Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
File:                     UdoAZhIua6KU0rdHk41Gx06Z-IA.mft (raw, json)
Hash identifier:          JtmGWdECVdTMiIOukPlVeohqyqo4GXN9HnRVQfeuUNo=
Subject key identifier:   D0:97:02:75:9D:CF:B0:9D:A5:9A:25:CB:F3:F7:85:55:8F:F6:43:10
Authority key identifier: 51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80
Certificate issuer:       /CN=51da0066122e6ba294d2b747938d46c74e99f880
Certificate serial:       01A18E2FC37A6DCE8E795265D71506758D95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
Manifest number:          0B1B
Signing time:             Fri 30 Oct 2026 19:00:57 +0000
Manifest this update:     Fri 30 Oct 2026 19:00:57 +0000
Manifest next update:     Sat 31 Oct 2026 19:00:57 +0000
Files and hashes:         1: UdoAZhIua6KU0rdHk41Gx06Z-IA.crl (hash: hiBiWlE4fwpMWOnSo8DY0wIX6F6sWXCrXsFUNqd3+Fo=)
                          2: bBMlqfhZbgU4RFc29xzMS28J5Yc.roa (hash: wmFqb2uW30KLYhFd4JkMsA8poWqQ5oZsDAIy44oWkC4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8e:2f:c3:7a:6d:ce:8e:79:52:65:d7:15:06:75:8d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51da0066122e6ba294d2b747938d46c74e99f880
        Validity
            Not Before: Oct 30 19:00:57 2026 GMT
            Not After : Oct 31 19:00:57 2026 GMT
        Subject: CN=d09702759dcfb09da59a25cbf3f785558ff64310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:99:2b:25:ce:c0:b3:48:70:ea:9d:b8:9c:c0:
                    76:47:b2:36:ad:0e:06:97:bf:11:0c:61:eb:c9:0a:
                    a4:e4:bc:a5:5e:19:79:6b:f6:d2:40:55:1f:a1:a4:
                    64:15:d9:cf:ec:27:fc:d9:14:6e:66:89:6b:19:d2:
                    64:9e:87:5d:0a:83:1b:8d:c9:2d:3f:3b:60:92:18:
                    df:2e:f4:26:bc:6e:45:8f:26:ae:3c:c9:10:e2:a2:
                    b9:c6:bd:1a:1a:ba:d9:7c:71:bb:a6:fd:84:a6:ec:
                    ca:3c:33:cb:52:46:7b:02:35:47:60:a9:7c:1f:8f:
                    c0:f5:2f:f6:03:a4:56:a9:07:fa:9c:2e:b8:b8:38:
                    7a:ca:a0:83:83:81:4d:b3:3e:f8:62:c1:1e:ed:71:
                    81:91:5c:09:be:5a:30:56:6e:e6:f3:8d:6a:e4:16:
                    62:84:e1:81:6d:2a:2c:16:46:b0:a5:84:93:86:96:
                    6f:76:b2:02:24:69:bf:77:00:e2:d7:56:6d:6c:5d:
                    d0:90:da:d1:2b:2e:80:63:40:0f:32:4f:33:37:bd:
                    b2:69:29:21:20:21:d2:06:f9:9d:98:4a:d4:b3:74:
                    70:66:50:94:31:30:5a:2f:59:01:f7:ab:e7:86:40:
                    b1:49:77:2f:94:33:e3:ba:6d:dc:89:b7:8a:53:04:
                    41:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:97:02:75:9D:CF:B0:9D:A5:9A:25:CB:F3:F7:85:55:8F:F6:43:10
            X509v3 Authority Key Identifier:
