Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft
File:                     uqSm69s4PhGdaVPHfxaGbnPvLbU.mft (raw, json)
Hash identifier:          kiW5GdmnpjluU1Pay5lb0CBHJbzUC+11N4R+oOnrM3o=
Subject key identifier:   AD:DC:87:F5:BD:EB:74:66:91:20:0B:C5:33:FD:A2:31:87:48:E3:53
Authority key identifier: BA:A4:A6:EB:DB:38:3E:11:9D:69:53:C7:7F:16:86:6E:73:EF:2D:B5
Certificate issuer:       /CN=baa4a6ebdb383e119d6953c77f16866e73ef2db5
Certificate serial:       019F10AE10AE1FC59487C50BEACED536EE02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft
Manifest number:          01D1
Signing time:             Mon 29 Jun 2026 00:01:10 +0000
Manifest this update:     Mon 29 Jun 2026 00:01:10 +0000
Manifest next update:     Tue 30 Jun 2026 00:01:10 +0000
Files and hashes:         1: _YxvUoR5WB4wYKYvopBg6R1wyQY.asa (hash: yHWWVgA+9d+6bFWZAxgVAfp5/UE5nZYg7alMcUo5W/E=)
                          2: uqSm69s4PhGdaVPHfxaGbnPvLbU.crl (hash: WZcUzjyGmTOAOvAlo2TNYykcjVz+oIhkFCxLdFXnywQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:10:ae:10:ae:1f:c5:94:87:c5:0b:ea:ce:d5:36:ee:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baa4a6ebdb383e119d6953c77f16866e73ef2db5
        Validity
            Not Before: Jun 29 00:01:10 2026 GMT
            Not After : Jun 30 00:01:10 2026 GMT
        Subject: CN=addc87f5bdeb746691200bc533fda2318748e353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c4:d5:b0:43:14:42:3b:04:35:97:9f:7c:23:
                    5e:67:a5:e2:b3:d5:9c:03:ac:50:b6:de:d8:50:c4:
                    17:1e:ff:a4:07:4f:98:6a:2d:50:99:2c:fd:53:0d:
                    0d:ed:b6:44:18:2e:85:5f:eb:d2:c4:6f:fa:20:39:
                    b3:6b:12:e8:b9:20:41:da:c0:56:d3:de:3d:65:ce:
                    b8:fb:d2:d7:bd:f8:52:a5:68:01:98:a8:39:d7:25:
                    2f:8a:7a:37:0c:b6:5a:11:99:6f:90:7e:79:38:17:
                    3e:a9:7a:41:c1:50:9a:96:d0:bf:a9:3e:4c:7e:6a:
                    53:18:0a:fa:ae:24:93:c9:72:a2:07:63:de:8a:46:
                    87:1e:d5:1b:42:6a:95:f2:57:17:56:5d:6e:d1:df:
                    86:8f:20:19:c4:c2:36:47:2f:6a:64:d8:f4:0c:5a:
                    71:88:ca:69:ed:c2:71:43:c3:eb:f0:07:7b:b2:12:
                    72:ef:b3:90:18:da:ea:9d:6d:d6:80:6c:57:26:e7:
                    a5:0e:08:c4:90:f9:02:1c:83:18:ca:c9:86:81:6d:
                    17:81:8c:be:d6:93:c9:38:5c:cd:1e:72:a7:03:0a:
                    c9:32:ed:7f:7a:04:c9:ef:e5:98:60:f1:9b:72:f7:
                    f7:9c:c8:8f:b2:af:9b:50:9d:32:0f:05:6f:02:c4:
                    af:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:DC:87:F5:BD:EB:74:66:91:20:0B:C5:33:FD:A2:31:87:48:E3:53
            X509v3 Authority Key Identifier:
                keyid:BA:A4:A6:EB:DB:38:3E:11:9D:69:53:C7:7F:16:86:6E:73:EF:2D:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:24:9b:cf:58:bf:fd:58:c5:ad:5c:dd:77:0f:1f:2e:1d:f9:
         ae:2c:2e:e2:d7:22:fa:2b:27:85:6a:1f:14:6a:55:30:4c:7d:
         b0:02:28:72:ca:74:7c:1e:f1:b4:87:b3:0e:b5:e2:2a:f7:3d:
         ad:4d:09:26:bd:53:bc:7b:56:09:a1:49:6c:7b:dc:d3:25:63:
         73:24:92:34:d2:0f:34:fd:e0:15:86:c9:01:62:43:af:ae:79:
         85:00:31:76:27:94:18:d7:dd:ed:24:2d:28:40:a9:29:8d:3c:
         45:54:80:74:0e:33:20:17:e2:90:56:dd:f6:5e:42:47:5c:2c:
         ec:a0:45:f5:0a:77:27:77:53:b2:30:10:a7:68:ce:f3:51:ca:
         50:50:56:32:e2:73:3c:ae:c8:4f:ba:fb:61:a5:27:4c:87:2b:
         58:7a:ae:1e:3f:c3:89:00:f7:c9:4b:39:16:55:06:3a:19:92:
         24:57:89:1d:06:72:93:e4:19:70:e5:af:cd:be:1d:80:31:ce:
         5a:08:55:44:b3:0f:b6:99:4f:47:f6:4d:4e:95:36:bc:65:23:
         6f:18:bb:d8:bb:f0:37:5d:0d:a6:52:ce:20:b8:b1:51:c4:37:
         74:6a:e6:6f:68:d6:c5:33:88:d1:66:c9:6e:61:03:97:73:ed:
         f1:e9:c6:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8QrhCuH8WUh8UL6s7VNu4CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYTRhNmViZGIzODNlMTE5ZDY5NTNjNzdmMTY4NjZlNzNl
ZjJkYjUwHhcNMjYwNjI5MDAwMTEwWhcNMjYwNjMwMDAwMTEwWjAzMTEwLwYDVQQD
EyhhZGRjODdmNWJkZWI3NDY2OTEyMDBiYzUzM2ZkYTIzMTg3NDhlMzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMTVsEMUQjsENZeffCNeZ6Xis9Wc
A6xQtt7YUMQXHv+kB0+Yai1QmSz9Uw0N7bZEGC6FX+vSxG/6IDmzaxLouSBB2sBW
0949Zc64+9LXvfhSpWgBmKg51yUvino3DLZaEZlvkH55OBc+qXpBwVCaltC/qT5M
fmpTGAr6riSTyXKiB2PeikaHHtUbQmqV8lcXVl1u0d+GjyAZxMI2Ry9qZNj0DFpx
iMpp7cJxQ8Pr8Ad7shJy77OQGNrqnW3WgGxXJuelDgjEkPkCHIMYysmGgW0XgYy+
1pPJOFzNHnKnAwrJMu1/egTJ7+WYYPGbcvf3nMiPsq+bUJ0yDwVvAsSvhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3ch/W963RmkSALxTP9ojGHSONTMB8GA1UdIwQY
MBaAFLqkpuvbOD4RnWlTx38Whm5z7y21MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXFTbTY5czRQaEdkYVZQSGZ4YUdiblB2TGJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84ZGFhMjktYzg1Ny00MGMyLWI5N2Et
ODM5YWQ3ZDA5M2VkLzEvdXFTbTY5czRQaEdkYVZQSGZ4YUdiblB2TGJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS84ZGFhMjktYzg1Ny00MGMyLWI5N2EtODM5YWQ3ZDA5M2Vk
LzEvdXFTbTY5czRQaEdkYVZQSGZ4YUdiblB2TGJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAriSbz1i/
/VjFrVzddw8fLh35riwu4tci+isnhWofFGpVMEx9sAIocsp0fB7xtIezDrXiKvc9
rU0JJr1TvHtWCaFJbHvc0yVjcySSNNIPNP3gFYbJAWJDr655hQAxdieUGNfd7SQt
KECpKY08RVSAdA4zIBfikFbd9l5CR1ws7KBF9Qp3J3dTsjAQp2jO81HKUFBWMuJz
PK7IT7r7YaUnTIcrWHquHj/DiQD3yUs5FlUGOhmSJFeJHQZyk+QZcOWvzb4dgDHO
WghVRLMPtplPR/ZNTpU2vGUjbxi72LvwN10NplLOILixUcQ3dGrmb2jWxTOI0WbJ
bmEDl3Pt8enGzA==
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:38:18 2026 by rpki-client