Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.mft
File:                     uDtc22Xsxb10bYt0mCgxptjcEFM.mft (raw, json)
Hash identifier:          eJZoHNhNuctcOlAlWvmZMDWm0JkG0Ly+fdo/uC9W1VI=
Subject key identifier:   41:E7:FD:A1:F8:79:5C:45:F4:5B:BF:55:B2:B5:32:89:4F:FD:44:EB
Authority key identifier: B8:3B:5C:DB:65:EC:C5:BD:74:6D:8B:74:98:28:31:A6:D8:DC:10:53
Certificate issuer:       /CN=b83b5cdb65ecc5bd746d8b74982831a6d8dc1053
Certificate serial:       01A164210DA6AD706C58A9B45F7A279BF268
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uDtc22Xsxb10bYt0mCgxptjcEFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.mft
Manifest number:          1336
Signing time:             Thu 22 Oct 2026 15:00:50 +0000
Manifest this update:     Thu 22 Oct 2026 15:00:50 +0000
Manifest next update:     Fri 23 Oct 2026 15:00:50 +0000
Files and hashes:         1: lfLo0D5ENgt6llv50YfdmRFAQiw.roa (hash: hkIz4lm2sH7tAlv2qyrzV3aAv7hwXQo0U1p5z28Zvks=)
                          2: uDtc22Xsxb10bYt0mCgxptjcEFM.crl (hash: g/a7Bf2aixlLViZEU/978RSSZE7m+ze2ZoAFfmu0IJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uDtc22Xsxb10bYt0mCgxptjcEFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Oct 2026 15:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:64:21:0d:a6:ad:70:6c:58:a9:b4:5f:7a:27:9b:f2:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b83b5cdb65ecc5bd746d8b74982831a6d8dc1053
        Validity
            Not Before: Oct 22 15:00:50 2026 GMT
            Not After : Oct 23 15:00:50 2026 GMT
        Subject: CN=41e7fda1f8795c45f45bbf55b2b532894ffd44eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a8:d8:14:fe:2b:a8:1c:cf:f0:e7:b6:cb:ac:
                    79:af:ba:ce:9d:40:d9:18:73:cc:a5:5f:42:5d:37:
                    e0:0a:ad:95:28:bb:9f:7a:23:51:13:fa:de:25:12:
                    e2:28:36:98:7b:47:31:f3:83:6b:11:31:13:01:b9:
                    e3:7a:cb:d2:e8:91:87:f2:9e:6d:0d:4c:0e:f0:1f:
                    0a:8b:a2:cc:51:ab:24:28:f1:1b:e9:e3:eb:dc:ce:
                    9c:1a:1f:4d:4c:28:58:e9:f5:f0:1f:6e:0e:13:81:
                    db:38:73:64:44:7b:32:04:37:5e:09:a8:90:07:56:
                    c2:7c:d0:78:74:36:2f:a7:69:b6:6c:9a:4c:7e:70:
                    89:16:66:be:74:f2:b6:c6:8e:38:d7:6e:58:98:71:
                    f2:ce:fa:2e:56:99:fe:55:2e:cf:e0:5b:ee:5f:26:
                    03:29:74:1d:29:74:b5:8c:d1:0c:74:d0:9f:ca:41:
                    7e:02:76:a7:2b:9b:fd:04:e3:66:93:a4:38:c8:b7:
                    ef:36:30:ba:8e:2d:aa:a9:55:68:15:b6:d7:49:c0:
                    34:ee:73:1d:a3:06:a2:a1:72:82:e3:c3:87:3a:30:
                    55:1a:04:c4:36:3c:67:8a:c6:74:92:b0:91:63:97:
                    a9:4e:4b:12:01:29:f0:b8:da:2e:d2:ab:f9:c0:9b:
                    02:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E7:FD:A1:F8:79:5C:45:F4:5B:BF:55:B2:B5:32:89:4F:FD:44:EB
