Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
File:                     uqrQjzbPvAAFOl7j1au3oxF8P4o.mft (raw, json)
Hash identifier:          U8C0h7K/6j0VM4/0R85shHAx+X6isOUCZTeG3Wqw19U=
Subject key identifier:   CE:DA:57:7E:45:30:B4:9C:E8:18:67:65:A9:95:B2:5C:B2:34:05:30
Authority key identifier: BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A
Certificate issuer:       /CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a
Certificate serial:       019E9BBC91848E6A4E09C7958BFFE08C5ED1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
Manifest number:          10A9
Signing time:             Sat 06 Jun 2026 07:01:26 +0000
Manifest this update:     Sat 06 Jun 2026 07:01:26 +0000
Manifest next update:     Sun 07 Jun 2026 07:01:26 +0000
Files and hashes:         1: S-yBnbW2TPRdHm8Bvnkb6SKNP-E.roa (hash: thzWzHkRBVrBpMkyMju39NgzMSOUf/2SSYied1BZFaw=)
                          2: uqrQjzbPvAAFOl7j1au3oxF8P4o.crl (hash: IUvIqu41PdJ1ceYpWRUEDCE6UKpcxuLJmVXfidlagro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 07:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9b:bc:91:84:8e:6a:4e:09:c7:95:8b:ff:e0:8c:5e:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a
        Validity
            Not Before: Jun  6 07:01:26 2026 GMT
            Not After : Jun  7 07:01:26 2026 GMT
        Subject: CN=ceda577e4530b49ce8186765a995b25cb2340530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1e:d9:04:37:b9:1f:72:4a:9d:b4:2e:58:ee:
                    dd:fc:4d:d1:35:af:81:e7:67:4a:44:9a:bd:0a:8e:
                    10:01:43:91:81:1e:1c:1e:a0:ed:36:ad:5d:f2:9b:
                    0c:08:50:f5:07:fb:51:74:ea:73:45:da:72:ab:fb:
                    95:34:73:4b:56:6f:4d:90:74:9c:7e:f6:2e:07:6d:
                    c6:8c:e3:b0:d4:00:55:a3:ee:32:88:96:30:d5:52:
                    40:c3:15:69:51:5c:2d:eb:6f:cb:2b:3f:d9:01:bf:
                    ab:40:2e:64:05:b1:40:d1:7c:f7:a6:c8:d7:43:a8:
                    cd:b2:97:52:e5:99:ab:64:6a:b0:b6:ef:c1:04:1d:
                    bd:b5:eb:d5:03:5e:f9:90:77:d2:24:b2:b8:f0:00:
                    2e:08:3a:ea:80:65:c7:72:8d:8f:c8:50:c2:69:ba:
                    59:62:a1:18:ca:ce:ff:0e:66:cb:c7:31:56:c2:c1:
                    45:92:de:a7:04:96:c9:18:d1:64:b2:97:0d:ca:f0:
                    7f:04:a5:63:ad:9d:38:b9:4e:25:af:8e:73:a9:f6:
                    9c:41:60:e5:8b:67:ba:b2:3f:7f:a3:32:a9:b8:52:
                    75:ca:80:dd:6d:2a:17:0d:37:bf:e5:de:8a:ee:07:
                    62:81:1d:05:66:a3:55:71:86:8e:cf:39:4b:d0:80:
                    c6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:DA:57:7E:45:30:B4:9C:E8:18:67:65:A9:95:B2:5C:B2:34:05:30
