Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
File:                     uqDyWO70sr9LuqhDDB5YyowYjqc.mft (raw, json)
Hash identifier:          zZi7L2LkeGe1DUMJo81Im70EokZrFrimtT6RS96VfHI=
Subject key identifier:   29:64:FC:01:65:86:D7:F7:F5:BB:6B:85:9A:EB:97:89:FE:C5:A9:FE
Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
Certificate issuer:       /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Certificate serial:       01A0D2379202257F0EBD23A1EDE46E057A3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
Manifest number:          05B2
Signing time:             Thu 24 Sep 2026 07:00:52 +0000
Manifest this update:     Thu 24 Sep 2026 07:00:52 +0000
Manifest next update:     Fri 25 Sep 2026 07:00:52 +0000
Files and hashes:         1: 4NtXU3o0i9nTQ0aPnN0oHNUECOE.roa (hash: 3YYvrIPQh3ZlkWIDJWGzPef2omYQb9s0JIFyF3ZtUx0=)
                          2: 6WDkbHlgSXxNJbB0drss0reruS8.roa (hash: oFDNB9590aZJb3RqzjukoKFlQp5/LXVYXoZGCKhDyHQ=)
                          3: 8K0KdrfhqUloGiC916NzfAFxh-c.roa (hash: drOaS31gZWGo628/BltbevehLEyrF74VNJF1nPIwijA=)
                          4: CHm4uxJXlMUd0r5QClzcF966Ijw.roa (hash: s8FUQD2MuDH7rbiip50DyRQrMult5B8vV44+OSbORFQ=)
                          5: F3j0DS6wR1WWm7lYntYngphPs1w.roa (hash: Ye/B8sKhUCPXCevv4SfoJ2o7nJLMGjMaE4Qb575tGk4=)
                          6: Ke-GAW7E6yplbOZiIO0l5zT0Fic.roa (hash: soIv2LC8f5IdezvuoAAVJw8fZgLBnWGjy9O5qvDQ/+M=)
                          7: KuCSaCEOTSfMj8uwOknmWfQSUeo.roa (hash: 3+MmnXuvI/JOfNZCrj8AZFjZyZJa2SF9JSTpsOfpZ38=)
                          8: MsSKYSaiVUmdk4uw5DxmwFovsBo.roa (hash: gN7/7u1mFNWenCLCWkwGkblcTcu1MaRBKEfwH1Z/T9Q=)
                          9: PjcfmGvCF3Jo8bSPGEurQgZgvHI.roa (hash: nN0nspQjOZYATjn1JnM2nPvB9KoYFsNTbycrrE1wEhQ=)
                          10: RwhCBNFrzcUzyEWsFVoiT8IdNVo.roa (hash: r7grjzieZGND+TLUxKczhr2oesywsPmZIS/b0+pyM6k=)
                          11: SnhR0ywSazNW_LooQ-7w3mnox3s.roa (hash: sf6HWA102jlf5D1wHL5U+yeNTKyY8TOBcCejfejACe0=)
                          12: dqsYbbjCxnAptr8zjkd-iezgLz4.roa (hash: 1Yhk6OnIeIea3uiPYWd+rgtl98a+2OVsjXwz+GeFDuw=)
                          13: pVK-BRQ98HDM69ZQ63Bm0uZRCXs.roa (hash: jvRqREvNlJK1CxR23zptuMNPkMy0b8MVlSlIgEiP7u0=)
                          14: uqDyWO70sr9LuqhDDB5YyowYjqc.crl (hash: qBcmjVrstaat7xEbDVCFclocT/Wgk+dVS1YVBSLnEkY=)
                          15: zBKsN_Z6ioe9fqLCU_PChTHrs6A.roa (hash: CJ84WrCESQrejSbSiz0bPJ4g2Cfe/qkxFBCMR3bVRlE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 07:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:37:92:02:25:7f:0e:bd:23:a1:ed:e4:6e:05:7a:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
