Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
File:                     UeFdozln1BRwqW1hQcg0DyJAWBw.mft (raw, json)
Hash identifier:          hni6czNlL/+MpFThFxFoaBE03n7CnYOMPLwbyn6ZLj4=
Subject key identifier:   4D:2D:AD:72:A1:58:57:3B:D5:95:9C:99:BF:B1:D0:4C:C5:8C:44:75
Authority key identifier: 51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C
Certificate issuer:       /CN=51e15da33967d41470a96d6141c8340f2240581c
Certificate serial:       01A130D869B448FABA5CAEE474A5679BE0A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
Manifest number:          1A9E
Signing time:             Mon 12 Oct 2026 16:00:51 +0000
Manifest this update:     Mon 12 Oct 2026 16:00:51 +0000
Manifest next update:     Tue 13 Oct 2026 16:00:51 +0000
Files and hashes:         1: 81cJ_EIt-PStE8ZvP9c7d9zPO5Y.roa (hash: VoEIe6W6A/UJnNjd89XKoAD4I+DEvz9ksYBB+LiWpIU=)
                          2: UeFdozln1BRwqW1hQcg0DyJAWBw.crl (hash: +Vz/BAzbGGWw4xPr5TxiQd94BhWWoR6sr3sR29n3xl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:30:d8:69:b4:48:fa:ba:5c:ae:e4:74:a5:67:9b:e0:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e15da33967d41470a96d6141c8340f2240581c
        Validity
            Not Before: Oct 12 16:00:51 2026 GMT
            Not After : Oct 13 16:00:51 2026 GMT
        Subject: CN=4d2dad72a158573bd5959c99bfb1d04cc58c4475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:13:4e:82:ee:1f:d0:31:6e:f2:4f:fa:ea:fe:
                    8b:55:30:5e:c0:b8:fd:43:e4:f6:56:c9:57:da:df:
                    34:c9:85:5c:eb:85:15:4d:e8:e5:b3:83:58:2d:a4:
                    ce:f7:1a:4d:ce:2d:b3:6d:25:6e:d7:03:76:69:b0:
                    d5:dd:bc:36:27:7f:d3:f6:d3:c7:9c:4b:74:a1:e6:
                    b6:b8:59:fd:29:9b:67:43:07:62:a5:a2:fe:38:51:
                    74:6f:c4:11:66:4b:74:e0:e6:9a:8b:1d:d0:57:29:
                    90:bb:30:57:7e:5b:87:8a:01:fa:6d:a3:4f:08:4f:
                    37:08:11:59:67:61:0d:7d:70:a7:2f:ed:78:c8:9f:
                    4a:47:a4:6d:03:8f:a5:ed:c4:6a:02:35:58:b3:b6:
                    ee:dc:05:3b:75:2b:c5:62:64:0a:2b:94:16:e3:39:
                    71:ab:b3:03:53:55:03:14:64:80:a6:6c:80:75:59:
                    dd:04:d9:ce:ba:c3:85:1f:66:e7:42:10:93:85:0a:
                    af:a7:d5:1b:e7:3d:69:a0:89:a0:39:40:f7:af:48:
                    2c:d0:da:b0:5a:c4:c5:69:4f:26:0b:c7:04:27:e2:
                    0a:0b:fa:11:85:82:37:a2:87:ce:27:55:8a:6b:47:
                    60:1a:8a:98:4c:d6:36:94:b9:cf:dc:2d:3f:e9:c9:
                    0d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2D:AD:72:A1:58:57:3B:D5:95:9C:99:BF:B1:D0:4C:C5:8C:44:75
            X509v3 Authority Key Identifier:
                keyid:51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:25:3e:36:cc:7c:67:62:81:47:7b:d6:3e:19:d1:42:fd:37:
         fc:d0:00:e5:9a:05:82:3c:d4:8c:13:d1:95:b3:f5:47:c4:5a:
         21:52:5c:8d:ae:1d:a1:cb:e6:86:df:3e:76:d8:c8:19:bd:5d:
         67:42:7a:b7:2a:28:88:dd:c9:36:c4:37:b8:e6:aa:87:73:6d:
         9e:34:b3:ad:9d:60:09:c0:19:ca:75:63:73:3d:48:d3:78:4d:
         1f:05:35:9c:66:91:63:d1:c8:a4:41:4d:be:65:aa:12:6c:cb:
         da:3d:a4:85:c0:02:94:48:7e:de:c6:ca:ef:0f:d7:68:44:8c:
         0b:a1:30:34:21:57:73:dc:fa:e9:70:ed:c9:2d:48:73:4f:1b:
         25:53:f2:2e:71:34:61:e6:68:b0:b7:53:47:9f:85:1e:95:bc:
         ef:39:ef:d5:cb:a5:07:64:86:a9:e6:13:9f:a7:a8:6d:02:ac:
         04:cc:ac:9c:17:10:a5:2b:dc:6c:94:6d:00:92:3b:bd:52:d3:
         f0:53:98:44:c1:83:7e:1d:9f:38:2d:f3:a6:1a:58:02:e5:c4:
         38:f0:99:67:95:71:b2:be:0a:2d:5d:f7:09:4f:09:d5:ad:8e:
         ad:16:85:17:43:d3:ab:69:f8:ac:14:43:8f:f8:f0:c7:7b:11:
         7a:3b:c8:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEw2Gm0SPq6XK7kdKVnm+CiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZTE1ZGEzMzk2N2Q0MTQ3MGE5NmQ2MTQxYzgzNDBmMjI0
MDU4MWMwHhcNMjYxMDEyMTYwMDUxWhcNMjYxMDEzMTYwMDUxWjAzMTEwLwYDVQQD
Eyg0ZDJkYWQ3MmExNTg1NzNiZDU5NTljOTliZmIxZDA0Y2M1OGM0NDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthNOgu4f0DFu8k/66v6LVTBewLj9
Q+T2VslX2t80yYVc64UVTejls4NYLaTO9xpNzi2zbSVu1wN2abDV3bw2J3/T9tPH
nEt0oea2uFn9KZtnQwdipaL+OFF0b8QRZkt04Oaaix3QVymQuzBXfluHigH6baNP
CE83CBFZZ2ENfXCnL+14yJ9KR6RtA4+l7cRqAjVYs7bu3AU7dSvFYmQKK5QW4zlx
q7MDU1UDFGSApmyAdVndBNnOusOFH2bnQhCThQqvp9Ub5z1poImgOUD3r0gs0Nqw
WsTFaU8mC8cEJ+IKC/oRhYI3oofOJ1WKa0dgGoqYTNY2lLnP3C0/6ckN2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0trXKhWFc71ZWcmb+x0EzFjER1MB8GA1UdIwQY
MBaAFFHhXaM5Z9QUcKltYUHINA8iQFgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWVGZG96bG4xQlJ3cVcxaFFjZzBEeUpBV0J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yM2Q1YzEtYWM2Ni00NjFmLTkwMGYt
MzgwODg1NzQwZDRhLzEvVWVGZG96bG4xQlJ3cVcxaFFjZzBEeUpBV0J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8yM2Q1YzEtYWM2Ni00NjFmLTkwMGYtMzgwODg1NzQwZDRh
LzEvVWVGZG96bG4xQlJ3cVcxaFFjZzBEeUpBV0J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPCU+Nsx8
Z2KBR3vWPhnRQv03/NAA5ZoFgjzUjBPRlbP1R8RaIVJcja4docvmht8+dtjIGb1d
Z0J6tyooiN3JNsQ3uOaqh3NtnjSzrZ1gCcAZynVjcz1I03hNHwU1nGaRY9HIpEFN
vmWqEmzL2j2khcAClEh+3sbK7w/XaESMC6EwNCFXc9z66XDtyS1Ic08bJVPyLnE0
YeZosLdTR5+FHpW87znv1culB2SGqeYTn6eobQKsBMysnBcQpSvcbJRtAJI7vVLT
8FOYRMGDfh2fOC3zphpYAuXEOPCZZ5Vxsr4KLV33CU8J1a2OrRaFF0PTq2n4rBRD
j/jwx3sRejvI6Q==
-----END CERTIFICATE-----
Generated at Mon Oct 12 23:00:46 2026 by rpki-client