Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
File:                     x-ur14baE4BWVbG1UB_cv0M7x40.mft (raw, json)
Hash identifier:          oFU/lnie5ubuR2mTriqrJcnK5237hgMCyNbu83Q5TBM=
Subject key identifier:   C5:A2:A7:CB:E9:BA:FB:FB:EE:6D:10:CB:C3:E9:31:10:D9:8E:AD:E3
Authority key identifier: C7:EB:AB:D7:86:DA:13:80:56:55:B1:B5:50:1F:DC:BF:43:3B:C7:8D
Certificate issuer:       /CN=c7ebabd786da13805655b1b5501fdcbf433bc78d
Certificate serial:       01A06E031E4ADEC977AFB0664E361BA65FBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
Manifest number:          11BF
Signing time:             Fri 04 Sep 2026 20:01:33 +0000
Manifest this update:     Fri 04 Sep 2026 20:01:33 +0000
Manifest next update:     Sat 05 Sep 2026 20:01:33 +0000
Files and hashes:         1: MUDlj_foqQtHS4g3iVOxdnqwX5U.roa (hash: 8ddMF47yP0pJAVGHQdkSQLRsafhb5eoMN8E4QvTkIwo=)
                          2: T_ajvR2nQAvlNGNDSwjL2eitBKI.roa (hash: uZlllXoSCgzxncNwBPd5Cx/IZ61QG4puWlaD0A2LBZ8=)
                          3: x-ur14baE4BWVbG1UB_cv0M7x40.crl (hash: R5m/fg1gTwToWYmI+Eiv79F8g/pvmVHExkL3jMIdbqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:03:1e:4a:de:c9:77:af:b0:66:4e:36:1b:a6:5f:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7ebabd786da13805655b1b5501fdcbf433bc78d
        Validity
            Not Before: Sep  4 20:01:33 2026 GMT
            Not After : Sep  5 20:01:33 2026 GMT
        Subject: CN=c5a2a7cbe9bafbfbee6d10cbc3e93110d98eade3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bb:a0:5e:59:7a:e7:f9:4a:78:ab:8c:d5:ee:
                    60:a4:13:e3:da:91:19:75:0e:e6:75:e8:a5:e0:ee:
                    ee:1f:2c:4a:21:a7:de:bc:2a:f4:90:b2:78:00:a9:
                    d1:6a:cf:8b:4e:b2:0d:44:4f:25:c6:06:02:e3:a6:
                    d0:bc:8a:3a:c7:0e:f2:12:c5:b5:de:1d:36:06:d6:
                    81:06:1e:05:85:b9:e2:7a:69:c8:a2:11:d1:a4:7c:
                    e7:7e:15:30:bc:3a:27:83:f8:34:e4:43:2d:b8:0d:
                    d1:c4:37:b0:0d:c8:d2:63:68:3d:7c:2a:e7:36:7f:
                    34:3b:e2:ff:5d:0b:56:8d:dd:00:03:ff:4e:70:d0:
                    8c:95:11:78:01:76:0e:83:f9:fb:1b:d8:f8:d3:58:
                    86:01:b9:cb:e2:a8:9a:18:89:7f:90:4b:76:e0:a1:
                    1f:21:de:2a:a3:06:57:38:1c:41:e2:d5:c4:d0:c5:
                    03:c6:f9:30:8d:8a:5b:17:3a:ce:47:df:22:5f:68:
                    18:a6:6b:35:3f:71:bb:cd:3b:1e:b6:9c:0f:7b:36:
                    56:6b:51:11:5a:7d:ab:a6:15:34:8d:de:2e:d1:35:
                    a6:16:71:d2:f5:49:a3:68:31:87:7c:cf:b0:69:5e:
                    73:0a:56:e7:ab:3e:f5:7e:bc:6e:51:2f:a9:d5:f4:
                    af:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A2:A7:CB:E9:BA:FB:FB:EE:6D:10:CB:C3:E9:31:10:D9:8E:AD:E3
