Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.mft
File:                     uDtc22Xsxb10bYt0mCgxptjcEFM.mft (raw, json)
Hash identifier:          5Sv35VEOpQnzNFjyH1C8j9wnuyxA/D6eWMOWs2yTLBM=
Subject key identifier:   87:50:54:69:62:D4:D6:89:06:C6:F9:C4:72:A4:62:E4:C8:15:8D:4B
Authority key identifier: B8:3B:5C:DB:65:EC:C5:BD:74:6D:8B:74:98:28:31:A6:D8:DC:10:53
Certificate issuer:       /CN=b83b5cdb65ecc5bd746d8b74982831a6d8dc1053
Certificate serial:       01A002B8E736AFA14B7AD85883632B9A2820
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uDtc22Xsxb10bYt0mCgxptjcEFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.mft
Manifest number:          127F
Signing time:             Sat 15 Aug 2026 00:01:07 +0000
Manifest this update:     Sat 15 Aug 2026 00:01:07 +0000
Manifest next update:     Sun 16 Aug 2026 00:01:07 +0000
Files and hashes:         1: lfLo0D5ENgt6llv50YfdmRFAQiw.roa (hash: hkIz4lm2sH7tAlv2qyrzV3aAv7hwXQo0U1p5z28Zvks=)
                          2: uDtc22Xsxb10bYt0mCgxptjcEFM.crl (hash: 55zeS9XrdeJgCCVItzPJQ9mQ/oX8L+JDw6P4nAWIlFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uDtc22Xsxb10bYt0mCgxptjcEFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 00:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:b8:e7:36:af:a1:4b:7a:d8:58:83:63:2b:9a:28:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b83b5cdb65ecc5bd746d8b74982831a6d8dc1053
        Validity
            Not Before: Aug 15 00:01:07 2026 GMT
            Not After : Aug 16 00:01:07 2026 GMT
        Subject: CN=8750546962d4d68906c6f9c472a462e4c8158d4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b4:e4:b2:5f:13:2d:39:9c:03:63:b1:e7:30:
                    96:26:a4:6d:e1:fd:7e:97:ea:c9:97:bb:f7:0a:82:
                    4d:fc:20:c2:03:41:62:f0:96:9a:72:84:37:4f:4e:
                    29:f5:49:ca:f0:61:73:4e:31:41:2a:14:a2:b0:14:
                    40:b8:29:10:4e:1f:c1:79:3b:1e:0e:03:5d:7a:72:
                    cb:db:7e:5c:1a:81:2c:4c:13:b8:c2:1b:17:a6:67:
                    6c:95:fb:30:dd:df:68:c9:8a:1a:2b:ff:7b:54:25:
                    ec:e2:fe:b7:a2:f0:bf:e2:a6:c4:bb:ff:47:ff:cc:
                    dd:e7:33:97:1c:a8:83:d7:0c:ec:16:49:55:0d:40:
                    f1:0d:28:45:0a:1e:1d:53:e0:c4:3e:b8:47:ad:35:
                    70:a1:01:22:f1:f3:2e:f2:90:7e:cc:50:37:9a:87:
                    5d:a9:ca:c7:e8:d7:0c:3c:ef:02:0f:bf:e9:b5:8b:
                    11:9b:6a:b6:37:fe:82:f4:be:2f:d5:9f:a2:a9:84:
                    1e:8f:95:30:8b:ba:cd:82:45:3c:af:24:bb:66:d4:
                    b1:72:cd:a3:bf:0c:03:1f:5a:b7:d2:db:41:f2:6c:
                    ea:09:4d:0b:85:55:33:84:e3:91:c2:7b:a2:97:05:
                    78:19:ed:9f:4a:06:58:9f:10:fa:75:be:d1:ec:aa:
                    07:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:50:54:69:62:D4:D6:89:06:C6:F9:C4:72:A4:62:E4:C8:15:8D:4B
