Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
File:                     1-uSR_yiWEnzojsukTOx0xj--GrU.mft (raw, json)
Hash identifier:          daeJBov4oAtDUave+xXAd6Mfm3c78p6SUDAKyVpXyeo=
Subject key identifier:   FB:C6:EF:CC:A5:D1:9C:08:50:6F:80:52:A7:5E:7A:BF:08:20:04:05
Authority key identifier: FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5
Certificate issuer:       /CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
Certificate serial:       01A0D2A62769576824E114F9F45427CA6B00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
Manifest number:          0BDE
Signing time:             Thu 24 Sep 2026 09:01:39 +0000
Manifest this update:     Thu 24 Sep 2026 09:01:39 +0000
Manifest next update:     Fri 25 Sep 2026 09:01:39 +0000
Files and hashes:         1: 1-uSR_yiWEnzojsukTOx0xj--GrU.crl (hash: hhBSWe9nMvZMKgQXbMi9jwJvBBex61A0+3VSwcO/OSE=)
                          2: kPmc5sCThKk5h79wmMSU7r2wdGk.roa (hash: cJYgegRXaUwVLkfRCxfZWWQRmJwn/LEk5WOIrzbJK84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 09:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:a6:27:69:57:68:24:e1:14:f9:f4:54:27:ca:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
        Validity
            Not Before: Sep 24 09:01:39 2026 GMT
            Not After : Sep 25 09:01:39 2026 GMT
        Subject: CN=fbc6efcca5d19c08506f8052a75e7abf08200405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:78:51:d1:20:86:52:3e:58:91:aa:b6:7b:bb:
                    07:76:ed:de:00:81:c3:f0:56:3f:ca:24:3c:0a:99:
                    55:d6:f8:d7:14:dc:85:80:4f:4e:d2:04:2c:82:10:
                    39:96:13:52:08:4e:9f:f5:84:fe:1c:c2:b6:03:33:
                    2d:ce:cc:e1:59:82:34:15:88:d1:2b:f1:a7:73:b2:
                    85:ac:dc:4f:94:ce:f4:0e:fe:20:68:49:91:11:b3:
                    eb:75:0a:c8:16:bf:5b:16:03:3e:43:98:6d:06:41:
                    16:c2:c2:33:f2:ec:3b:3a:9a:f9:5a:b8:aa:3f:bb:
                    5c:4b:58:bf:37:49:f7:50:66:7f:78:a2:4f:b7:59:
                    59:90:66:6f:b4:a9:71:1c:ff:9f:d4:b6:34:ba:fc:
                    71:56:c9:bc:af:ea:17:19:99:be:25:87:47:f7:90:
                    0e:44:53:56:1e:01:45:67:61:56:77:61:b5:06:92:
                    60:b5:f8:9f:b1:a6:18:04:c7:ba:bd:8f:4d:bb:56:
                    52:66:60:79:b0:6c:1f:82:1b:56:80:1c:ea:ec:8d:
                    fb:87:b9:71:a1:93:8d:f8:57:8d:3f:0d:3f:c1:16:
                    b3:27:f0:66:17:ec:01:9e:46:dc:15:50:1c:6a:bc:
                    b4:f8:90:1d:0d:c2:15:40:d8:9c:4f:1f:7d:34:36:
                    01:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C6:EF:CC:A5:D1:9C:08:50:6F:80:52:A7:5E:7A:BF:08:20:04:05
