Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
File:                     uXhT3Vdz8qawcYefW567Dm9Ofao.mft (raw, json)
Hash identifier:          nP3z4vBgRADBXTqLaM4Y65rBEb2q2UTIa7SayQReJp0=
Subject key identifier:   C1:E4:86:B8:CF:D3:19:D1:61:55:96:8E:CF:18:71:36:C5:43:A9:40
Authority key identifier: B9:78:53:DD:57:73:F2:A6:B0:71:87:9F:5B:9E:BB:0E:6F:4E:7D:AA
Certificate issuer:       /CN=b97853dd5773f2a6b071879f5b9ebb0e6f4e7daa
Certificate serial:       01A068A55B09220ACBC057D8212ED0107EC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
Manifest number:          19C8
Signing time:             Thu 03 Sep 2026 19:01:02 +0000
Manifest this update:     Thu 03 Sep 2026 19:01:02 +0000
Manifest next update:     Fri 04 Sep 2026 19:01:02 +0000
Files and hashes:         1: F_MQUh6Cv4-dn8QQYjcllgNmU_Q.roa (hash: rPOBsU3IqWyWd2TrfL/Ef+LouW+88Qh38gAJottjBDo=)
                          2: uXhT3Vdz8qawcYefW567Dm9Ofao.crl (hash: cnDYzDyOzue7kWzWJIMZzJE6HF3jlw6Pg6Z6HFTVXIU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Sep 2026 19:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:68:a5:5b:09:22:0a:cb:c0:57:d8:21:2e:d0:10:7e:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97853dd5773f2a6b071879f5b9ebb0e6f4e7daa
        Validity
            Not Before: Sep  3 19:01:02 2026 GMT
            Not After : Sep  4 19:01:02 2026 GMT
        Subject: CN=c1e486b8cfd319d16155968ecf187136c543a940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7a:9e:22:ee:df:6f:ea:cc:44:6e:ec:24:0f:
                    51:93:96:5c:0f:99:58:f1:db:58:6f:b1:b9:01:d0:
                    59:ee:fd:05:dd:82:c8:61:0b:c8:d3:7f:17:eb:56:
                    73:75:53:78:e7:c3:58:00:e3:2c:ee:76:32:10:76:
                    18:16:b5:4b:e4:99:c7:66:02:c8:ae:55:8a:97:f3:
                    96:02:22:74:71:f2:78:d7:10:23:99:af:c7:bd:ff:
                    74:07:1a:de:49:e8:6c:76:4b:db:34:c4:ab:57:d6:
                    98:a5:f2:3d:a8:36:cb:2d:63:c4:0a:8f:73:c4:00:
                    8a:97:64:ba:d4:52:67:3c:cd:e3:bf:51:33:11:bd:
                    90:b8:ae:b5:4e:10:f7:9e:50:9d:0d:f7:22:21:d5:
                    c5:fe:37:a0:95:14:cd:1e:46:f1:8f:d4:8a:9c:47:
                    68:60:71:bd:77:29:ed:8f:38:30:5b:c2:73:b7:7b:
                    14:f1:1f:0f:29:c1:91:25:78:6d:a4:1e:84:f5:3d:
                    fc:95:88:d0:60:e3:2f:62:6a:b9:db:55:5c:7c:29:
                    78:06:ae:4d:6a:85:40:4e:b5:30:69:06:99:c2:fb:
                    57:be:e7:85:9e:a5:9b:9a:ef:10:1f:39:b4:27:41:
                    68:6b:a0:71:96:9b:82:c0:92:b0:f6:fa:09:8c:1b:
                    22:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E4:86:B8:CF:D3:19:D1:61:55:96:8E:CF:18:71:36:C5:43:A9:40
            X509v3 Authority Key Identifier:
                keyid:B9:78:53:DD:57:73:F2:A6:B0:71:87:9F:5B:9E:BB:0E:6F:4E:7D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:7b:9a:7c:ec:b3:40:32:82:29:0f:e9:b5:bf:7d:5f:e0:15:
         e0:e7:d8:cb:28:b9:3b:86:c2:30:4e:8a:bd:dc:32:8f:28:4a:
         fe:22:07:bf:98:ac:a4:a1:d4:0f:c2:f6:ef:1d:34:de:69:a2:
         98:99:39:4b:a9:ef:b5:41:80:1e:3b:e0:5d:01:2a:39:50:93:
         96:b4:36:75:b9:a1:b3:04:2f:4a:46:47:8e:73:f4:64:06:39:
         cf:80:84:24:ae:b5:7c:5f:63:16:ee:82:19:6a:bf:5e:0e:b8:
         dc:7a:bb:4c:3f:3d:a3:3e:1a:0d:b4:a8:98:2e:6b:5d:11:89:
         e3:d1:d4:25:c8:b3:3f:b7:5b:56:3c:2f:59:b9:fa:cd:07:a5:
         99:c3:ae:ba:c7:bf:3e:67:01:fe:d7:31:28:4a:a0:48:a3:81:
         83:bd:03:0c:30:da:c4:97:b8:b7:5e:5b:38:cc:8d:44:9a:31:
         77:20:1a:ec:f4:69:e2:d3:20:e9:92:79:18:ca:2a:ac:ff:a3:
         e8:4d:b6:ae:d3:1b:e7:ad:b0:19:2a:bd:b0:5e:20:68:60:dc:
         fb:d2:bc:0d:23:9a:62:2a:53:75:88:33:3f:75:c1:75:2b:cd:
         fc:ae:b6:34:a0:64:66:5a:70:f6:4c:c4:31:12:2b:a8:98:49:
         45:21:56:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBopVsJIgrLwFfYIS7QEH7FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5Nzg1M2RkNTc3M2YyYTZiMDcxODc5ZjViOWViYjBlNmY0
ZTdkYWEwHhcNMjYwOTAzMTkwMTAyWhcNMjYwOTA0MTkwMTAyWjAzMTEwLwYDVQQD
EyhjMWU0ODZiOGNmZDMxOWQxNjE1NTk2OGVjZjE4NzEzNmM1NDNhOTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHqeIu7fb+rMRG7sJA9Rk5ZcD5lY
8dtYb7G5AdBZ7v0F3YLIYQvI038X61ZzdVN458NYAOMs7nYyEHYYFrVL5JnHZgLI
rlWKl/OWAiJ0cfJ41xAjma/Hvf90BxreSehsdkvbNMSrV9aYpfI9qDbLLWPECo9z
xACKl2S61FJnPM3jv1EzEb2QuK61ThD3nlCdDfciIdXF/jeglRTNHkbxj9SKnEdo
YHG9dyntjzgwW8Jzt3sU8R8PKcGRJXhtpB6E9T38lYjQYOMvYmq521VcfCl4Bq5N
aoVATrUwaQaZwvtXvueFnqWbmu8QHzm0J0Foa6BxlpuCwJKw9voJjBsibwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHkhrjP0xnRYVWWjs8YcTbFQ6lAMB8GA1UdIwQY
MBaAFLl4U91Xc/KmsHGHn1ueuw5vTn2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVhoVDNWZHo4cWF3Y1llZlc1NjdEbTlPZmFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iOTNiNjYtYWYzNS00OWQxLWJkNzgt
N2ZmODQ0M2Q5YzIxLzEvdVhoVDNWZHo4cWF3Y1llZlc1NjdEbTlPZmFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9iOTNiNjYtYWYzNS00OWQxLWJkNzgtN2ZmODQ0M2Q5YzIx
LzEvdVhoVDNWZHo4cWF3Y1llZlc1NjdEbTlPZmFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANXuafOyz
QDKCKQ/ptb99X+AV4OfYyyi5O4bCME6KvdwyjyhK/iIHv5ispKHUD8L27x003mmi
mJk5S6nvtUGAHjvgXQEqOVCTlrQ2dbmhswQvSkZHjnP0ZAY5z4CEJK61fF9jFu6C
GWq/Xg643Hq7TD89oz4aDbSomC5rXRGJ49HUJcizP7dbVjwvWbn6zQelmcOuuse/
PmcB/tcxKEqgSKOBg70DDDDaxJe4t15bOMyNRJoxdyAa7PRp4tMg6ZJ5GMoqrP+j
6E22rtMb562wGSq9sF4gaGDc+9K8DSOaYipTdYgzP3XBdSvN/K62NKBkZlpw9kzE
MRIrqJhJRSFWKg==
-----END CERTIFICATE-----
Generated at Fri Sep 4 03:46:59 2026 by rpki-client