Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
File:                     UjhuUgR45iW-HWKC0hawWRL4OHQ.mft (raw, json)
Hash identifier:          BfhIkhGIhLpyp3+C1XEWEvZaNc0zZLE+tHs4w5ljU6o=
Subject key identifier:   8B:CA:E8:39:81:D4:BC:2D:66:C5:71:38:82:72:E8:C8:3A:35:F7:CB
Authority key identifier: 52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74
Certificate issuer:       /CN=52386e520478e625be1d6282d216b05912f83874
Certificate serial:       01A18BD3CF8E1A1BC1258CB06B9B3EBB1BDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
Manifest number:          1597
Signing time:             Fri 30 Oct 2026 08:01:16 +0000
Manifest this update:     Fri 30 Oct 2026 08:01:16 +0000
Manifest next update:     Sat 31 Oct 2026 08:01:16 +0000
Files and hashes:         1: UjhuUgR45iW-HWKC0hawWRL4OHQ.crl (hash: yo94uA6lS0ixlTRFzn3JiAznNEYdZFvUTCxcmo8gcU8=)
                          2: ldVLo-eNAW-W-3vclMcqBGxufHM.roa (hash: 3oSvQLb4YGLMfy8gAiD/iZGExJiz2TXf3tCjeUQNbTM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 08:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8b:d3:cf:8e:1a:1b:c1:25:8c:b0:6b:9b:3e:bb:1b:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52386e520478e625be1d6282d216b05912f83874
        Validity
            Not Before: Oct 30 08:01:16 2026 GMT
            Not After : Oct 31 08:01:16 2026 GMT
        Subject: CN=8bcae83981d4bc2d66c571388272e8c83a35f7cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f2:09:29:a6:14:76:b6:67:a0:25:55:dc:a4:
                    86:76:83:a0:dd:f3:10:9b:7a:08:a5:77:17:70:77:
                    4c:40:25:d0:aa:73:f7:05:67:c8:db:b2:68:d6:4c:
                    1b:77:60:89:b0:ad:30:57:a9:d6:ce:82:39:da:a8:
                    d2:3a:45:1f:40:16:94:79:da:1b:51:52:70:75:a9:
                    d2:cb:85:2f:ad:98:23:37:56:a7:e9:1b:39:ff:f6:
                    8a:8b:ec:e2:5b:6f:de:77:5b:54:e1:da:a6:3c:3b:
                    45:33:b7:5b:72:f6:d6:71:1e:05:ca:45:b7:3b:cf:
                    6d:cf:d2:77:83:ce:3c:4d:eb:a2:35:11:81:9e:e4:
                    33:f3:b1:18:84:7c:cc:51:d5:e9:1f:62:86:93:e3:
                    cb:46:52:03:bc:72:39:17:1d:01:4f:a2:6e:08:7e:
                    cd:c0:82:91:cf:68:9a:ef:4f:e0:b4:e7:09:33:a0:
                    5f:06:08:45:34:65:9e:52:ea:1c:04:b4:2f:82:32:
                    32:f3:9c:90:c6:84:36:e2:f4:1e:8d:88:3b:f7:79:
                    e1:b3:c7:82:9b:d1:61:57:df:ba:46:d2:fb:cc:c0:
                    5c:c6:ac:c8:2b:d2:89:ff:36:37:96:05:e3:b5:de:
                    42:f4:42:26:75:b7:17:2b:01:40:21:a5:48:02:e0:
                    33:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CA:E8:39:81:D4:BC:2D:66:C5:71:38:82:72:E8:C8:3A:35:F7:CB
