Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
File:                     UST7oeQBwD5boc13rp7jnP1jG_s.mft (raw, json)
Hash identifier:          kwDWU7OYvSRRcBx79HGb7libdEcXIBKQME9asu4cSGE=
Subject key identifier:   CE:B9:A5:2B:80:04:FC:F9:A4:8D:E2:0A:E6:67:40:69:50:ED:25:76
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Certificate issuer:       /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial:       01A06E02B519347D4E51C515CCB67BA1AD54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
Manifest number:          16E8
Signing time:             Fri 04 Sep 2026 20:01:06 +0000
Manifest this update:     Fri 04 Sep 2026 20:01:06 +0000
Manifest next update:     Sat 05 Sep 2026 20:01:06 +0000
Files and hashes:         1: 1-kcZNt23iw1RBz4Gt3pzD1CfBpE.roa (hash: EXKCmselguxEWJqVjaQNd8s2v6f02y8BzJbbVd7d/lo=)
                          2: 4TqP4VztD-rYbZ16oiZUvEP0D1Q.roa (hash: 1+Dj9DjkqqJBKSFukY3ZLUFpE2kBLC6OJYlV3ZzlDHE=)
                          3: 51RV5bLUK5swpjii_ClMr0Z0LK4.roa (hash: eaEFcr3Fzwqgey9xkzHTc526Wfs17vHkTkKlWZDr6V4=)
                          4: 7Gfdl5k6T4Nt-xZrQUmYT2Wb0Q4.roa (hash: praaG5V4IjeUDRh2H9CpWs4rx+iMgs/zDPv4j89TbtU=)
                          5: 7meu7s1H44zdKfP25MFBcQbtGHI.roa (hash: WvFf3T5R9dDcoqBxFhAiq7tVRoIpj2LekmR2mNGzL1E=)
                          6: 7u4RVlV52XWyTyDw_qznuD0UgXs.roa (hash: vYm6Nz0cS2O84RBnN+siuod691AUb0y3q4ys6CicPZI=)
                          7: 9sk7o3-J1zppXpr20oFx7pS_U0c.roa (hash: pBXnQfzjUWzJ2ZBcFMKN6xODjJ4zYHByfhzLBkNvrdQ=)
                          8: Ac4tNrQugLPaGq4xz6HWInHCm6M.roa (hash: siaEigQ+ejfWwE/knI+4/nv5Jzojs+pIiSVBiWGlM3E=)
                          9: BkRyH8Ba-XVZyTIKUr0G1qu4wJo.roa (hash: Q2q3HL2ikSVxapYF8tEqUbGc2dsp+tUqOuJvpkTfgSw=)
                          10: EK6SgEjsBL-mm7iD7ooVjDdFbxY.roa (hash: ZEu9nOF1kbSjWSpE4NcC/VjSw7SsIRZ4h2G/ZSkfcXA=)
                          11: GWUpBhLv0PHDsIV3w3GIbM6-96s.roa (hash: qr4GrREKG7A3hhdS3Agv52m1MsgGN/WZ20ATzaaaiuk=)
                          12: HxGP4RyCdmbtsC_X7rEOMPaadGs.roa (hash: E1pPUcXW5mPkpSrQhelqafY4OsK2tjQxSmKWda1vbOE=)
                          13: MZUJ_YtPrARksG8JiNeh9h5bxjU.roa (hash: gULv6+Niu5hf2ZuzY/CCoAvGjaEsELBZ6B3Mi+f8gPo=)
                          14: NNB2avyCldcIMCL0f0MRWjsmPGg.roa (hash: DEfqSuvzloP85jcJKk7ZgGBFiOXRfF0MqFeO19BqKn0=)
                          15: UST7oeQBwD5boc13rp7jnP1jG_s.crl (hash: YwTl2ZkX1P2wD0/b+SAnNY+VuNyPtQpVJapjKVj4nsE=)
