Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
File:                     uGnuZhZNPLQdvS31QXgXwy9M6gU.mft (raw, json)
Hash identifier:          hblyzmMFvHxcP0Oez/xjZC0tNJYvBxW/pX6w6g0hAZQ=
Subject key identifier:   FB:DE:31:B0:56:8E:75:60:97:05:1B:64:5D:D6:1F:A4:DB:C0:43:5C
Authority key identifier: B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05
Certificate issuer:       /CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
Certificate serial:       01A0DACDAC64822520FDB511FB93BBF2F4D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
Manifest number:          1A71
Signing time:             Fri 25 Sep 2026 23:01:47 +0000
Manifest this update:     Fri 25 Sep 2026 23:01:47 +0000
Manifest next update:     Sat 26 Sep 2026 23:01:47 +0000
Files and hashes:         1: EKN-VhfSh7NqAUTwaEDwo-mbUcg.roa (hash: RURLvfa0vZeEDe5BKC7vJtcjJKvo0nmsNWlb1Fca1bg=)
                          2: uGnuZhZNPLQdvS31QXgXwy9M6gU.crl (hash: eE2/bFhxm8+7Bb45GuUlpJVlKlnsTqzX67uEdNNnWxM=)
                          3: z_SLOwZzLzTLUlxe9eeHUMNRBV4.roa (hash: sXhfTVz/7doOZGLXSWgTb9dJ0tx/PZHzsugITkY48mE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:cd:ac:64:82:25:20:fd:b5:11:fb:93:bb:f2:f4:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
        Validity
            Not Before: Sep 25 23:01:47 2026 GMT
            Not After : Sep 26 23:01:47 2026 GMT
        Subject: CN=fbde31b0568e756097051b645dd61fa4dbc0435c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f9:6a:f5:97:76:60:3a:4c:e8:aa:63:a9:08:
                    76:01:2d:45:f5:cb:ad:57:bc:64:38:26:4f:b1:79:
                    26:1f:d3:6d:f7:f8:2d:87:0b:52:e5:f9:be:31:d6:
                    ed:1a:cc:27:4a:f9:84:0d:05:d6:6a:bf:3e:3a:95:
                    41:ed:7b:d4:93:72:ec:75:f0:7b:9d:44:ae:fd:92:
                    31:ce:4b:65:b0:9d:c4:43:d5:c0:4b:44:ef:d0:39:
                    58:e3:99:1f:33:74:58:1c:94:d9:02:36:1b:35:b5:
                    33:61:90:03:da:1f:91:f8:a1:0a:21:49:8c:4b:99:
                    0c:0f:b3:6b:20:46:b2:b0:24:ed:39:86:cf:a0:cf:
                    9d:ae:40:f0:f6:b7:c7:ca:55:99:0f:a1:d4:9a:f3:
                    e1:50:f1:04:bc:fe:c7:89:33:fe:7b:4e:f1:33:0b:
                    b7:25:4f:70:c8:ba:be:c7:a9:1d:cc:34:c0:25:44:
                    cc:26:b7:7b:27:13:a7:0e:b1:c0:cb:ae:b6:9a:72:
                    bf:2d:7d:5c:06:02:3d:b0:67:d2:2d:33:37:8f:42:
                    aa:03:e9:56:2f:01:9a:99:c8:bd:00:75:0c:b8:2c:
                    0a:37:4f:76:85:75:e9:06:4e:fb:d9:a8:d5:ce:27:
                    10:de:2e:d8:a0:3d:3a:ed:f4:20:2b:d7:88:db:b7:
                    00:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:DE:31:B0:56:8E:75:60:97:05:1B:64:5D:D6:1F:A4:DB:C0:43:5C
