Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/1-uVkXZvEmKXdjb7pPxd8AvmmEmo.mft
File:                     1-uVkXZvEmKXdjb7pPxd8AvmmEmo.mft (raw, json)
Hash identifier:          HP0nRbRcRjm77qIJyBhv4sWJZpUsv/48XAj4+X0HR/g=
Subject key identifier:   89:EC:10:9B:07:46:14:7E:CB:A5:E1:61:B1:ED:C1:1F:21:5F:BF:2E
Authority key identifier: FA:E5:64:5D:9B:C4:98:A5:DD:8D:BE:E9:3F:17:7C:02:F9:A6:12:6A
Certificate issuer:       /CN=fae5645d9bc498a5dd8dbee93f177c02f9a6126a
Certificate serial:       01A0BCC311F760CA62CCDDFBA519FEEF1017
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uVkXZvEmKXdjb7pPxd8AvmmEmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/1-uVkXZvEmKXdjb7pPxd8AvmmEmo.mft
Manifest number:          DB
Signing time:             Sun 20 Sep 2026 03:01:35 +0000
Manifest this update:     Sun 20 Sep 2026 03:01:35 +0000
Manifest next update:     Mon 21 Sep 2026 03:01:35 +0000
Files and hashes:         1: 1-uVkXZvEmKXdjb7pPxd8AvmmEmo.crl (hash: VPV05mrKss7yETXqpWLCDv91ZUWl3/gCrJGacn8m3Qk=)
                          2: uwzxrH7NIE-q1j_lxiuYaoOWd50.asa (hash: tiF0BpVFfc++mp+oDIIX0YXSnNLzkExC3lldvN2c2+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/1-uVkXZvEmKXdjb7pPxd8AvmmEmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/1-uVkXZvEmKXdjb7pPxd8AvmmEmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-uVkXZvEmKXdjb7pPxd8AvmmEmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 03:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bc:c3:11:f7:60:ca:62:cc:dd:fb:a5:19:fe:ef:10:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae5645d9bc498a5dd8dbee93f177c02f9a6126a
        Validity
            Not Before: Sep 20 03:01:35 2026 GMT
            Not After : Sep 21 03:01:35 2026 GMT
        Subject: CN=89ec109b0746147ecba5e161b1edc11f215fbf2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a1:bc:94:de:6b:42:ef:76:64:9d:26:87:58:
                    aa:8f:e4:f7:2f:60:42:bf:24:72:2d:11:7f:67:59:
                    bc:35:92:21:dc:da:92:55:ae:16:5a:ae:f5:38:5a:
                    df:d0:7c:b6:42:90:56:bf:e2:ac:64:54:43:d0:dd:
                    0c:76:52:71:30:b6:fd:e6:58:2d:b3:93:df:0f:7d:
                    b1:6c:28:4e:50:fe:d1:4a:22:7e:25:aa:3a:85:a0:
                    c6:9c:12:88:e0:83:51:e1:42:92:d2:15:2f:f7:62:
                    df:5a:c2:06:b0:2c:d7:f4:90:f4:e0:4c:8b:12:0d:
                    bd:d8:d5:31:04:7a:38:6a:f1:a4:ac:24:4f:ad:6e:
                    c6:68:e3:ec:a6:08:2a:c8:79:67:f3:30:0a:7c:3d:
                    82:ad:4b:7d:4b:09:ca:33:ca:13:da:49:7e:a7:4c:
                    89:1d:fc:5e:b6:fb:6c:35:de:cf:02:78:5c:d9:8c:
                    58:28:ad:2a:a9:7b:88:af:59:89:e8:68:30:3f:9b:
                    eb:17:f9:50:2c:a6:0b:e5:e6:e9:4d:b1:cd:43:9b:
                    fb:3c:bc:98:a4:c0:6e:0a:eb:8e:2a:54:83:01:b5:
                    ef:2c:3a:c7:5d:c7:9e:9d:bf:cd:ed:81:1f:9c:58:
                    58:f6:a1:37:f6:ae:f1:49:1d:db:9b:ec:b2:dc:e0:
                    f3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:EC:10:9B:07:46:14:7E:CB:A5:E1:61:B1:ED:C1:1F:21:5F:BF:2E
