Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.mft
File:                     uuKqXiYD98-V17CaeLWIrc7-Mig.mft (raw, json)
Hash identifier:          hGUWl9sPmrp31InXfSfa+7HqBGHfaUtiGGJSrfx/7eo=
Subject key identifier:   6F:A6:BF:8C:16:7B:41:D2:8A:34:F2:E0:96:C5:7B:40:7B:9C:97:07
Authority key identifier: BA:E2:AA:5E:26:03:F7:CF:95:D7:B0:9A:78:B5:88:AD:CE:FE:32:28
Certificate issuer:       /CN=bae2aa5e2603f7cf95d7b09a78b588adcefe3228
Certificate serial:       01A109CB0BF353A82D003051D7AB3599F740
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uuKqXiYD98-V17CaeLWIrc7-Mig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.mft
Manifest number:          01D4
Signing time:             Mon 05 Oct 2026 02:01:04 +0000
Manifest this update:     Mon 05 Oct 2026 02:01:04 +0000
Manifest next update:     Tue 06 Oct 2026 02:01:04 +0000
Files and hashes:         1: TkW7QsEHj7p4co1qQ-4GY3yy26s.roa (hash: iaZGknezVQgDJrbwMB8HGoEB5UI8hMfa/n4ACZ8oQkM=)
                          2: uuKqXiYD98-V17CaeLWIrc7-Mig.crl (hash: DKBiP7Lmi5g1P9xCSquqfV9WJUAfyyz3yKIZ8dELSlc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uuKqXiYD98-V17CaeLWIrc7-Mig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:13:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:09:cb:0b:f3:53:a8:2d:00:30:51:d7:ab:35:99:f7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bae2aa5e2603f7cf95d7b09a78b588adcefe3228
        Validity
            Not Before: Oct  5 02:01:04 2026 GMT
            Not After : Oct  6 02:01:04 2026 GMT
        Subject: CN=6fa6bf8c167b41d28a34f2e096c57b407b9c9707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b8:33:54:07:32:5e:f7:13:6a:03:dd:10:a0:
                    d1:84:24:24:9d:0f:ad:d2:9b:d1:50:de:ab:44:c4:
                    c7:cf:53:88:17:53:5d:96:3d:62:9f:59:99:d3:18:
                    c4:5a:82:41:08:50:12:d9:80:43:b7:24:28:3b:52:
                    a2:f0:dc:ef:d6:25:fc:f8:0e:6c:6a:ee:d7:52:9b:
                    27:78:73:7a:b2:22:99:e9:96:b7:2c:ad:c1:e0:8e:
                    6b:54:79:da:6b:58:b9:fc:08:9b:ae:24:10:2d:da:
                    d3:38:17:7f:19:47:fa:72:d9:78:bb:27:53:0d:a7:
                    18:ad:79:7d:59:98:75:36:64:21:91:05:5f:43:e3:
                    07:5e:12:81:19:ac:7f:ad:6f:45:bf:29:99:9c:b9:
                    d4:e6:7a:01:0e:45:e5:f5:c9:c0:56:d0:5e:18:b8:
                    36:3b:2d:6c:88:f9:49:b7:94:21:9b:86:66:ca:0c:
                    f8:27:e7:cb:fc:63:b2:73:c3:31:81:71:90:8a:62:
                    37:97:bc:d6:fa:df:fe:1e:e9:1d:f4:7c:8e:15:34:
                    d2:ab:c6:2c:cd:9c:16:4c:5f:be:66:91:8e:fb:1f:
                    54:4d:36:e5:42:f7:90:41:04:45:11:59:31:26:82:
                    48:42:1e:1b:26:d5:d6:bd:50:2f:57:e2:14:e9:54:
                    21:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A6:BF:8C:16:7B:41:D2:8A:34:F2:E0:96:C5:7B:40:7B:9C:97:07