            X509v3 Authority Key Identifier:
                keyid:C7:EB:AB:D7:86:DA:13:80:56:55:B1:B5:50:1F:DC:BF:43:3B:C7:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ab:dd:8a:b0:f5:9d:c5:90:1e:7d:7b:0c:e4:7e:8e:5a:4d:
         8a:51:8a:79:33:ec:53:9d:11:1b:a1:12:e9:60:0b:40:e3:07:
         bb:a7:11:02:ff:56:c4:d1:57:63:f4:0d:37:a3:91:93:4f:1c:
         c9:9f:4c:91:32:d9:3f:57:49:55:4d:3f:19:5b:c5:62:9e:9c:
         da:6c:bf:4a:a2:d0:04:a0:71:0c:56:1d:f9:da:08:ff:31:03:
         e0:e4:c1:34:e4:ea:25:67:90:e3:6d:4e:07:ed:31:dc:3c:b7:
         be:72:9a:0d:46:29:ae:9e:b4:d2:a8:a1:b0:b8:47:9f:db:5b:
         37:dd:2d:5a:e4:ac:98:d2:87:45:bf:d0:ca:51:70:61:1c:a0:
         a6:0b:5d:4e:11:fc:1e:69:b2:47:ab:a1:c6:a6:10:9e:d8:9b:
         7e:26:8b:3c:08:2e:3e:68:b0:25:1e:04:3b:d2:46:a2:22:74:
         7c:8d:9d:4d:56:8a:c5:b6:62:d8:f4:17:a6:20:cc:d3:b2:13:
         10:e6:36:a4:93:4c:37:f7:92:60:8d:da:f2:b8:98:ce:02:f8:
         b9:08:bf:78:92:7a:0e:5d:dc:ce:ed:75:cf:ef:28:3b:5a:fc:
         4d:c6:6a:6f:01:64:f8:ec:ea:e5:2c:f1:b3:d2:74:67:0c:17:
         b2:e8:ba:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBuAx5K3sl3r7BmTjYbpl++MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZWJhYmQ3ODZkYTEzODA1NjU1YjFiNTUwMWZkY2JmNDMz
YmM3OGQwHhcNMjYwOTA0MjAwMTMzWhcNMjYwOTA1MjAwMTMzWjAzMTEwLwYDVQQD
EyhjNWEyYTdjYmU5YmFmYmZiZWU2ZDEwY2JjM2U5MzExMGQ5OGVhZGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbugXll65/lKeKuM1e5gpBPj2pEZ
dQ7mdeil4O7uHyxKIafevCr0kLJ4AKnRas+LTrINRE8lxgYC46bQvIo6xw7yEsW1
3h02BtaBBh4FhbniemnIohHRpHznfhUwvDong/g05EMtuA3RxDewDcjSY2g9fCrn
Nn80O+L/XQtWjd0AA/9OcNCMlRF4AXYOg/n7G9j401iGAbnL4qiaGIl/kEt24KEf
Id4qowZXOBxB4tXE0MUDxvkwjYpbFzrOR98iX2gYpms1P3G7zTsetpwPezZWa1ER
Wn2rphU0jd4u0TWmFnHS9UmjaDGHfM+waV5zClbnqz71frxuUS+p1fSvKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWip8vpuvv77m0Qy8PpMRDZjq3jMB8GA1UdIwQY
MBaAFMfrq9eG2hOAVlWxtVAf3L9DO8eNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveC11cjE0YmFFNEJXVmJHMVVCX2N2ME03eDQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9jMDY0YTUtZDdhOS00ZTZmLThmZDgt
MGRjZDAzZGMwODk3LzEveC11cjE0YmFFNEJXVmJHMVVCX2N2ME03eDQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9jMDY0YTUtZDdhOS00ZTZmLThmZDgtMGRjZDAzZGMwODk3
LzEveC11cjE0YmFFNEJXVmJHMVVCX2N2ME03eDQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUqvdirD1
ncWQHn17DOR+jlpNilGKeTPsU50RG6ES6WALQOMHu6cRAv9WxNFXY/QNN6ORk08c
yZ9MkTLZP1dJVU0/GVvFYp6c2my/SqLQBKBxDFYd+doI/zED4OTBNOTqJWeQ421O
B+0x3Dy3vnKaDUYprp600qihsLhHn9tbN90tWuSsmNKHRb/QylFwYRygpgtdThH8
HmmyR6uhxqYQntibfiaLPAguPmiwJR4EO9JGoiJ0fI2dTVaKxbZi2PQXpiDM07IT
EOY2pJNMN/eSYI3a8riYzgL4uQi/eJJ6Dl3czu11z+8oO1r8TcZqbwFk+Ozq5Szx
s9J0ZwwXsui6GQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:44:38 2026 by rpki-client