            X509v3 Authority Key Identifier:
                keyid:FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:a8:89:82:9f:cc:2c:ad:83:23:2f:97:1c:32:09:2e:74:fd:
         16:02:5e:79:d5:b1:29:cb:71:94:d5:35:2f:ca:02:dd:f1:de:
         f6:c3:aa:c4:40:ed:31:d7:2b:73:12:ba:0a:af:07:39:70:3b:
         57:14:7d:66:b6:83:1f:0c:c9:a1:c7:2b:9e:0a:fd:a4:38:13:
         3c:de:36:f8:84:6c:55:65:04:f1:57:a4:99:af:bf:b7:7f:61:
         36:08:b9:1b:5f:34:89:95:ae:a0:8d:25:39:37:f4:df:13:0b:
         be:f1:10:cf:ae:17:03:d0:83:54:aa:25:ec:1e:99:f9:44:ea:
         ab:7c:95:de:a9:3f:4b:02:32:a4:71:11:ad:1e:c7:a6:13:a2:
         7f:c2:9e:1c:31:0e:89:4c:c2:62:b6:29:92:fa:05:a7:0a:e8:
         f2:5c:c3:1f:5d:2a:94:e5:1b:21:8a:7b:8f:1f:8a:5d:80:a7:
         91:a1:04:97:5c:f8:f9:77:f0:cb:b7:14:43:86:f6:a6:da:31:
         65:de:ec:cc:dc:cf:49:e9:55:26:bf:11:3d:b3:e6:58:0e:b4:
         4c:87:65:30:45:9a:55:14:9e:63:9b:d8:09:2c:87:78:09:44:
         78:b9:3f:ab:b2:70:2a:ca:0f:24:99:ae:e8:d0:b4:bd:ea:1b:
         e6:9d:31:9b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDSpidpV2gk4RT59FQnymsAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZTQ5MWZmMjg5NjEyN2NlODhlY2JhNDRjZWM3NGM2M2Zi
ZTFhYjUwHhcNMjYwOTI0MDkwMTM5WhcNMjYwOTI1MDkwMTM5WjAzMTEwLwYDVQQD
EyhmYmM2ZWZjY2E1ZDE5YzA4NTA2ZjgwNTJhNzVlN2FiZjA4MjAwNDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXhR0SCGUj5Ykaq2e7sHdu3eAIHD
8FY/yiQ8CplV1vjXFNyFgE9O0gQsghA5lhNSCE6f9YT+HMK2AzMtzszhWYI0FYjR
K/Gnc7KFrNxPlM70Dv4gaEmREbPrdQrIFr9bFgM+Q5htBkEWwsIz8uw7Opr5Wriq
P7tcS1i/N0n3UGZ/eKJPt1lZkGZvtKlxHP+f1LY0uvxxVsm8r+oXGZm+JYdH95AO
RFNWHgFFZ2FWd2G1BpJgtfifsaYYBMe6vY9Nu1ZSZmB5sGwfghtWgBzq7I37h7lx
oZON+FeNPw0/wRazJ/BmF+wBnkbcFVAcary0+JAdDcIVQNicTx99NDYBxwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPvG78yl0ZwIUG+AUqdeer8IIAQFMB8GA1UdIwQY
MBaAFPrkkf8olhJ86I7LpEzsdMY/vhq1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS11U1JfeWlXRW56b2pzdWtUT3gweGotLUdyVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvYzQ3Y2UwLWUyOTEtNDJmZS1iM2Y4
LWNlYzE2MzMzZDdmMi8xLzEtdVNSX3lpV0Vuem9qc3VrVE94MHhqLS1HclUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRkL2M0N2NlMC1lMjkxLTQyZmUtYjNmOC1jZWMxNjMzM2Q3
ZjIvMS8xLXVTUl95aVdFbnpvanN1a1RPeDB4ai0tR3JVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr6iJ
gp/MLK2DIy+XHDIJLnT9FgJeedWxKctxlNU1L8oC3fHe9sOqxEDtMdcrcxK6Cq8H
OXA7VxR9ZraDHwzJoccrngr9pDgTPN42+IRsVWUE8Vekma+/t39hNgi5G180iZWu
oI0lOTf03xMLvvEQz64XA9CDVKol7B6Z+UTqq3yV3qk/SwIypHERrR7HphOif8Ke
HDEOiUzCYrYpkvoFpwro8lzDH10qlOUbIYp7jx+KXYCnkaEEl1z4+Xfwy7cUQ4b2
ptoxZd7szNzPSelVJr8RPbPmWA60TIdlMEWaVRSeY5vYCSyHeAlEeLk/q7JwKsoP
JJmu6NC0veob5p0xmw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:01:10 2026 by rpki-client