Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
File:                     UFBG2nJq75m-uIowyKb67-dSB1M.mft (raw, json)
Hash identifier:          tNpg4iD9mYd1NXXAqtiB5HNlK2rkV2SKUtPojrBA88c=
Subject key identifier:   2C:29:E2:1A:4D:91:78:9E:40:4E:DA:F7:E0:3A:B4:1E:A7:D5:60:1C
Authority key identifier: 50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53
Certificate issuer:       /CN=505046da726aef99beb88a30c8a6faefe7520753
Certificate serial:       01A06F83B8B3BB208253C260BCB7C77C3147
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
Manifest number:          12B8
Signing time:             Sat 05 Sep 2026 03:01:38 +0000
Manifest this update:     Sat 05 Sep 2026 03:01:38 +0000
Manifest next update:     Sun 06 Sep 2026 03:01:38 +0000
Files and hashes:         1: UFBG2nJq75m-uIowyKb67-dSB1M.crl (hash: 8nyMklF+h7RVMHJGgPeaPQ4xfzvkOgetl0Ki+5WQxI0=)
                          2: VrllH5lvxOXiEVVSba8nkT-lWmQ.roa (hash: MptkH7rNuQFXgV7cW16D7ZIxR771HBqFh8JOnOVzIAw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Sep 2026 01:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6f:83:b8:b3:bb:20:82:53:c2:60:bc:b7:c7:7c:31:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505046da726aef99beb88a30c8a6faefe7520753
        Validity
            Not Before: Sep  5 03:01:38 2026 GMT
            Not After : Sep  6 03:01:38 2026 GMT
        Subject: CN=2c29e21a4d91789e404edaf7e03ab41ea7d5601c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ca:ec:5b:d8:54:15:3d:79:a9:1e:31:cf:63:
                    0e:0a:89:ed:4f:a7:41:55:12:7f:2e:24:7c:f3:0d:
                    cc:51:1d:f4:ff:64:55:04:7d:24:ef:6f:f5:8d:6c:
                    65:36:37:ba:7b:ce:5c:ac:0a:6a:2d:df:dd:81:95:
                    f1:36:09:a4:73:f7:fc:e0:70:0a:82:19:fa:85:23:
                    ea:9b:1e:fc:1a:4e:78:f3:91:4b:1b:d3:6d:40:86:
                    30:97:3c:cb:cd:85:90:19:e2:7e:98:4c:32:48:05:
                    c5:7b:65:8b:54:0a:41:e8:6d:b6:8c:50:35:09:81:
                    f7:78:53:ef:fe:7a:1c:a1:a1:b2:23:4b:9b:84:86:
                    88:a7:ef:55:e7:82:ee:cf:45:69:aa:34:60:fb:73:
                    07:f8:a9:1c:88:95:4d:34:87:05:de:09:b0:59:e8:
                    49:b2:a0:3e:75:f3:58:b0:8e:e3:35:a6:38:49:5f:
                    cd:6f:ba:b4:bc:fa:48:68:2a:eb:38:0c:c1:c0:5d:
                    76:63:16:a8:47:5d:e1:89:d1:7e:3c:4d:51:0a:17:
                    4f:f4:86:3b:43:5d:2e:20:d9:1e:bd:f7:72:fa:26:
                    9a:d1:67:e5:ab:32:d1:02:3d:5c:78:bb:37:f5:a1:
                    53:a2:19:08:9a:fe:dc:46:b9:09:b6:8e:0a:7f:43:
                    83:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:29:E2:1A:4D:91:78:9E:40:4E:DA:F7:E0:3A:B4:1E:A7:D5:60:1C