            X509v3 Authority Key Identifier:
                keyid:BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:db:b6:98:4a:02:fb:91:84:2b:c6:0d:57:cf:8c:d0:e0:dc:
         93:23:ed:35:45:69:2b:da:3b:03:48:41:3a:5f:37:c5:71:ee:
         4c:70:99:b0:f5:8c:d9:52:7c:f6:75:23:3c:02:34:b4:98:81:
         0e:74:5f:fe:51:a4:5c:64:54:5b:ef:d1:fb:67:7a:13:fb:a0:
         80:85:64:80:eb:b1:f7:3f:e7:dd:c8:90:c6:cc:fb:b6:09:f5:
         60:cf:19:a7:f4:36:3e:49:fb:8d:b4:1f:cb:b3:1d:02:35:04:
         df:0c:35:a6:c7:1a:c7:bb:80:32:27:77:72:a0:75:b6:26:63:
         c6:92:64:8c:a6:a1:86:ad:77:17:ee:e0:b9:69:49:5b:6a:57:
         57:ef:44:a5:1e:ab:22:dd:be:85:22:31:f9:ce:14:98:69:09:
         7e:a0:1d:d8:ef:5f:1b:76:34:7f:6a:0c:6e:8a:1d:0a:93:ea:
         8c:07:56:47:f8:46:85:6c:35:58:c2:36:bb:b8:fb:6e:53:17:
         b8:64:1e:2c:6b:47:4d:c6:53:6c:b1:d7:58:b5:e1:00:67:3d:
         c0:8b:93:c9:25:1d:4c:53:4f:0a:fb:5e:20:79:06:3d:65:68:
         83:0f:fe:36:17:68:94:57:d4:f4:ba:94:da:4a:6f:c8:44:e1:
         52:15:eb:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6bvJGEjmpOCceVi//gjF7RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYWFkMDhmMzZjZmJjMDAwNTNhNWVlM2Q1YWJiN2EzMTE3
YzNmOGEwHhcNMjYwNjA2MDcwMTI2WhcNMjYwNjA3MDcwMTI2WjAzMTEwLwYDVQQD
EyhjZWRhNTc3ZTQ1MzBiNDljZTgxODY3NjVhOTk1YjI1Y2IyMzQwNTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2x7ZBDe5H3JKnbQuWO7d/E3RNa+B
52dKRJq9Co4QAUORgR4cHqDtNq1d8psMCFD1B/tRdOpzRdpyq/uVNHNLVm9NkHSc
fvYuB23GjOOw1ABVo+4yiJYw1VJAwxVpUVwt62/LKz/ZAb+rQC5kBbFA0Xz3psjX
Q6jNspdS5ZmrZGqwtu/BBB29tevVA175kHfSJLK48AAuCDrqgGXHco2PyFDCabpZ
YqEYys7/DmbLxzFWwsFFkt6nBJbJGNFkspcNyvB/BKVjrZ04uU4lr45zqfacQWDl
i2e6sj9/ozKpuFJ1yoDdbSoXDTe/5d6K7gdigR0FZqNVcYaOzzlL0IDGtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7aV35FMLSc6BhnZamVslyyNAUwMB8GA1UdIwQY
MBaAFLqq0I82z7wABTpe49Wrt6MRfD+KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXFyUWp6YlB2QUFGT2w3ajFhdTNveEY4UDRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80ZWRiZTktYzVkMi00MWRhLTljNjAt
M2Q0OGRhOWIwNmEyLzEvdXFyUWp6YlB2QUFGT2w3ajFhdTNveEY4UDRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi80ZWRiZTktYzVkMi00MWRhLTljNjAtM2Q0OGRhOWIwNmEy
LzEvdXFyUWp6YlB2QUFGT2w3ajFhdTNveEY4UDRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMdu2mEoC
+5GEK8YNV8+M0ODckyPtNUVpK9o7A0hBOl83xXHuTHCZsPWM2VJ89nUjPAI0tJiB
DnRf/lGkXGRUW+/R+2d6E/uggIVkgOux9z/n3ciQxsz7tgn1YM8Zp/Q2Pkn7jbQf
y7MdAjUE3ww1pscax7uAMid3cqB1tiZjxpJkjKahhq13F+7guWlJW2pXV+9EpR6r
It2+hSIx+c4UmGkJfqAd2O9fG3Y0f2oMboodCpPqjAdWR/hGhWw1WMI2u7j7blMX
uGQeLGtHTcZTbLHXWLXhAGc9wIuTySUdTFNPCvteIHkGPWVogw/+NhdolFfU9LqU
2kpvyEThUhXrLw==
-----END CERTIFICATE-----
Generated at Sat Jun 6 14:44:45 2026 by rpki-client