            X509v3 Authority Key Identifier:
                keyid:52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:aa:df:36:72:05:32:cf:a3:ab:74:1e:1c:25:29:0e:a5:74:
         3c:7a:70:a8:16:8f:fe:6d:10:1a:a9:fc:6e:ac:f7:a7:66:ae:
         ea:67:1c:50:9e:7e:36:0f:52:49:58:a4:76:ae:59:4a:23:c8:
         fd:ef:21:01:9d:ba:ed:83:16:62:76:36:b0:a2:4f:78:50:2e:
         32:3f:a8:0e:fd:af:f6:d4:a4:e5:03:67:b6:5e:16:35:76:30:
         3c:99:90:f7:e6:e3:6c:3f:d3:6d:80:2a:97:35:09:94:14:ca:
         2d:aa:c0:07:93:dd:87:51:a1:5b:91:14:2a:0d:29:97:b1:ca:
         fd:7a:ca:cc:10:91:b7:08:db:53:9a:e9:18:8e:ff:ea:78:59:
         6a:34:7c:2c:9b:f4:a5:e4:b2:12:6d:2d:5f:b3:56:fb:77:f1:
         79:a9:d5:de:9a:3a:95:d5:93:1a:3a:25:f9:ba:df:81:10:ca:
         1e:6e:7c:ec:1e:72:8c:54:bf:55:24:89:e7:05:3f:5c:d1:da:
         80:a5:28:23:26:f3:fc:5f:aa:bd:41:fc:84:7f:74:fa:fe:33:
         9c:44:c2:2b:b8:76:cd:f9:f3:8b:d5:d6:74:4d:2d:5d:fb:80:
         f7:9e:11:dd:0b:26:d1:24:a1:86:9a:4b:59:57:2d:70:c3:cb:
         3b:27:ff:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGL08+OGhvBJYywa5s+uxvaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMzg2ZTUyMDQ3OGU2MjViZTFkNjI4MmQyMTZiMDU5MTJm
ODM4NzQwHhcNMjYxMDMwMDgwMTE2WhcNMjYxMDMxMDgwMTE2WjAzMTEwLwYDVQQD
Eyg4YmNhZTgzOTgxZDRiYzJkNjZjNTcxMzg4MjcyZThjODNhMzVmN2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPIJKaYUdrZnoCVV3KSGdoOg3fMQ
m3oIpXcXcHdMQCXQqnP3BWfI27Jo1kwbd2CJsK0wV6nWzoI52qjSOkUfQBaUedob
UVJwdanSy4UvrZgjN1an6Rs5//aKi+ziW2/ed1tU4dqmPDtFM7dbcvbWcR4FykW3
O89tz9J3g848TeuiNRGBnuQz87EYhHzMUdXpH2KGk+PLRlIDvHI5Fx0BT6JuCH7N
wIKRz2ia70/gtOcJM6BfBghFNGWeUuocBLQvgjIy85yQxoQ24vQejYg793nhs8eC
m9FhV9+6RtL7zMBcxqzIK9KJ/zY3lgXjtd5C9EImdbcXKwFAIaVIAuAzcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvK6DmB1LwtZsVxOIJy6Mg6NffLMB8GA1UdIwQY
MBaAFFI4blIEeOYlvh1igtIWsFkS+Dh0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWpodVVnUjQ1aVctSFdLQzBoYXdXUkw0T0hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9kNDUxOTMtYjVmZS00ZTFkLThlNDIt
YWU1ZGI2ZTE0ODZkLzEvVWpodVVnUjQ1aVctSFdLQzBoYXdXUkw0T0hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9kNDUxOTMtYjVmZS00ZTFkLThlNDItYWU1ZGI2ZTE0ODZk
LzEvVWpodVVnUjQ1aVctSFdLQzBoYXdXUkw0T0hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlqrfNnIF
Ms+jq3QeHCUpDqV0PHpwqBaP/m0QGqn8bqz3p2au6mccUJ5+Ng9SSVikdq5ZSiPI
/e8hAZ267YMWYnY2sKJPeFAuMj+oDv2v9tSk5QNntl4WNXYwPJmQ9+bjbD/TbYAq
lzUJlBTKLarAB5Pdh1GhW5EUKg0pl7HK/XrKzBCRtwjbU5rpGI7/6nhZajR8LJv0
peSyEm0tX7NW+3fxeanV3po6ldWTGjol+brfgRDKHm587B5yjFS/VSSJ5wU/XNHa
gKUoIybz/F+qvUH8hH90+v4znETCK7h2zfnzi9XWdE0tXfuA954R3Qsm0SShhppL
WVctcMPLOyf/+A==
-----END CERTIFICATE-----
Generated at Fri Oct 30 17:18:31 2026 by rpki-client