            X509v3 Authority Key Identifier:
                keyid:B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:c1:ac:7a:7e:3d:d1:8f:cb:63:96:9a:06:7d:9a:5e:10:0f:
         c2:99:09:9b:fa:d4:fd:20:f5:dd:8f:d1:5d:0b:b2:6e:17:2e:
         da:6e:2c:53:92:a4:30:28:ad:c6:14:f0:8d:c3:43:f4:9a:64:
         29:fc:da:68:cd:09:b1:3f:bb:0d:49:7c:6e:d7:8b:a3:5e:2e:
         86:a6:49:fb:41:b3:70:89:f6:cc:46:8a:dc:a1:a9:09:5b:c1:
         9b:81:98:3f:b7:54:20:4d:e4:7a:7a:63:a6:d4:1d:d5:bf:86:
         26:23:f1:c0:79:63:51:4b:7b:96:5f:d4:dc:90:8b:ce:cd:45:
         e4:09:f7:f5:b1:27:b0:97:2b:8b:55:f5:3a:24:48:d3:1d:82:
         d2:dc:f6:01:3b:fe:0f:b5:bb:1a:36:31:61:88:97:36:32:a7:
         d5:bf:0a:e8:96:68:7a:d8:20:b4:2f:48:71:35:41:ac:73:ee:
         e5:92:b0:c4:fc:93:49:a2:66:52:1f:58:93:b1:21:13:f5:3a:
         08:9a:5a:42:a8:c0:7d:29:d5:57:5b:d2:b7:f9:2b:1d:ce:9c:
         83:c1:f2:ff:cc:a2:36:b2:56:9e:92:b7:de:ac:55:eb:11:72:
         1a:44:1f:0e:7e:3d:2a:f5:8a:8c:82:a9:7e:82:d1:99:3c:a9:
         ff:a5:c5:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDazaxkgiUg/bUR+5O78vTYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NjllZTY2MTY0ZDNjYjQxZGJkMmRmNTQxNzgxN2MzMmY0
Y2VhMDUwHhcNMjYwOTI1MjMwMTQ3WhcNMjYwOTI2MjMwMTQ3WjAzMTEwLwYDVQQD
EyhmYmRlMzFiMDU2OGU3NTYwOTcwNTFiNjQ1ZGQ2MWZhNGRiYzA0MzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/lq9Zd2YDpM6KpjqQh2AS1F9cut
V7xkOCZPsXkmH9Nt9/gthwtS5fm+MdbtGswnSvmEDQXWar8+OpVB7XvUk3LsdfB7
nUSu/ZIxzktlsJ3EQ9XAS0Tv0DlY45kfM3RYHJTZAjYbNbUzYZAD2h+R+KEKIUmM
S5kMD7NrIEaysCTtOYbPoM+drkDw9rfHylWZD6HUmvPhUPEEvP7HiTP+e07xMwu3
JU9wyLq+x6kdzDTAJUTMJrd7JxOnDrHAy662mnK/LX1cBgI9sGfSLTM3j0KqA+lW
LwGamci9AHUMuCwKN092hXXpBk772ajVzicQ3i7YoD067fQgK9eI27cACQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPveMbBWjnVglwUbZF3WH6TbwENcMB8GA1UdIwQY
MBaAFLhp7mYWTTy0Hb0t9UF4F8MvTOoFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUdudVpoWk5QTFFkdlMzMVFYZ1h3eTlNNmdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8xZDVlZTEtYWNjZi00NzRmLWE1ODkt
Y2QxZmE0ODQ0MTFiLzEvdUdudVpoWk5QTFFkdlMzMVFYZ1h3eTlNNmdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8xZDVlZTEtYWNjZi00NzRmLWE1ODktY2QxZmE0ODQ0MTFi
LzEvdUdudVpoWk5QTFFkdlMzMVFYZ1h3eTlNNmdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3MGsen49
0Y/LY5aaBn2aXhAPwpkJm/rU/SD13Y/RXQuybhcu2m4sU5KkMCitxhTwjcND9Jpk
KfzaaM0JsT+7DUl8bteLo14uhqZJ+0GzcIn2zEaK3KGpCVvBm4GYP7dUIE3kenpj
ptQd1b+GJiPxwHljUUt7ll/U3JCLzs1F5An39bEnsJcri1X1OiRI0x2C0tz2ATv+
D7W7GjYxYYiXNjKn1b8K6JZoetggtC9IcTVBrHPu5ZKwxPyTSaJmUh9Yk7EhE/U6
CJpaQqjAfSnVV1vSt/krHc6cg8Hy/8yiNrJWnpK33qxV6xFyGkQfDn49KvWKjIKp
foLRmTyp/6XFTQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 02:58:26 2026 by rpki-client