                          16: XPnc98u3CUN5obEHzxurP6rkBVw.roa (hash: 4m3ABUbVfJN36M772cp8y6/T3l68sMul8PuOrR8yh5I=)
                          17: ZwUA3La-CLO2vo7n-4O0XOh48Xw.roa (hash: U8GSnZZoap+4gf9xVbyRxlPJkgOVmU3uHH07WIciOyM=)
                          18: aFnh6dX02Plbz29YBmV3SD7j9Q0.roa (hash: sc7xU6BRSHAeMTFIhYVFzlvkouO1NHCbhFZvW8ZQGuY=)
                          19: fZ_Btht45xaHLpXNFdVYnxZ50Ow.roa (hash: JpN5XVDZY1IahuGnYijyyeq5BW4QE/s6DEijCb+GpS0=)
                          20: j4qiTlmyE2UTELOd_dWPpgYgT7g.roa (hash: tL7gSkajUFv82zTjqwfcJA15HYbXtYeZkwl/AW0YDBU=)
                          21: lIz9Y2VSw1IRAK5RgFrWVq9VCXw.roa (hash: u8QpaP+GzKQQXypDSXNKQWO2maacxt/Fww5QZjJ3VFw=)
                          22: nrPLRJPmPFUNnRKVYlt5xynJqbQ.roa (hash: I11fElTQunbRvyiT3+4v3tCdsssjfQCu5kwVzj1TuOs=)
                          23: ql7rOmZ_btr3d4A37f2Df8JDM0E.roa (hash: /SRzz/yYDf39iuJ35shny0PsFk2f1QMbJVc74yAIIqU=)
                          24: waLcrNH7uHQklmGVHpfmCMZcL3o.roa (hash: G6P6bFBr2kZHKhtwrt4aC293o8D2o+Zw99eQaBr2bOo=)
                          25: zRZZ6UwPjjxw58VaB1rpkI5mlKo.roa (hash: n+9o/e8utiREiQm1EccaQwJdw3Xtg72tou+ySQuFAbg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:02:b5:19:34:7d:4e:51:c5:15:cc:b6:7b:a1:ad:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
        Validity
            Not Before: Sep  4 20:01:06 2026 GMT
            Not After : Sep  5 20:01:06 2026 GMT
        Subject: CN=ceb9a52b8004fcf9a48de20ae667406950ed2576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a6:8e:ae:11:9f:22:7b:be:e3:71:07:0f:bc:
                    02:04:39:35:e2:fd:8a:91:b6:5b:93:4d:1f:fd:7a:
                    22:ac:65:73:59:a7:c2:9f:f3:9f:95:75:7a:4c:84:
                    a4:92:b0:45:dc:ef:69:a3:6f:2d:fb:64:ed:a5:79:
                    f0:80:e7:94:03:7d:1d:d1:72:70:82:46:b0:06:1b:
                    92:d8:3d:7c:6c:14:d2:fc:37:86:0f:5e:9d:6c:f0:
                    f6:92:0f:8b:9b:17:b1:8e:85:39:1d:d3:6c:32:dc:
                    67:36:eb:4a:10:21:bc:17:3c:bd:c6:63:1d:9b:a6:
                    fc:d5:58:c2:9b:ac:4e:79:5d:fb:5e:a2:f1:26:b2:
                    9f:40:5d:03:b5:06:0f:34:fc:3f:41:6d:27:99:cd:
                    d1:d4:55:5a:40:66:b6:b8:a5:68:73:31:30:d6:0a:
                    e2:08:7e:51:5f:45:3c:0f:db:9c:55:16:6b:58:b2:
                    32:91:b7:0d:b3:6f:30:82:7b:bc:ef:6d:19:ca:2b:
                    c8:fd:8c:0a:4e:4c:61:a4:bf:79:63:c1:8c:fb:51:
                    0e:be:33:8d:9f:39:d0:9f:20:a8:6f:c5:f8:ae:d2:
                    32:c1:58:5b:3b:dc:4b:39:d2:46:30:24:4a:a3:e7:
