Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
File:                     uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft (raw, json)
Hash identifier:          2rlG+TTconSeKAb3s4IxCNo1fP8Y/QCzgi4mhZsB2tc=
Subject key identifier:   C8:4C:43:D9:9D:25:6B:AC:77:75:07:2B:35:E5:A8:14:74:A7:1C:41
Authority key identifier: BA:E7:FA:77:F7:24:BB:46:73:25:AD:59:D7:DB:FC:63:39:9C:6E:79
Certificate issuer:       /CN=bae7fa77f724bb467325ad59d7dbfc63399c6e79
Certificate serial:       01A002F00015CD7777435216113119727368
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
Manifest number:          19AC
Signing time:             Sat 15 Aug 2026 01:01:18 +0000
Manifest this update:     Sat 15 Aug 2026 01:01:18 +0000
Manifest next update:     Sun 16 Aug 2026 01:01:18 +0000
Files and hashes:         1: Lp4ADAtbUAnUUwmRXq0CRRE_xe4.roa (hash: /5OxQHC9qaJZIRED9fTxGtHMX/MOAtFVzPxTg7u1+8I=)
                          2: uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl (hash: d0Imu0S1+JV2Jw9cFpOm7/A0xgYsWvY5knuUufBvGuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:f0:00:15:cd:77:77:43:52:16:11:31:19:72:73:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bae7fa77f724bb467325ad59d7dbfc63399c6e79
        Validity
            Not Before: Aug 15 01:01:18 2026 GMT
            Not After : Aug 16 01:01:18 2026 GMT
        Subject: CN=c84c43d99d256bac7775072b35e5a81474a71c41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:22:e8:5d:07:2f:26:f6:b7:e9:e8:87:1d:7a:
                    76:f0:ca:63:6e:0f:23:81:19:0d:e5:11:3e:98:e8:
                    7f:42:6f:6f:45:ec:49:cc:9c:57:ff:fb:88:b1:53:
                    e8:20:08:d1:9c:ed:a9:6c:75:29:3a:3a:8e:54:90:
                    fa:fd:19:ba:1f:47:98:b4:ba:cd:2d:f6:0f:34:c0:
                    3a:5c:9f:38:bd:5c:51:39:a2:7e:11:b2:79:92:22:
                    0e:bf:96:aa:ed:88:ec:8f:42:3f:f9:af:96:4e:d2:
                    75:36:57:e1:27:62:82:e7:a0:0e:44:96:4f:93:3c:
                    19:78:7a:d9:f6:65:0c:9e:43:da:c2:3c:6e:d8:37:
                    73:5c:0c:ee:c2:d4:e8:c2:1e:0b:75:bd:40:1b:71:
                    09:f8:cf:16:c1:c5:4f:6e:ee:4e:f0:d8:a6:0b:88:
                    84:8d:e2:01:0b:c1:9c:00:4c:52:f3:97:6a:c5:ec:
                    d0:bd:dc:c5:93:c6:d0:fb:54:49:48:66:14:19:7a:
                    09:da:6b:23:65:7a:1d:85:ac:b1:f9:1a:f8:f9:3b:
                    30:3f:97:6b:2e:fe:a9:92:f6:b5:55:ac:bc:97:96:
                    5d:05:39:0e:b9:72:05:81:3a:5c:51:57:55:81:e2:
                    26:c2:5a:cb:68:f8:9f:64:b9:b5:d4:b7:d6:76:d3:
                    34:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:4C:43:D9:9D:25:6B:AC:77:75:07:2B:35:E5:A8:14:74:A7:1C:41
            X509v3 Authority Key Identifier:
                keyid:BA:E7:FA:77:F7:24:BB:46:73:25:AD:59:D7:DB:FC:63:39:9C:6E:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:72:0b:cd:9f:74:76:39:7d:7e:9c:4e:3f:cb:b1:77:d2:8b:
         4c:2e:a2:4e:33:96:01:07:fe:ff:2e:cf:80:46:1a:df:07:1e:
         a1:00:c5:e7:67:eb:1f:37:0e:e0:34:8b:91:2e:60:a8:a9:47:
         32:c3:22:d7:e4:16:35:a0:63:48:00:fa:40:57:e8:ca:39:ab:
         59:1e:fa:b1:4a:7b:01:c0:7e:69:35:30:e1:81:92:09:d0:40:
         20:5e:90:c2:d9:c0:3f:97:41:8e:98:2b:2a:09:b6:06:9a:69:
         eb:72:52:1b:04:4b:da:4b:4f:6f:1e:a3:ad:d8:6a:a9:b7:e7:
         4e:e9:0f:20:77:97:a0:1c:40:93:41:58:ea:39:25:1c:56:3b:
         28:94:a2:c7:e8:00:e7:40:7b:4e:40:31:40:08:51:4f:93:e5:
         63:04:bd:fd:3e:c6:74:27:ab:10:90:07:5e:00:7f:21:0d:2d:
         7e:32:8d:ab:9a:b5:e8:86:39:e0:14:04:4c:60:b9:84:37:34:
         ff:0c:7b:df:18:50:9a:d2:af:6a:b6:7a:7f:a3:0c:13:b6:8d:
         e1:69:e0:da:cb:f5:ce:56:2d:aa:f1:1f:ab:70:ac:5b:b9:a6:
         c1:71:93:6b:60:fd:ff:7a:10:69:4c:4e:01:bb:df:f1:9e:95:
         7e:1e:38:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAC8AAVzXd3Q1IWETEZcnNoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhZTdmYTc3ZjcyNGJiNDY3MzI1YWQ1OWQ3ZGJmYzYzMzk5
YzZlNzkwHhcNMjYwODE1MDEwMTE4WhcNMjYwODE2MDEwMTE4WjAzMTEwLwYDVQQD
EyhjODRjNDNkOTlkMjU2YmFjNzc3NTA3MmIzNWU1YTgxNDc0YTcxYzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCLoXQcvJva36eiHHXp28Mpjbg8j
gRkN5RE+mOh/Qm9vRexJzJxX//uIsVPoIAjRnO2pbHUpOjqOVJD6/Rm6H0eYtLrN
LfYPNMA6XJ84vVxROaJ+EbJ5kiIOv5aq7Yjsj0I/+a+WTtJ1NlfhJ2KC56AORJZP
kzwZeHrZ9mUMnkPawjxu2DdzXAzuwtTowh4Ldb1AG3EJ+M8WwcVPbu5O8NimC4iE
jeIBC8GcAExS85dqxezQvdzFk8bQ+1RJSGYUGXoJ2msjZXodhayx+Rr4+TswP5dr
Lv6pkva1Vay8l5ZdBTkOuXIFgTpcUVdVgeImwlrLaPifZLm11LfWdtM09wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhMQ9mdJWusd3UHKzXlqBR0pxxBMB8GA1UdIwQY
MBaAFLrn+nf3JLtGcyWtWdfb/GM5nG55MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXVmNmRfY2t1MFp6SmExWjE5djhZem1jYm5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi83Nzc3NGEtZmMwNy00MDAyLTk0Zjkt
MTJkYzk0ZGRlZGNkLzEvdXVmNmRfY2t1MFp6SmExWjE5djhZem1jYm5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi83Nzc3NGEtZmMwNy00MDAyLTk0ZjktMTJkYzk0ZGRlZGNk
LzEvdXVmNmRfY2t1MFp6SmExWjE5djhZem1jYm5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr3ILzZ90
djl9fpxOP8uxd9KLTC6iTjOWAQf+/y7PgEYa3wceoQDF52frHzcO4DSLkS5gqKlH
MsMi1+QWNaBjSAD6QFfoyjmrWR76sUp7AcB+aTUw4YGSCdBAIF6QwtnAP5dBjpgr
Kgm2Bppp63JSGwRL2ktPbx6jrdhqqbfnTukPIHeXoBxAk0FY6jklHFY7KJSix+gA
50B7TkAxQAhRT5PlYwS9/T7GdCerEJAHXgB/IQ0tfjKNq5q16IY54BQETGC5hDc0
/wx73xhQmtKvarZ6f6MME7aN4Wng2sv1zlYtqvEfq3CsW7mmwXGTa2D9/3oQaUxO
Abvf8Z6Vfh44DQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 04:24:18 2026 by rpki-client