Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/4d707e-8f0e-4514-9d48-3a0b91a0bee5/1/UtIFkjNg-Ly7PG8regneiX4hEuk.mft
File:                     UtIFkjNg-Ly7PG8regneiX4hEuk.mft (raw, json)
Hash identifier:          8SEvCX8eUJhZKJG+93Eysdz9WhId8ljXiQDq++kSa5w=
Subject key identifier:   DE:19:93:5D:F3:60:B7:F6:AA:71:9E:E5:10:79:F7:DC:6F:8B:01:B0
Authority key identifier: 52:D2:05:92:33:60:F8:BC:BB:3C:6F:2B:7A:09:DE:89:7E:21:12:E9
Certificate issuer:       /CN=52d205923360f8bcbb3c6f2b7a09de897e2112e9
Certificate serial:       01A18A52E767943D3D95AF5C4DFCB78C4E26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UtIFkjNg-Ly7PG8regneiX4hEuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/4d707e-8f0e-4514-9d48-3a0b91a0bee5/1/UtIFkjNg-Ly7PG8regneiX4hEuk.mft
Manifest number:          A9
Signing time:             Fri 30 Oct 2026 01:00:51 +0000
Manifest this update:     Fri 30 Oct 2026 01:00:51 +0000
Manifest next update:     Sat 31 Oct 2026 01:00:51 +0000
Files and hashes:         1: UtIFkjNg-Ly7PG8regneiX4hEuk.crl (hash: 2xfb6isDMJKWv+p+JETjREZcBvFbIohRmD2jfw2dojU=)
                          2: g6yrvOBeW6EKsF6uPz4qtt_DajI.roa (hash: /eXlPUvaL86WUGYjsxXCQYyeVUT9/VSJoeS28C++a+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/4d707e-8f0e-4514-9d48-3a0b91a0bee5/1/UtIFkjNg-Ly7PG8regneiX4hEuk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/4d707e-8f0e-4514-9d48-3a0b91a0bee5/1/UtIFkjNg-Ly7PG8regneiX4hEuk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UtIFkjNg-Ly7PG8regneiX4hEuk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8a:52:e7:67:94:3d:3d:95:af:5c:4d:fc:b7:8c:4e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52d205923360f8bcbb3c6f2b7a09de897e2112e9
        Validity
            Not Before: Oct 30 01:00:51 2026 GMT
            Not After : Oct 31 01:00:51 2026 GMT
        Subject: CN=de19935df360b7f6aa719ee51079f7dc6f8b01b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c8:14:c8:ec:96:7c:94:81:0a:61:5e:93:e9:
                    c2:9e:85:da:45:07:3b:93:20:7d:e8:36:d6:c5:65:
                    c6:e4:51:ee:7b:c8:78:af:38:27:23:0c:8c:4b:c9:
                    62:a7:5a:ad:a4:11:62:c9:70:3a:2a:34:27:dd:cb:
                    5e:76:0a:2e:44:5f:83:f3:cb:ae:d6:02:52:62:f7:
                    5c:c4:7f:4a:d6:ef:6c:a9:22:f1:6c:13:13:3d:63:
                    11:2e:88:9e:ec:1e:8a:2f:84:0c:6f:98:45:b7:b6:
                    35:df:c0:b1:db:7e:e0:45:2d:74:85:2a:f1:57:3a:
                    9c:f0:66:08:bb:23:66:09:a8:97:75:40:c5:c1:34:
                    94:75:e5:1a:23:77:7f:1d:db:20:53:d6:0c:9d:c7:
                    84:bc:21:58:07:21:38:dc:ef:1a:3a:8a:a4:c1:34:
                    66:47:96:9a:30:f2:f8:cb:5d:d6:b1:9f:bb:1b:d5:
                    ad:04:6f:54:a3:43:2a:ca:8b:29:3f:42:c9:22:f0:
                    88:5b:02:98:26:4d:5f:33:8f:cb:37:81:a1:7f:52:
                    6f:6d:5a:d2:10:c6:0f:6d:53:af:a7:77:8f:ac:85:
                    b2:63:27:c3:95:e3:54:18:c3:b2:54:c8:c2:9a:9f:
                    99:1f:91:68:c4:43:26:22:21:3b:ce:0c:5a:ec:70:
                    ff:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:19:93:5D:F3:60:B7:F6:AA:71:9E:E5:10:79:F7:DC:6F:8B:01:B0
