Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.mft
File:                     uetMLe4ILeo7gNjvslpGhlcIy7Q.mft (raw, json)
Hash identifier:          OGOilx1udOI7Ths6tTCSt75pUkQafMEL3rQkm8HkJN4=
Subject key identifier:   E8:3F:45:10:A1:67:61:1E:B1:48:19:BD:41:CA:03:94:F2:BF:E3:10
Authority key identifier: B9:EB:4C:2D:EE:08:2D:EA:3B:80:D8:EF:B2:5A:46:86:57:08:CB:B4
Certificate issuer:       /CN=b9eb4c2dee082dea3b80d8efb25a46865708cbb4
Certificate serial:       019FAC7616E9BD7D080AE39C2CD733AD014E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uetMLe4ILeo7gNjvslpGhlcIy7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.mft
Manifest number:          125A
Signing time:             Wed 29 Jul 2026 06:00:47 +0000
Manifest this update:     Wed 29 Jul 2026 06:00:47 +0000
Manifest next update:     Thu 30 Jul 2026 06:00:47 +0000
Files and hashes:         1: YrOiyXQBvFt-emPhJBkIUx-kXzY.roa (hash: gDdOxaSqMhs+DnQoSQE1kiV7IppRkHiklEiaQCzF0J8=)
                          2: uetMLe4ILeo7gNjvslpGhlcIy7Q.crl (hash: IUvGXOfxeUVL1J3nesi7rrGWmFe8cIr1xYixop9FLlc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uetMLe4ILeo7gNjvslpGhlcIy7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:16:e9:bd:7d:08:0a:e3:9c:2c:d7:33:ad:01:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9eb4c2dee082dea3b80d8efb25a46865708cbb4
        Validity
            Not Before: Jul 29 06:00:47 2026 GMT
            Not After : Jul 30 06:00:47 2026 GMT
        Subject: CN=e83f4510a167611eb14819bd41ca0394f2bfe310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:21:9d:1a:3a:f2:3f:fa:13:37:86:a0:30:7b:
                    d0:0b:a2:46:be:fb:db:33:57:a1:d0:1f:27:ca:00:
                    37:25:7e:82:3d:a0:ef:2f:87:71:c2:34:3e:55:db:
                    d5:b0:ae:df:0e:93:52:df:81:59:3f:07:1a:85:cf:
                    99:f0:69:ac:fd:64:1a:ec:13:c9:39:8a:7b:3d:65:
                    27:72:ed:ee:b8:98:4f:c3:a2:c1:37:9c:7d:47:86:
                    5e:af:64:e0:87:65:66:e8:b4:93:61:73:86:b5:d5:
                    7f:55:40:42:bd:09:15:88:63:8a:28:0f:7a:e0:cb:
                    a5:6e:10:86:ec:a4:24:15:04:0d:5a:af:5d:74:74:
                    07:42:19:a5:9a:71:4f:38:ff:c9:b4:0c:01:39:fc:
                    ed:54:e0:d8:8d:4c:af:44:5b:31:49:43:d3:55:b7:
                    74:94:bb:6f:72:70:01:2e:76:f3:87:d2:e2:10:fe:
                    9f:4e:2b:44:0e:5d:c2:01:b0:93:fd:8d:f3:aa:65:
                    a6:69:19:ac:5a:f2:0c:17:ca:ba:45:cd:7a:ce:17:
                    00:68:23:8d:fe:a2:a9:d8:19:83:68:cf:8f:68:55:
                    29:1a:34:e1:d5:9d:d6:c6:3c:1d:57:e4:7b:d4:2f:
                    c4:6c:00:49:52:b0:f3:3d:0e:b0:51:32:4f:0e:ad:
                    d6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3F:45:10:A1:67:61:1E:B1:48:19:BD:41:CA:03:94:F2:BF:E3:10