            X509v3 Authority Key Identifier:
                keyid:B8:3B:5C:DB:65:EC:C5:BD:74:6D:8B:74:98:28:31:A6:D8:DC:10:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uDtc22Xsxb10bYt0mCgxptjcEFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:18:f3:db:c0:3d:68:97:92:40:45:27:b9:60:c9:43:13:fa:
         5a:0f:c5:1a:4a:3d:4f:5e:8a:e8:f7:64:bb:f1:8a:f9:34:bf:
         41:0b:4a:f8:9d:41:bb:06:7f:0d:ae:bb:09:fe:b2:bb:ba:fd:
         8f:dd:d2:d7:4c:28:7a:d8:44:4b:9a:eb:60:63:ce:67:67:cd:
         ce:52:9f:17:57:20:39:da:95:5b:b0:e2:12:b0:d5:e1:57:1e:
         cc:34:15:5a:cc:78:fc:1b:95:b8:4e:e5:c6:56:06:cc:24:73:
         b7:86:b2:6a:19:f7:5a:47:cf:c7:ea:ee:19:25:ca:01:d0:fd:
         82:1e:87:45:23:d0:c3:f2:06:8f:7a:66:a3:a2:5e:62:47:8e:
         c2:ef:e5:94:eb:2e:df:1d:6f:d4:fa:f3:0b:a0:f2:2d:53:7c:
         fc:62:20:30:07:52:d7:37:2a:cb:ae:23:68:fc:36:0a:37:7f:
         8b:37:df:6c:b7:b0:fa:7f:f2:cc:91:90:68:f2:98:fc:a1:d3:
         25:4f:1a:ff:00:62:f2:a9:aa:74:4f:9b:ec:98:42:73:0c:02:
         ac:35:fc:3f:41:6c:39:22:3a:24:f0:ad:a4:2e:10:8f:7b:32:
         c4:e5:0c:4f:5e:2b:dc:93:29:40:70:06:99:e6:f7:2b:90:9f:
         c8:3f:7d:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACuOc2r6FLethYg2MrmiggMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4M2I1Y2RiNjVlY2M1YmQ3NDZkOGI3NDk4MjgzMWE2ZDhk
YzEwNTMwHhcNMjYwODE1MDAwMTA3WhcNMjYwODE2MDAwMTA3WjAzMTEwLwYDVQQD
Eyg4NzUwNTQ2OTYyZDRkNjg5MDZjNmY5YzQ3MmE0NjJlNGM4MTU4ZDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrTksl8TLTmcA2Ox5zCWJqRt4f1+
l+rJl7v3CoJN/CDCA0Fi8JaacoQ3T04p9UnK8GFzTjFBKhSisBRAuCkQTh/BeTse
DgNdenLL235cGoEsTBO4whsXpmdslfsw3d9oyYoaK/97VCXs4v63ovC/4qbEu/9H
/8zd5zOXHKiD1wzsFklVDUDxDShFCh4dU+DEPrhHrTVwoQEi8fMu8pB+zFA3modd
qcrH6NcMPO8CD7/ptYsRm2q2N/6C9L4v1Z+iqYQej5Uwi7rNgkU8ryS7ZtSxcs2j
vwwDH1q30ttB8mzqCU0LhVUzhOORwnuilwV4Ge2fSgZYnxD6db7R7KoH/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdQVGli1NaJBsb5xHKkYuTIFY1LMB8GA1UdIwQY
MBaAFLg7XNtl7MW9dG2LdJgoMabY3BBTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUR0YzIyWHN4YjEwYll0MG1DZ3hwdGpjRUZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80YjhmNWEtMjRlMC00ZWRlLWE0YWIt
NTBjNzg5MTZmOGUzLzEvdUR0YzIyWHN4YjEwYll0MG1DZ3hwdGpjRUZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS80YjhmNWEtMjRlMC00ZWRlLWE0YWItNTBjNzg5MTZmOGUz
LzEvdUR0YzIyWHN4YjEwYll0MG1DZ3hwdGpjRUZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMxjz28A9
aJeSQEUnuWDJQxP6Wg/FGko9T16K6Pdku/GK+TS/QQtK+J1BuwZ/Da67Cf6yu7r9
j93S10woethES5rrYGPOZ2fNzlKfF1cgOdqVW7DiErDV4VcezDQVWsx4/BuVuE7l
xlYGzCRzt4ayahn3WkfPx+ruGSXKAdD9gh6HRSPQw/IGj3pmo6JeYkeOwu/llOsu
3x1v1PrzC6DyLVN8/GIgMAdS1zcqy64jaPw2Cjd/izffbLew+n/yzJGQaPKY/KHT
JU8a/wBi8qmqdE+b7JhCcwwCrDX8P0FsOSI6JPCtpC4Qj3syxOUMT14r3JMpQHAG
meb3K5CfyD99Nw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 08:41:35 2026 by rpki-client