                    08:06:19:3c:bb:d5:f3:91:d6:13:a2:6e:d7:80:14:
                    57:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B9:A5:2B:80:04:FC:F9:A4:8D:E2:0A:E6:67:40:69:50:ED:25:76
            X509v3 Authority Key Identifier:
                keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:4f:1f:6e:a8:c7:6a:80:f1:6c:bf:a2:8d:10:81:d7:5e:3c:
         79:ac:aa:33:e4:3f:21:2e:10:f7:ca:df:bb:d3:f0:5e:bd:50:
         d4:6a:df:18:af:a9:a2:3d:86:b3:5e:d8:a5:ed:d1:b9:56:fd:
         22:e9:c2:6a:8a:16:a9:65:45:1a:04:c4:21:da:11:84:43:d0:
         b7:76:bf:3e:37:0b:84:06:a3:49:0b:2c:a0:5f:ac:5f:4c:e2:
         2f:53:0a:d0:f6:00:31:d8:24:34:17:70:e9:0f:62:de:36:4a:
         b9:d8:92:84:41:cf:9d:90:e4:1e:eb:57:53:4b:28:5a:08:16:
         af:4a:d7:6c:86:ce:9d:f8:20:ee:94:16:52:5f:8e:a7:2e:e9:
         0e:80:60:31:49:ad:e0:4b:21:90:27:3b:81:e3:87:4d:5a:3d:
         1f:bc:09:be:a2:8b:2c:d8:95:93:fc:7a:74:e3:85:90:9c:2c:
         6c:95:33:82:32:ed:05:b0:85:02:f2:0d:32:8b:83:1b:75:d0:
         d0:6a:4b:ba:8d:89:02:cb:53:af:18:02:b2:48:81:e2:67:8a:
         eb:f9:1d:09:05:7b:8b:3d:bc:67:17:c2:24:41:da:b0:9d:59:
         fd:e4:c2:75:60:79:95:b0:9e:dd:ff:b2:08:fa:41:98:3b:b3:
         34:7d:4b:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBuArUZNH1OUcUVzLZ7oa1UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjYwOTA0MjAwMTA2WhcNMjYwOTA1MjAwMTA2WjAzMTEwLwYDVQQD
EyhjZWI5YTUyYjgwMDRmY2Y5YTQ4ZGUyMGFlNjY3NDA2OTUwZWQyNTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36aOrhGfInu+43EHD7wCBDk14v2K
kbZbk00f/XoirGVzWafCn/OflXV6TISkkrBF3O9po28t+2TtpXnwgOeUA30d0XJw
gkawBhuS2D18bBTS/DeGD16dbPD2kg+LmxexjoU5HdNsMtxnNutKECG8Fzy9xmMd
m6b81VjCm6xOeV37XqLxJrKfQF0DtQYPNPw/QW0nmc3R1FVaQGa2uKVoczEw1gri
CH5RX0U8D9ucVRZrWLIykbcNs28wgnu8720ZyivI/YwKTkxhpL95Y8GM+1EOvjON
nznQnyCob8X4rtIywVhbO9xLOdJGMCRKo+cIBhk8u9XzkdYTom7XgBRXZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM65pSuABPz5pI3iCuZnQGlQ7SV2MB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl
LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN08fbqjH
aoDxbL+ijRCB1148eayqM+Q/IS4Q98rfu9PwXr1Q1GrfGK+poj2Gs17Ype3RuVb9
IunCaooWqWVFGgTEIdoRhEPQt3a/PjcLhAajSQssoF+sX0ziL1MK0PYAMdgkNBdw
6Q9i3jZKudiShEHPnZDkHutXU0soWggWr0rXbIbOnfgg7pQWUl+Opy7pDoBgMUmt
4EshkCc7geOHTVo9H7wJvqKLLNiVk/x6dOOFkJwsbJUzgjLtBbCFAvINMouDG3XQ
0GpLuo2JAstTrxgCskiB4meK6/kdCQV7iz28ZxfCJEHasJ1Z/eTCdWB5lbCe3f+y
CPpBmDuzNH1LMw==
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:53:06 2026 by rpki-client