            X509v3 Authority Key Identifier:
                keyid:B8:3B:5C:DB:65:EC:C5:BD:74:6D:8B:74:98:28:31:A6:D8:DC:10:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uDtc22Xsxb10bYt0mCgxptjcEFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:b6:3f:99:29:27:05:00:47:79:b1:2f:85:4f:53:35:11:ac:
         bc:a9:fc:a0:86:19:e3:aa:c6:9a:52:b8:71:eb:b8:52:56:f1:
         13:f6:da:eb:d0:50:21:20:dc:0a:fa:78:5c:57:2d:b3:40:1b:
         8c:6e:fd:d1:5b:73:fa:7d:1a:86:70:e6:2b:a8:d5:f7:7a:c0:
         38:1f:a8:bf:e7:39:8b:bc:de:8b:44:35:d7:87:8f:39:88:10:
         9e:51:42:0c:6f:67:08:1f:e2:3d:fd:60:69:44:7b:88:30:bf:
         37:16:93:57:55:3d:35:bd:41:1b:ca:2f:16:6f:e2:a8:e1:bf:
         3a:1f:84:6d:de:17:89:59:56:05:60:43:ee:43:16:c5:0e:e3:
         34:ad:52:7c:ca:64:a7:41:ce:d1:87:fa:b8:97:42:8c:15:d6:
         63:dd:b2:75:80:e1:7f:a5:fe:25:3b:02:f3:70:f5:b0:32:43:
         bd:5e:fa:30:66:1d:e4:6c:f1:06:45:44:0e:eb:af:a6:99:bc:
         09:e8:ab:aa:b5:05:79:82:e8:cd:c1:c7:e5:61:f4:9c:be:fe:
         05:7b:81:88:e9:92:a0:22:ef:49:e4:ba:10:0d:b0:e3:94:3e:
         a7:4f:65:b5:4b:f1:0c:e0:6c:f4:4c:05:35:4a:2d:a9:4b:e6:
         33:00:fd:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFkIQ2mrXBsWKm0X3onm/JoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4M2I1Y2RiNjVlY2M1YmQ3NDZkOGI3NDk4MjgzMWE2ZDhk
YzEwNTMwHhcNMjYxMDIyMTUwMDUwWhcNMjYxMDIzMTUwMDUwWjAzMTEwLwYDVQQD
Eyg0MWU3ZmRhMWY4Nzk1YzQ1ZjQ1YmJmNTViMmI1MzI4OTRmZmQ0NGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqjYFP4rqBzP8Oe2y6x5r7rOnUDZ
GHPMpV9CXTfgCq2VKLufeiNRE/reJRLiKDaYe0cx84NrETETAbnjesvS6JGH8p5t
DUwO8B8Ki6LMUaskKPEb6ePr3M6cGh9NTChY6fXwH24OE4HbOHNkRHsyBDdeCaiQ
B1bCfNB4dDYvp2m2bJpMfnCJFma+dPK2xo44125YmHHyzvouVpn+VS7P4FvuXyYD
KXQdKXS1jNEMdNCfykF+AnanK5v9BONmk6Q4yLfvNjC6ji2qqVVoFbbXScA07nMd
owaioXKC48OHOjBVGgTENjxnisZ0krCRY5epTksSASnwuNou0qv5wJsCxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHn/aH4eVxF9Fu/VbK1MolP/UTrMB8GA1UdIwQY
MBaAFLg7XNtl7MW9dG2LdJgoMabY3BBTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUR0YzIyWHN4YjEwYll0MG1DZ3hwdGpjRUZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80YjhmNWEtMjRlMC00ZWRlLWE0YWIt
NTBjNzg5MTZmOGUzLzEvdUR0YzIyWHN4YjEwYll0MG1DZ3hwdGpjRUZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS80YjhmNWEtMjRlMC00ZWRlLWE0YWItNTBjNzg5MTZmOGUz
LzEvdUR0YzIyWHN4YjEwYll0MG1DZ3hwdGpjRUZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHLY/mSkn
BQBHebEvhU9TNRGsvKn8oIYZ46rGmlK4ceu4UlbxE/ba69BQISDcCvp4XFcts0Ab
jG790Vtz+n0ahnDmK6jV93rAOB+ov+c5i7zei0Q114ePOYgQnlFCDG9nCB/iPf1g
aUR7iDC/NxaTV1U9Nb1BG8ovFm/iqOG/Oh+Ebd4XiVlWBWBD7kMWxQ7jNK1SfMpk
p0HO0Yf6uJdCjBXWY92ydYDhf6X+JTsC83D1sDJDvV76MGYd5GzxBkVEDuuvppm8
CeirqrUFeYLozcHH5WH0nL7+BXuBiOmSoCLvSeS6EA2w45Q+p09ltUvxDOBs9EwF
NUotqUvmMwD9hQ==
-----END CERTIFICATE-----
Generated at Fri Oct 23 01:13:20 2026 by rpki-client