        Validity
            Not Before: Sep 24 07:00:52 2026 GMT
            Not After : Sep 25 07:00:52 2026 GMT
        Subject: CN=2964fc016586d7f7f5bb6b859aeb9789fec5a9fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d0:29:a1:16:3c:69:08:35:ab:ec:21:ab:36:
                    53:a9:ed:71:df:3d:03:dd:2b:d6:a0:80:86:e5:d2:
                    c8:74:e8:95:0a:74:76:1d:e7:d1:9b:86:a1:f5:d5:
                    ad:29:db:63:bc:f1:4b:d0:9c:cc:bd:d1:58:67:dd:
                    69:0e:07:e3:f8:f8:83:2b:cb:3a:ba:b2:ef:18:57:
                    55:5d:aa:a1:79:79:d0:96:91:64:d2:00:dd:d8:5c:
                    51:38:ab:8f:aa:aa:4e:b5:b1:23:65:1e:a7:b4:b0:
                    0d:08:59:09:75:33:5a:dd:51:e8:8a:2d:21:46:ec:
                    33:d8:a1:50:1f:ea:1f:73:ae:2d:8a:e0:01:66:8a:
                    6b:b8:30:5e:92:80:f7:19:10:1d:83:7c:9c:6c:da:
                    1e:b1:ec:cf:6c:4b:7f:e3:c5:f1:48:b5:68:82:6b:
                    56:4d:4f:81:4b:37:07:18:64:f4:ba:3a:54:dc:43:
                    5b:7a:99:03:bc:94:52:e8:46:93:27:c8:b0:cf:b9:
                    e5:44:1a:19:b1:4f:71:66:a6:1b:cf:e0:fe:7b:c5:
                    1b:36:b7:a1:66:56:6f:64:52:c4:4e:11:42:0b:d5:
                    41:50:a5:cd:d1:84:a3:a9:ad:1e:67:b8:fb:ea:92:
                    7a:da:39:39:d7:61:f8:c6:a3:fc:70:3e:b7:7c:8d:
                    dd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:64:FC:01:65:86:D7:F7:F5:BB:6B:85:9A:EB:97:89:FE:C5:A9:FE
            X509v3 Authority Key Identifier:
                keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:cb:1f:4f:d3:30:74:80:f8:32:ba:45:26:d9:6a:7c:75:66:
         67:98:1b:75:e6:8c:49:32:95:64:da:a8:46:f2:b5:91:ad:66:
         38:51:c1:a2:d6:9b:4f:5f:bf:0a:37:24:30:a9:c5:04:bd:82:
         ad:e0:a7:30:fa:87:7b:dd:6c:82:78:b7:13:3b:14:d7:f3:8c:
         27:2e:2d:fe:38:d1:5b:ed:a9:16:f8:07:e8:16:74:77:bc:41:
         c5:69:37:95:8d:6b:ac:26:a7:29:21:c6:b4:8c:ff:ba:8c:60:
         bf:19:e9:10:da:4c:81:57:73:12:ca:02:6b:24:94:00:8e:61:
         23:8d:a0:bb:a6:5e:87:36:63:e0:f7:02:2a:0f:3f:9c:cd:cc:
         bd:f8:e2:3d:e3:5d:c2:d9:a7:44:4f:07:ef:fb:9e:01:d1:df:
         b4:f4:70:79:86:13:c0:af:2e:13:3d:9c:a3:cb:e5:ac:7f:0b:
         10:f1:fb:17:a9:f1:d6:34:95:2f:1e:27:57:d7:03:af:8e:43:
         9b:8e:25:19:3a:1e:5c:b2:4f:7a:89:f7:39:13:4a:e1:fb:6e:
         4e:57:70:d5:48:a6:30:ca:6c:24:73:38:13:ef:df:ef:0c:70:
         23:89:dd:96:1a:aa:ad:9a:00:cb:79:06:5e:73:9e:bb:3b:ee:
         bd:bf:94:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:49:50 2026 by rpki-client