            X509v3 Authority Key Identifier:
                keyid:B9:EB:4C:2D:EE:08:2D:EA:3B:80:D8:EF:B2:5A:46:86:57:08:CB:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uetMLe4ILeo7gNjvslpGhlcIy7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:12:2f:c7:54:32:ff:27:37:75:62:b4:00:cd:55:f9:ed:a2:
         7e:f8:a7:b7:55:d0:d6:df:44:02:ce:d9:48:78:9b:69:bc:5c:
         b8:72:1e:82:07:62:ec:18:81:a9:4f:f6:ef:56:13:ec:ef:28:
         f0:d7:c7:c9:09:70:03:e3:e9:b2:01:6b:44:2b:7e:2e:9a:1d:
         76:e8:33:82:dd:94:3b:d3:2d:14:da:e3:be:41:42:41:53:03:
         a7:06:81:b1:bb:fb:8c:bb:b4:57:73:8d:05:bb:69:67:88:19:
         a3:1c:75:a8:73:eb:91:8a:cf:aa:50:5c:7f:b2:82:b3:a8:e5:
         a4:ab:67:37:09:73:a0:57:ac:fd:0d:a0:ca:65:ae:67:70:cf:
         91:41:bc:77:67:86:e6:9a:20:04:fa:a2:ef:0f:8b:47:2f:a8:
         33:d6:56:07:82:ef:7a:2a:e1:db:a5:d3:7b:7c:2f:f2:33:47:
         51:53:05:f1:4a:d1:8e:9d:a8:e1:48:2f:7d:3f:2d:3d:77:9b:
         62:ac:c6:e3:51:03:68:35:a7:72:9e:2d:50:f6:47:6f:ef:18:
         4b:2d:88:07:a5:39:c7:c9:05:56:50:31:fb:99:3a:f0:84:40:
         08:58:6b:53:b9:2f:03:9a:4a:e7:28:d6:d6:c9:1a:ea:8c:db:
         b9:5e:45:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdhbpvX0ICuOcLNczrQFOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZWI0YzJkZWUwODJkZWEzYjgwZDhlZmIyNWE0Njg2NTcw
OGNiYjQwHhcNMjYwNzI5MDYwMDQ3WhcNMjYwNzMwMDYwMDQ3WjAzMTEwLwYDVQQD
EyhlODNmNDUxMGExNjc2MTFlYjE0ODE5YmQ0MWNhMDM5NGYyYmZlMzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCGdGjryP/oTN4agMHvQC6JGvvvb
M1eh0B8nygA3JX6CPaDvL4dxwjQ+VdvVsK7fDpNS34FZPwcahc+Z8Gms/WQa7BPJ
OYp7PWUncu3uuJhPw6LBN5x9R4Zer2Tgh2Vm6LSTYXOGtdV/VUBCvQkViGOKKA96
4MulbhCG7KQkFQQNWq9ddHQHQhmlmnFPOP/JtAwBOfztVODYjUyvRFsxSUPTVbd0
lLtvcnABLnbzh9LiEP6fTitEDl3CAbCT/Y3zqmWmaRmsWvIMF8q6Rc16zhcAaCON
/qKp2BmDaM+PaFUpGjTh1Z3WxjwdV+R71C/EbABJUrDzPQ6wUTJPDq3W2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOg/RRChZ2EesUgZvUHKA5Tyv+MQMB8GA1UdIwQY
MBaAFLnrTC3uCC3qO4DY77JaRoZXCMu0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWV0TUxlNElMZW83Z05qdnNscEdobGNJeTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82ZTYxNjctNjQ5Yi00ZjM5LWIzOWEt
ZTY3NjdhZDVmNWU3LzEvdWV0TUxlNElMZW83Z05qdnNscEdobGNJeTdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82ZTYxNjctNjQ5Yi00ZjM5LWIzOWEtZTY3NjdhZDVmNWU3
LzEvdWV0TUxlNElMZW83Z05qdnNscEdobGNJeTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfBIvx1Qy
/yc3dWK0AM1V+e2ifvint1XQ1t9EAs7ZSHibabxcuHIeggdi7BiBqU/271YT7O8o
8NfHyQlwA+PpsgFrRCt+Lpoddugzgt2UO9MtFNrjvkFCQVMDpwaBsbv7jLu0V3ON
BbtpZ4gZoxx1qHPrkYrPqlBcf7KCs6jlpKtnNwlzoFes/Q2gymWuZ3DPkUG8d2eG
5pogBPqi7w+LRy+oM9ZWB4Lveirh26XTe3wv8jNHUVMF8UrRjp2o4UgvfT8tPXeb
YqzG41EDaDWncp4tUPZHb+8YSy2IB6U5x8kFVlAx+5k68IRACFhrU7kvA5pK5yjW
1ska6ozbuV5FmQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:10:25 2026 by rpki-client