            X509v3 Authority Key Identifier:
                keyid:50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:f4:82:e0:d5:d1:10:91:95:f2:6b:9a:1d:8e:e2:bd:e3:0d:
         d5:37:82:56:e5:87:84:10:c3:9e:49:1e:b2:b3:ee:2f:ac:ad:
         e9:bf:3d:ee:37:0c:33:bb:7c:a3:3b:44:ec:68:0a:ee:87:91:
         ad:c6:a4:62:dd:5e:2b:66:e8:1a:c6:77:cc:24:ec:ee:86:64:
         be:7a:df:06:1f:25:f7:f7:db:69:bd:e2:43:22:c1:6b:dc:f2:
         54:c7:b1:f2:1d:1e:b4:81:10:bd:f8:4d:85:65:ae:48:5c:f9:
         14:6e:17:27:6a:29:09:26:68:a9:e3:bd:31:f7:97:98:55:73:
         d5:fd:59:2e:10:67:df:91:54:f5:e0:bb:ef:0b:25:32:2a:47:
         07:6b:37:c0:94:61:06:1b:f1:81:b1:9d:15:0f:e7:f9:c5:3f:
         4d:b1:ab:1b:65:b8:bf:a5:62:d8:00:fe:24:7c:d3:16:cd:f4:
         e8:67:70:57:06:9d:46:5c:70:1f:da:8a:25:53:c8:db:a0:0d:
         15:9e:df:b2:3c:f2:fd:4b:7f:81:cb:1f:74:ac:f0:f5:ee:ee:
         cf:dc:be:da:29:8b:44:6c:13:31:0b:32:f6:78:91:59:0d:a6:
         4d:66:b4:d0:f4:b5:e1:68:4d:12:c4:bc:2e:55:86:41:47:10:
         08:48:9e:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBvg7izuyCCU8JgvLfHfDFHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTA0NmRhNzI2YWVmOTliZWI4OGEzMGM4YTZmYWVmZTc1
MjA3NTMwHhcNMjYwOTA1MDMwMTM4WhcNMjYwOTA2MDMwMTM4WjAzMTEwLwYDVQQD
EygyYzI5ZTIxYTRkOTE3ODllNDA0ZWRhZjdlMDNhYjQxZWE3ZDU2MDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8rsW9hUFT15qR4xz2MOContT6dB
VRJ/LiR88w3MUR30/2RVBH0k72/1jWxlNje6e85crApqLd/dgZXxNgmkc/f84HAK
ghn6hSPqmx78Gk5485FLG9NtQIYwlzzLzYWQGeJ+mEwySAXFe2WLVApB6G22jFA1
CYH3eFPv/nocoaGyI0ubhIaIp+9V54Luz0VpqjRg+3MH+KkciJVNNIcF3gmwWehJ
sqA+dfNYsI7jNaY4SV/Nb7q0vPpIaCrrOAzBwF12YxaoR13hidF+PE1RChdP9IY7
Q10uINkevfdy+iaa0WflqzLRAj1ceLs39aFTohkImv7cRrkJto4Kf0ODLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwp4hpNkXieQE7a9+A6tB6n1WAcMB8GA1UdIwQY
MBaAFFBQRtpyau+ZvriKMMim+u/nUgdTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZCRzJuSnE3NW0tdUlvd3lLYjY3LWRTQjFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC80N2MyZGEtOWM2OC00ZjZmLTk3OTgt
MjgyZmEyYzAxMTUzLzEvVUZCRzJuSnE3NW0tdUlvd3lLYjY3LWRTQjFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC80N2MyZGEtOWM2OC00ZjZmLTk3OTgtMjgyZmEyYzAxMTUz
LzEvVUZCRzJuSnE3NW0tdUlvd3lLYjY3LWRTQjFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUPSC4NXR
EJGV8muaHY7iveMN1TeCVuWHhBDDnkkesrPuL6yt6b897jcMM7t8oztE7GgK7oeR
rcakYt1eK2boGsZ3zCTs7oZkvnrfBh8l9/fbab3iQyLBa9zyVMex8h0etIEQvfhN
hWWuSFz5FG4XJ2opCSZoqeO9MfeXmFVz1f1ZLhBn35FU9eC77wslMipHB2s3wJRh
BhvxgbGdFQ/n+cU/TbGrG2W4v6Vi2AD+JHzTFs306GdwVwadRlxwH9qKJVPI26AN
FZ7fsjzy/Ut/gcsfdKzw9e7uz9y+2imLRGwTMQsy9niRWQ2mTWa00PS14WhNEsS8
LlWGQUcQCEieWQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 09:32:43 2026 by rpki-client