Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
File:                     UiezboKeTYVl7WV0jhsck8zQDO4.mft (raw, json)
Hash identifier:          0eR2tFhZpMesbEkL4TjWktPPzal9sXZr6OLJt4ZWgQA=
Subject key identifier:   A0:2A:09:79:A2:61:D5:73:EC:86:86:ED:1C:C5:F6:6C:7A:67:93:47
Authority key identifier: 52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE
Certificate issuer:       /CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee
Certificate serial:       019F1A5672503B9A7BC45ABDBF639311AE73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
Manifest number:          139C
Signing time:             Tue 30 Jun 2026 21:01:40 +0000
Manifest this update:     Tue 30 Jun 2026 21:01:40 +0000
Manifest next update:     Wed 01 Jul 2026 21:01:40 +0000
Files and hashes:         1: P5QGU51MBWbq811ui2M903jDzeM.roa (hash: cl6QRl57KjA79TtkotpuwrlWUT5toZEw0rnOBUVQkL8=)
                          2: UiezboKeTYVl7WV0jhsck8zQDO4.crl (hash: 76cflTetpyU8l3GjydWCVk72BDfENbD7WLqBINusJmI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1a:56:72:50:3b:9a:7b:c4:5a:bd:bf:63:93:11:ae:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee
        Validity
            Not Before: Jun 30 21:01:40 2026 GMT
            Not After : Jul  1 21:01:40 2026 GMT
        Subject: CN=a02a0979a261d573ec8686ed1cc5f66c7a679347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:5e:bf:81:a6:01:46:9d:34:ab:6f:ba:51:1e:
                    ec:f3:2a:cb:de:63:64:52:31:f5:4c:30:40:82:bf:
                    11:59:1a:40:9f:20:a2:d5:e5:fa:e6:55:f3:cb:c3:
                    85:82:8a:de:36:93:39:c4:d3:90:ed:88:be:c5:f1:
                    a4:ea:43:a1:97:0e:e8:0c:1a:81:cf:45:57:8b:77:
                    75:56:3e:5b:da:1a:56:e6:a4:86:bf:61:ec:52:d7:
                    53:db:82:00:53:18:d2:f8:cf:eb:94:11:89:f5:08:
                    dd:2a:5f:fb:45:5e:93:10:07:c4:10:a3:3a:64:32:
                    e7:9f:29:f1:a9:a0:8c:ed:f6:68:b3:e2:60:af:81:
                    38:48:4c:4a:d7:3f:87:ac:8f:a0:41:03:64:05:7f:
                    69:16:9b:26:6f:f4:4c:c5:45:56:fe:20:2a:10:52:
                    b1:f8:25:0a:d5:bb:12:cf:89:43:08:48:6f:a8:ce:
                    46:05:15:67:f4:d8:5d:97:83:ad:49:97:b7:e5:0b:
                    b2:8b:64:05:b0:63:b7:38:cd:89:1d:91:fb:95:73:
                    3e:7a:40:a1:16:4a:f8:52:9b:69:7e:e9:13:67:11:
                    ee:f5:95:e1:7d:75:5d:3f:0e:f6:7f:1c:97:a9:34:
                    03:5e:09:5f:6a:44:b7:e2:8e:c2:07:1d:1c:08:50:
                    f3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:2A:09:79:A2:61:D5:73:EC:86:86:ED:1C:C5:F6:6C:7A:67:93:47
            X509v3 Authority Key Identifier:
                keyid:52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:12:51:0c:c8:47:f4:13:22:f4:8d:91:12:ac:be:43:ec:32:
         8d:35:df:65:dd:9e:99:87:f4:a0:36:46:93:c8:44:d7:16:ef:
         2e:e2:61:f1:f5:35:bb:0d:92:7b:38:71:a0:c5:1f:ce:5a:a9:
         03:c4:21:70:11:e1:bf:0c:c6:9f:1b:54:a1:dc:5c:d2:6e:e1:
         b7:3a:2b:ed:4e:a0:44:02:85:97:3a:ef:4b:e7:b2:8d:84:77:
         fd:1a:7b:f3:64:9d:ed:0a:9f:56:8e:f7:0c:16:c9:b8:d8:b6:
         c1:a1:fa:06:6c:6b:6c:08:b5:2e:f8:6c:6d:e6:84:20:d7:74:
         d6:3f:76:fd:3c:43:4d:d1:99:e3:5b:20:e4:78:16:08:82:ee:
         07:d3:2d:bf:26:ae:7d:0e:a1:28:1c:2f:0a:72:6f:98:f2:08:
         95:0b:14:95:33:b4:9f:0e:94:84:1f:fb:d1:d8:c7:4b:b0:fd:
         0d:a4:e2:5d:6f:4f:2a:d2:57:55:8a:62:5f:bd:37:30:73:02:
         7f:74:22:9c:b9:9e:e2:59:48:ab:bd:63:ce:70:88:c0:cb:a5:
         38:e4:61:a2:12:eb:3c:af:db:3b:6b:fb:c4:d7:c9:80:81:bb:
         31:d8:65:5c:95:92:f1:d8:a4:f3:94:9d:1c:cb:42:aa:67:4d:
         ea:02:38:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8aVnJQO5p7xFq9v2OTEa5zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMjdiMzZlODI5ZTRkODU2NWVkNjU3NDhlMWIxYzkzY2Nk
MDBjZWUwHhcNMjYwNjMwMjEwMTQwWhcNMjYwNzAxMjEwMTQwWjAzMTEwLwYDVQQD
EyhhMDJhMDk3OWEyNjFkNTczZWM4Njg2ZWQxY2M1ZjY2YzdhNjc5MzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6l6/gaYBRp00q2+6UR7s8yrL3mNk
UjH1TDBAgr8RWRpAnyCi1eX65lXzy8OFgoreNpM5xNOQ7Yi+xfGk6kOhlw7oDBqB
z0VXi3d1Vj5b2hpW5qSGv2HsUtdT24IAUxjS+M/rlBGJ9QjdKl/7RV6TEAfEEKM6
ZDLnnynxqaCM7fZos+Jgr4E4SExK1z+HrI+gQQNkBX9pFpsmb/RMxUVW/iAqEFKx
+CUK1bsSz4lDCEhvqM5GBRVn9Nhdl4OtSZe35Quyi2QFsGO3OM2JHZH7lXM+ekCh
Fkr4UptpfukTZxHu9ZXhfXVdPw72fxyXqTQDXglfakS34o7CBx0cCFDz3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKAqCXmiYdVz7IaG7RzF9mx6Z5NHMB8GA1UdIwQY
MBaAFFIns26Cnk2FZe1ldI4bHJPM0AzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWllemJvS2VUWVZsN1dWMGpoc2NrOHpRRE80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9hN2FlMTEtMTIxYS00ZjIyLWJlM2Yt
ZTkwN2FmMDdmZjExLzEvVWllemJvS2VUWVZsN1dWMGpoc2NrOHpRRE80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9hN2FlMTEtMTIxYS00ZjIyLWJlM2YtZTkwN2FmMDdmZjEx
LzEvVWllemJvS2VUWVZsN1dWMGpoc2NrOHpRRE80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAihJRDMhH
9BMi9I2REqy+Q+wyjTXfZd2emYf0oDZGk8hE1xbvLuJh8fU1uw2SezhxoMUfzlqp
A8QhcBHhvwzGnxtUodxc0m7htzor7U6gRAKFlzrvS+eyjYR3/Rp782Sd7QqfVo73
DBbJuNi2waH6BmxrbAi1LvhsbeaEINd01j92/TxDTdGZ41sg5HgWCILuB9Mtvyau
fQ6hKBwvCnJvmPIIlQsUlTO0nw6UhB/70djHS7D9DaTiXW9PKtJXVYpiX703MHMC
f3QinLme4llIq71jznCIwMulOORhohLrPK/bO2v7xNfJgIG7MdhlXJWS8dik85Sd
HMtCqmdN6gI4yg==
-----END CERTIFICATE-----
Generated at Tue Jun 30 22:41:31 2026 by rpki-client