            X509v3 Authority Key Identifier:
                keyid:52:D2:05:92:33:60:F8:BC:BB:3C:6F:2B:7A:09:DE:89:7E:21:12:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtIFkjNg-Ly7PG8regneiX4hEuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4d707e-8f0e-4514-9d48-3a0b91a0bee5/1/UtIFkjNg-Ly7PG8regneiX4hEuk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4d707e-8f0e-4514-9d48-3a0b91a0bee5/1/UtIFkjNg-Ly7PG8regneiX4hEuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:c4:1f:cb:70:b1:73:4a:6e:76:88:25:91:54:20:4a:f1:66:
         ec:7f:b0:24:3e:1f:bf:f8:c3:88:a2:eb:e3:eb:25:32:32:1a:
         13:3d:15:7f:3d:bd:3c:e7:5c:3d:2b:a8:e0:17:de:34:5e:c0:
         58:bb:43:78:2c:ec:3e:8e:95:b5:a4:fa:c1:71:9d:9e:5b:c1:
         9e:2a:50:9d:0f:49:9b:a2:ee:dc:96:4b:1f:0c:a0:da:4c:db:
         f4:d4:30:15:9a:a2:a9:97:e5:76:67:a7:45:5f:ce:ee:48:4c:
         51:c3:cd:57:3e:a4:8f:6b:c2:81:f7:8d:05:65:87:38:ef:83:
         7d:2f:a5:35:d3:bd:de:3f:e5:40:b0:ee:4e:08:97:f4:a3:78:
         42:76:6c:03:64:e1:44:fc:94:5f:e7:34:c4:71:26:7c:0a:e8:
         73:0b:16:44:f4:b4:d4:c4:35:e2:cd:bf:e6:81:32:7c:6e:6f:
         db:f8:41:f7:cc:2b:1f:ba:9a:50:c2:e9:49:bd:39:9c:74:1f:
         db:51:c6:42:af:b9:b9:a5:52:52:60:fc:8d:8f:3b:f8:01:a6:
         40:86:41:2e:9b:44:88:c7:95:ad:60:1e:1e:b8:7a:f0:d1:45:
         b4:bc:95:34:96:c9:6d:d0:4e:20:42:96:57:1c:95:21:bd:da:
         4b:e1:5b:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGKUudnlD09la9cTfy3jE4mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZDIwNTkyMzM2MGY4YmNiYjNjNmYyYjdhMDlkZTg5N2Uy
MTEyZTkwHhcNMjYxMDMwMDEwMDUxWhcNMjYxMDMxMDEwMDUxWjAzMTEwLwYDVQQD
EyhkZTE5OTM1ZGYzNjBiN2Y2YWE3MTllZTUxMDc5ZjdkYzZmOGIwMWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcgUyOyWfJSBCmFek+nCnoXaRQc7
kyB96DbWxWXG5FHue8h4rzgnIwyMS8lip1qtpBFiyXA6KjQn3ctedgouRF+D88uu
1gJSYvdcxH9K1u9sqSLxbBMTPWMRLoie7B6KL4QMb5hFt7Y138Cx237gRS10hSrx
Vzqc8GYIuyNmCaiXdUDFwTSUdeUaI3d/HdsgU9YMnceEvCFYByE43O8aOoqkwTRm
R5aaMPL4y13WsZ+7G9WtBG9Uo0MqyospP0LJIvCIWwKYJk1fM4/LN4Ghf1JvbVrS
EMYPbVOvp3ePrIWyYyfDleNUGMOyVMjCmp+ZH5FoxEMmIiE7zgxa7HD/gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4Zk13zYLf2qnGe5RB599xviwGwMB8GA1UdIwQY
MBaAFFLSBZIzYPi8uzxvK3oJ3ol+IRLpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXRJRmtqTmctTHk3UEc4cmVnbmVpWDRoRXVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS80ZDcwN2UtOGYwZS00NTE0LTlkNDgt
M2EwYjkxYTBiZWU1LzEvVXRJRmtqTmctTHk3UEc4cmVnbmVpWDRoRXVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS80ZDcwN2UtOGYwZS00NTE0LTlkNDgtM2EwYjkxYTBiZWU1
LzEvVXRJRmtqTmctTHk3UEc4cmVnbmVpWDRoRXVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwsQfy3Cx
c0pudoglkVQgSvFm7H+wJD4fv/jDiKLr4+slMjIaEz0Vfz29POdcPSuo4BfeNF7A
WLtDeCzsPo6VtaT6wXGdnlvBnipQnQ9Jm6Lu3JZLHwyg2kzb9NQwFZqiqZfldmen
RV/O7khMUcPNVz6kj2vCgfeNBWWHOO+DfS+lNdO93j/lQLDuTgiX9KN4QnZsA2Th
RPyUX+c0xHEmfArocwsWRPS01MQ14s2/5oEyfG5v2/hB98wrH7qaUMLpSb05nHQf
21HGQq+5uaVSUmD8jY87+AGmQIZBLptEiMeVrWAeHrh68NFFtLyVNJbJbdBOIEKW
VxyVIb3aS+FbEQ==
-----END CERTIFICATE-----
Generated at Fri Oct 30 06:08:17 2026 by rpki-client