            X509v3 Authority Key Identifier:
                keyid:BA:E2:AA:5E:26:03:F7:CF:95:D7:B0:9A:78:B5:88:AD:CE:FE:32:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uuKqXiYD98-V17CaeLWIrc7-Mig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:ff:cc:d2:0e:12:a5:05:24:cf:c8:67:c7:bb:97:40:8c:73:
         53:a5:8f:86:d5:67:47:84:54:fe:4d:92:02:44:70:60:6a:53:
         07:98:0e:f0:b3:f4:60:43:cf:08:2f:59:20:87:5d:02:9f:98:
         87:d3:dd:e3:2f:b7:be:a5:87:e4:06:00:18:8c:67:c3:92:1f:
         14:ca:c5:05:7f:bd:2a:af:87:a1:0a:27:74:bd:10:ba:3f:56:
         e6:17:48:af:96:0e:cb:6e:21:40:6e:ec:4d:37:ac:4d:3b:86:
         49:9e:ed:e9:c4:f6:8e:1e:c8:b2:24:5a:df:6d:a6:bb:cb:f8:
         03:30:8f:6a:f8:0a:60:38:3f:ad:f6:aa:27:ec:e7:07:a9:1b:
         07:16:f3:31:86:04:ec:35:5e:70:eb:3d:da:51:9b:d1:86:18:
         80:e3:b4:a3:25:52:76:51:11:b1:a2:a5:fd:6b:3a:83:3f:f9:
         bc:09:91:82:05:a6:ea:a1:42:f8:b1:c5:d7:fe:c3:8a:85:67:
         e2:c7:23:1d:e5:6e:e8:a6:3d:56:cd:e6:bf:82:cd:a2:26:25:
         4f:d7:28:5b:9d:1a:e0:ad:23:14:fc:7f:d7:58:67:17:65:95:
         58:d4:39:ac:9f:0b:ad:00:5b:d0:46:65:5f:c2:7a:66:a8:1e:
         ff:53:11:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEJywvzU6gtADBR16s1mfdAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhZTJhYTVlMjYwM2Y3Y2Y5NWQ3YjA5YTc4YjU4OGFkY2Vm
ZTMyMjgwHhcNMjYxMDA1MDIwMTA0WhcNMjYxMDA2MDIwMTA0WjAzMTEwLwYDVQQD
Eyg2ZmE2YmY4YzE2N2I0MWQyOGEzNGYyZTA5NmM1N2I0MDdiOWM5NzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7gzVAcyXvcTagPdEKDRhCQknQ+t
0pvRUN6rRMTHz1OIF1Ndlj1in1mZ0xjEWoJBCFAS2YBDtyQoO1Ki8Nzv1iX8+A5s
au7XUpsneHN6siKZ6Za3LK3B4I5rVHnaa1i5/AibriQQLdrTOBd/GUf6ctl4uydT
DacYrXl9WZh1NmQhkQVfQ+MHXhKBGax/rW9FvymZnLnU5noBDkXl9cnAVtBeGLg2
Oy1siPlJt5Qhm4Zmygz4J+fL/GOyc8MxgXGQimI3l7zW+t/+Hukd9HyOFTTSq8Ys
zZwWTF++ZpGO+x9UTTblQveQQQRFEVkxJoJIQh4bJtXWvVAvV+IU6VQhXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+mv4wWe0HSijTy4JbFe0B7nJcHMB8GA1UdIwQY
MBaAFLriql4mA/fPldewmni1iK3O/jIoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXVLcVhpWUQ5OC1WMTdDYWVMV0lyYzctTWlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8wY2VlMjMtMDY0Yi00NTY2LWI4NjMt
YjQ5NjQzN2NjNWRjLzEvdXVLcVhpWUQ5OC1WMTdDYWVMV0lyYzctTWlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8wY2VlMjMtMDY0Yi00NTY2LWI4NjMtYjQ5NjQzN2NjNWRj
LzEvdXVLcVhpWUQ5OC1WMTdDYWVMV0lyYzctTWlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArf/M0g4S
pQUkz8hnx7uXQIxzU6WPhtVnR4RU/k2SAkRwYGpTB5gO8LP0YEPPCC9ZIIddAp+Y
h9Pd4y+3vqWH5AYAGIxnw5IfFMrFBX+9Kq+HoQondL0Quj9W5hdIr5YOy24hQG7s
TTesTTuGSZ7t6cT2jh7IsiRa322mu8v4AzCPavgKYDg/rfaqJ+znB6kbBxbzMYYE
7DVecOs92lGb0YYYgOO0oyVSdlERsaKl/Ws6gz/5vAmRggWm6qFC+LHF1/7DioVn
4scjHeVu6KY9Vs3mv4LNoiYlT9coW50a4K0jFPx/11hnF2WVWNQ5rJ8LrQBb0EZl
X8J6Zqge/1MR/w==
-----END CERTIFICATE-----
Generated at Mon Oct 5 07:01:14 2026 by rpki-client