXZ4bXRPT1NyN2h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/Tl6YY9
AOy/Oik9NMnlFyLHC6OgVAp5zs40Qv8aPORJnM89KQt+xyTwNLLOBvruBJa8pPg7
9rzfXYMMII/ReZAJDHDufrgLt4LSjVmsZpCqMOLHhS9q9RqloRybj/zylEcwhrPF
Gj6arQtyuRXI6uAH0GvmOdIVgin335ZXdDm+/3471XVwc0rnaxgzYLJNvWg1Eo+m
yO5ZO3Z1q7NTBm+wVYBCtRpA2dmB2VNwe9/xB8lnysoHI7UglZW59RlFaCqOLKbY
KUT5V67khFVUv847FuKZukFvORzQKWtQ3MHJvGqmlaWJSxel1hNQfiWsqjO3gOC2
FZ3kiM7/Iuv6oQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:56 2026 by rpki-client