            X509v3 Authority Key Identifier:
                keyid:FA:E5:64:5D:9B:C4:98:A5:DD:8D:BE:E9:3F:17:7C:02:F9:A6:12:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uVkXZvEmKXdjb7pPxd8AvmmEmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/1-uVkXZvEmKXdjb7pPxd8AvmmEmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/1-uVkXZvEmKXdjb7pPxd8AvmmEmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:d7:5f:28:f0:41:3d:61:b0:6f:62:c2:c8:d1:87:b2:eb:51:
         10:f2:70:d6:15:83:ff:9d:32:6b:ec:a9:5d:50:e5:a2:8e:a6:
         52:d3:42:04:fb:6a:af:45:01:e7:ea:a1:c4:ae:14:04:49:9a:
         fb:b1:9a:bd:82:94:a9:e0:a6:24:dd:d1:12:3e:1d:f3:72:63:
         b0:eb:8b:cc:6e:1e:2f:c3:cc:74:2f:e7:f7:4b:c5:b6:95:bf:
         b0:3c:28:99:34:88:68:d5:46:e7:08:68:64:19:28:16:2a:19:
         3b:57:0e:2e:04:8c:f0:30:ed:13:6a:69:21:fd:8f:35:17:d7:
         02:ff:55:e8:81:77:6b:c9:fc:85:4d:ca:a0:78:79:d2:50:31:
         d8:9b:e9:01:7c:6e:61:78:61:a5:02:7f:aa:9e:79:73:80:b1:
         d7:33:98:9f:a4:4b:78:95:63:29:4f:c3:5e:38:78:42:c2:ce:
         79:ca:20:f9:5f:84:e3:1c:21:c7:b9:51:e1:b2:12:7a:32:53:
         43:9b:45:0e:67:b9:c7:22:0c:71:47:f4:8a:a9:9c:04:aa:6a:
         87:50:ea:c5:28:ba:9b:92:a8:44:2e:ee:96:4a:2a:7b:9e:02:
         25:02:fd:17:ae:69:80:aa:8a:29:27:ee:04:7c:89:ac:79:77:
         d0:b4:83:66
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaC8wxH3YMpizN37pRn+7xAXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZTU2NDVkOWJjNDk4YTVkZDhkYmVlOTNmMTc3YzAyZjlh
NjEyNmEwHhcNMjYwOTIwMDMwMTM1WhcNMjYwOTIxMDMwMTM1WjAzMTEwLwYDVQQD
Eyg4OWVjMTA5YjA3NDYxNDdlY2JhNWUxNjFiMWVkYzExZjIxNWZiZjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6G8lN5rQu92ZJ0mh1iqj+T3L2BC
vyRyLRF/Z1m8NZIh3NqSVa4WWq71OFrf0Hy2QpBWv+KsZFRD0N0MdlJxMLb95lgt
s5PfD32xbChOUP7RSiJ+Jao6haDGnBKI4INR4UKS0hUv92LfWsIGsCzX9JD04EyL
Eg292NUxBHo4avGkrCRPrW7GaOPspggqyHln8zAKfD2CrUt9SwnKM8oT2kl+p0yJ
HfxetvtsNd7PAnhc2YxYKK0qqXuIr1mJ6GgwP5vrF/lQLKYL5ebpTbHNQ5v7PLyY
pMBuCuuOKlSDAbXvLDrHXceenb/N7YEfnFhY9qE39q7xSR3bm+yy3ODzwwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFInsEJsHRhR+y6XhYbHtwR8hX78uMB8GA1UdIwQY
MBaAFPrlZF2bxJil3Y2+6T8XfAL5phJqMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS11VmtYWnZFbUtYZGpiN3BQeGQ4QXZtbUVtby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvMGE1NmNlLWZmZWYtNDllNC1hZWZj
LTY1OTNjNjQxYTMyMC8xLzEtdVZrWFp2RW1LWGRqYjdwUHhkOEF2bW1FbW8ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzUxLzBhNTZjZS1mZmVmLTQ5ZTQtYWVmYy02NTkzYzY0MWEz
MjAvMS8xLXVWa1hadkVtS1hkamI3cFB4ZDhBdm1tRW1vLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAutdf
KPBBPWGwb2LCyNGHsutREPJw1hWD/50ya+ypXVDloo6mUtNCBPtqr0UB5+qhxK4U
BEma+7GavYKUqeCmJN3REj4d83JjsOuLzG4eL8PMdC/n90vFtpW/sDwomTSIaNVG
5whoZBkoFioZO1cOLgSM8DDtE2ppIf2PNRfXAv9V6IF3a8n8hU3KoHh50lAx2Jvp
AXxuYXhhpQJ/qp55c4Cx1zOYn6RLeJVjKU/DXjh4QsLOecog+V+E4xwhx7lR4bIS
ejJTQ5tFDme5xyIMcUf0iqmcBKpqh1DqxSi6m5KoRC7ulkoqe54CJQL9F65pgKqK
KSfuBHyJrHl30LSDZg==
-----END CERTIFICATE-----
Generated at Sun Sep 20 12:48:06 2026 by rpki-client