Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft
File:                     u6Nc-KtvPqoq663Z4jc97AiTYl4.mft (raw, json)
Hash identifier:          K3zMJKM+RDlkmqFxFdbgRMYslfKUWvbatZWJMB+mtXs=
Subject key identifier:   B5:29:58:AD:E8:63:62:97:98:E4:3D:21:B6:62:5D:37:F3:1F:D3:F1
Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E
Certificate issuer:       /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
Certificate serial:       01A124D48458F6B941F585BA655CCA7C357F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft
Manifest number:          1867
Signing time:             Sat 10 Oct 2026 08:01:09 +0000
Manifest this update:     Sat 10 Oct 2026 08:01:09 +0000
Manifest next update:     Sun 11 Oct 2026 08:01:09 +0000
Files and hashes:         1: 6-FVvIh1clRo8nkjgoWP54qvMV8.roa (hash: /oB2LffA2NzcHBIdR3PEwr79troIRLkVSCIDgMVWlHw=)
                          2: 6XbZ2xpI7l6Fwo5nUGJ8LcI12BM.roa (hash: oIH5kZRy4QQWIkNsi+TOmhTdqOjqPl4X4VEu5ZY7rrc=)
                          3: 6yY85OHD-46vFhP-wtPZWs3MeCY.roa (hash: hOno4SiXgMirUzFVpAXsEoPlI4QIn/ikV8WWQvXsoXg=)
                          4: 8McrGRfEqcovWnRSpklEmiBGADA.roa (hash: xszqUKxiKaCx1G5C+PDbNWuR86U3w6LgZy01FF25iiY=)
                          5: BooqKG4SsYSQxh6PGW72NBqbtuw.roa (hash: TU0xZxrNhYVeehRBPFf+LnBXvIDYoAVW0L6Hmfayq5M=)
                          6: Dib_4B7-59g2qlFon4U52XelorA.roa (hash: 7rKsJnSr5QX2uVe31jye987BgbcYNd7z/lfjZmUFdDY=)
                          7: J2-fb4bt2CtctBmzmfC8H8k0-Zo.roa (hash: PhWWvX6X2tLUSE0WxzAfwrSrZ7vyehY98guTk5gmtdI=)
                          8: Z8qE5YUzEyCcM3jZOnTg2ZjRVpw.roa (hash: NyJPpR4fRq7MT3qJBWIBVQGhgw+n4Kp/Bk2plkqWG5w=)
                          9: bpUtIFcpj0wFmx0CClP1L0TgIfY.roa (hash: JpwXWXow0nu1gKjNId4RQPrmV9a8gFVj5DrvmpBJ7Ac=)
                          10: dkSZC1vcgEsyqm56yAJmonI1P1E.roa (hash: Wn8sFewfyDAMaX3VNG1l/GCgIijws7/FwmZlH3//5Vk=)
                          11: eH8mEFUxJaD15bIkdrb0eoEm43Q.roa (hash: iVNXmnAd/Aq9qGpFjFCXba0ETiSTvXsmOGBSWpVw4y4=)
                          12: u6Nc-KtvPqoq663Z4jc97AiTYl4.crl (hash: 0ag60s/NL3gG743qjk/NLfetA1GPBsEi1mGBFDBSZOI=)
                          13: vJiRTEd6tTiZDm_JR7rLwIox0zw.roa (hash: IYF63rRulzFNBpbGnH/dDmLviCvKmUvwCJNoi515Gao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 08:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:24:d4:84:58:f6:b9:41:f5:85:ba:65:5c:ca:7c:35:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
        Validity
            Not Before: Oct 10 08:01:09 2026 GMT
            Not After : Oct 11 08:01:09 2026 GMT
        Subject: CN=b52958ade863629798e43d21b6625d37f31fd3f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b1:a6:3b:ee:5e:81:dd:ef:17:60:2f:7d:6b:
                    7c:27:d1:c2:a3:09:d7:3f:56:72:98:67:74:5f:6e:
                    26:8e:c7:36:ab:13:51:7d:69:4e:1b:cb:cb:0b:f0:
                    bb:47:a9:13:52:6f:59:47:74:09:b9:ec:92:f8:18:
                    e2:b0:0c:96:70:78:53:3d:3d:04:7c:3c:32:c5:37:
                    b8:0f:27:95:75:8d:fb:2f:bf:e4:33:a0:55:2a:f9:
                    62:22:74:d4:aa:4e:0a:34:84:68:81:cb:f1:a3:a9:
                    be:96:d3:4e:a8:03:e7:fb:e3:ba:d6:37:51:ff:b1:
                    c3:5b:80:e1:d7:86:85:e3:14:b1:6e:d7:a1:7d:b4:
                    e2:45:67:fa:b9:0f:f6:e6:db:a9:de:1d:b2:a8:33:
                    73:28:06:dc:b3:88:86:e1:0d:e1:93:0e:d7:09:8b:
                    84:66:a3:3c:bb:d8:0c:a2:c9:91:4f:42:18:48:53:
                    79:d1:fa:a0:6b:c1:10:67:f1:f5:23:29:a0:be:a5:
                    1f:ca:be:45:5c:4d:a0:12:1e:6b:fa:26:ba:54:53:
                    68:02:db:d5:48:a3:4d:bf:84:a3:26:a0:47:28:59:
                    52:94:3a:40:5e:a8:8f:f1:fa:62:c5:af:69:e4:2d:
                    90:ef:f3:97:5c:fc:44:cb:3d:ba:d9:e5:c8:9f:6c:
                    06:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:29:58:AD:E8:63:62:97:98:E4:3D:21:B6:62:5D:37:F3:1F:D3:F1
            X509v3 Authority Key Identifier:
                keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:1e:ab:a5:da:b9:57:60:37:60:5f:f5:b9:40:89:5b:e2:db:
         11:c8:f8:86:87:38:70:9a:93:50:50:4b:fd:aa:c7:dd:68:a6:
         b5:45:7f:ad:54:b5:d7:53:f5:e2:70:d9:f8:07:c4:4f:18:76:
         ef:17:ad:c0:5e:e2:30:82:43:0f:07:4a:04:f9:2c:3d:db:3e:
         d3:60:23:0a:4a:1e:f2:f1:02:33:c5:f3:42:a2:08:49:59:c4:
         c8:bd:ef:c5:96:ab:1d:aa:22:0f:46:93:49:b3:46:3e:11:2d:
         7f:dc:91:c4:dc:0f:f5:d1:61:2e:4e:b1:cc:a2:4c:8f:a8:bc:
         39:3b:5e:28:c9:58:d5:7a:62:8e:11:54:ce:b0:0c:91:5f:2f:
         0c:02:38:86:c1:64:7c:6d:a9:af:4b:cc:0a:21:a8:59:3a:ea:
         cd:f7:6f:41:e6:b4:97:fc:c0:a2:50:40:8d:ba:62:7e:03:31:
         a1:14:24:cf:6c:b3:14:3e:dd:48:f0:53:49:d6:ee:aa:41:ae:
         07:a4:e1:dd:d8:46:3a:78:bf:f7:59:59:41:ae:63:76:de:b1:
         27:14:0c:83:88:5d:b1:40:79:84:54:b9:53:e2:05:6d:76:70:
         d6:07:c3:53:56:44:79:7e:38:6b:f0:a8:c3:c8:8d:4f:76:dd:
         cf:eb:2b:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEk1IRY9rlB9YW6ZVzKfDV/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiYTM1Y2Y4YWI2ZjNlYWEyYWViYWRkOWUyMzczZGVjMDg5
MzYyNWUwHhcNMjYxMDEwMDgwMTA5WhcNMjYxMDExMDgwMTA5WjAzMTEwLwYDVQQD
EyhiNTI5NThhZGU4NjM2Mjk3OThlNDNkMjFiNjYyNWQzN2YzMWZkM2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7GmO+5egd3vF2AvfWt8J9HCownX
P1ZymGd0X24mjsc2qxNRfWlOG8vLC/C7R6kTUm9ZR3QJueyS+BjisAyWcHhTPT0E
fDwyxTe4DyeVdY37L7/kM6BVKvliInTUqk4KNIRogcvxo6m+ltNOqAPn++O61jdR
/7HDW4Dh14aF4xSxbtehfbTiRWf6uQ/25tup3h2yqDNzKAbcs4iG4Q3hkw7XCYuE
ZqM8u9gMosmRT0IYSFN50fqga8EQZ/H1IymgvqUfyr5FXE2gEh5r+ia6VFNoAtvV
SKNNv4SjJqBHKFlSlDpAXqiP8fpixa9p5C2Q7/OXXPxEyz262eXIn2wGhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUpWK3oY2KXmOQ9IbZiXTfzH9PxMB8GA1UdIwQY
MBaAFLujXPirbz6qKuut2eI3PewIk2JeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMt
NTk3YjZlMjQ5MmFiLzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMtNTk3YjZlMjQ5MmFi
LzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXh6rpdq5
V2A3YF/1uUCJW+LbEcj4hoc4cJqTUFBL/arH3WimtUV/rVS111P14nDZ+AfETxh2
7xetwF7iMIJDDwdKBPksPds+02AjCkoe8vECM8XzQqIISVnEyL3vxZarHaoiD0aT
SbNGPhEtf9yRxNwP9dFhLk6xzKJMj6i8OTteKMlY1XpijhFUzrAMkV8vDAI4hsFk
fG2pr0vMCiGoWTrqzfdvQea0l/zAolBAjbpifgMxoRQkz2yzFD7dSPBTSdbuqkGu
B6Th3dhGOni/91lZQa5jdt6xJxQMg4hdsUB5hFS5U+IFbXZw1gfDU1ZEeX44a/Co
w8iNT3bdz+srlw==
-----END CERTIFICATE-----
Generated at Sat Oct 10 15:38:09 2026 by rpki-client