                keyid:51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:c6:30:ad:64:6d:fc:e0:bb:46:6c:41:49:0d:7d:c2:a0:9c:
         32:a4:07:92:81:9a:c8:14:64:10:f3:60:8e:90:d1:81:c8:6e:
         33:8d:e9:a8:c8:5f:ff:9c:2f:b4:7f:7e:3b:17:bf:56:95:8c:
         48:f8:eb:4a:9a:12:53:c6:49:39:de:01:9d:8c:5e:cc:51:e7:
         9b:67:f7:8a:79:36:84:cb:16:2c:68:5a:56:03:4a:43:79:d9:
         6b:0a:3d:a4:f4:ad:ad:20:4d:a6:55:c8:ac:5e:ab:cc:0f:30:
         80:a2:12:b3:75:ed:7e:89:8f:a6:b1:6b:91:66:32:ca:f5:99:
         82:61:08:31:d1:4e:2c:10:bd:2a:38:71:fd:2f:1e:77:19:ca:
         6a:fd:a6:12:ba:d2:5a:15:c1:17:9c:9d:f3:36:5f:5c:e1:17:
         21:c6:25:4c:ee:1e:2d:81:c9:a9:8c:a0:83:55:1d:5d:51:6f:
         a6:55:32:fa:fc:25:26:f8:49:7b:fd:46:f0:1e:9d:2a:c1:03:
         37:10:9a:7e:65:4d:98:91:4e:e2:a1:7e:c6:23:2d:5a:de:7e:
         c9:09:fa:ed:f6:38:a8:62:41:ab:78:04:bc:bb:69:3c:e5:be:
         1e:5c:bc:58:17:99:78:ed:15:e7:eb:7d:02:94:cb:67:ff:84:
         02:dc:df:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGOL8N6bc6OeVJl1xUGdY2VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZGEwMDY2MTIyZTZiYTI5NGQyYjc0NzkzOGQ0NmM3NGU5
OWY4ODAwHhcNMjYxMDMwMTkwMDU3WhcNMjYxMDMxMTkwMDU3WjAzMTEwLwYDVQQD
EyhkMDk3MDI3NTlkY2ZiMDlkYTU5YTI1Y2JmM2Y3ODU1NThmZjY0MzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpkrJc7As0hw6p24nMB2R7I2rQ4G
l78RDGHryQqk5LylXhl5a/bSQFUfoaRkFdnP7Cf82RRuZolrGdJknoddCoMbjckt
PztgkhjfLvQmvG5FjyauPMkQ4qK5xr0aGrrZfHG7pv2EpuzKPDPLUkZ7AjVHYKl8
H4/A9S/2A6RWqQf6nC64uDh6yqCDg4FNsz74YsEe7XGBkVwJvlowVm7m841q5BZi
hOGBbSosFkawpYSThpZvdrICJGm/dwDi11ZtbF3QkNrRKy6AY0APMk8zN72yaSkh
ICHSBvmdmErUs3RwZlCUMTBaL1kB96vnhkCxSXcvlDPjum3cibeKUwRBIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCXAnWdz7CdpZoly/P3hVWP9kMQMB8GA1UdIwQY
MBaAFFHaAGYSLmuilNK3R5ONRsdOmfiAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWRvQVpoSXVhNktVMHJkSGs0MUd4MDZaLUlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mNjRlYjQtMjZjYy00MDU2LTg1M2It
YmU0OGI3OTI1NDc4LzEvVWRvQVpoSXVhNktVMHJkSGs0MUd4MDZaLUlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9mNjRlYjQtMjZjYy00MDU2LTg1M2ItYmU0OGI3OTI1NDc4
LzEvVWRvQVpoSXVhNktVMHJkSGs0MUd4MDZaLUlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAScYwrWRt
/OC7RmxBSQ19wqCcMqQHkoGayBRkEPNgjpDRgchuM43pqMhf/5wvtH9+Oxe/VpWM
SPjrSpoSU8ZJOd4BnYxezFHnm2f3ink2hMsWLGhaVgNKQ3nZawo9pPStrSBNplXI
rF6rzA8wgKISs3XtfomPprFrkWYyyvWZgmEIMdFOLBC9Kjhx/S8edxnKav2mErrS
WhXBF5yd8zZfXOEXIcYlTO4eLYHJqYygg1UdXVFvplUy+vwlJvhJe/1G8B6dKsED
NxCafmVNmJFO4qF+xiMtWt5+yQn67fY4qGJBq3gEvLtpPOW+Hly8WBeZeO0V5+t9
ApTLZ/+EAtzfTw==
-----END CERTIFICATE-----
Generated at Sat Oct 31 03:31:47 2026 by rpki-client