Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.mft
File:                     uqs_CIW1VmubFTPSCW32jlSf7D4.mft (raw, json)
Hash identifier:          6dkHN67/2qPIU0J3uVY/jeGa/F7m8B//dU1r2HerBoo=
Subject key identifier:   77:95:51:4D:39:00:BC:9C:7E:97:25:E1:6A:30:A9:8E:2F:8B:09:FA
Authority key identifier: BA:AB:3F:08:85:B5:56:6B:9B:15:33:D2:09:6D:F6:8E:54:9F:EC:3E
Certificate issuer:       /CN=baab3f0885b5566b9b1533d2096df68e549fec3e
Certificate serial:       01A10EBAA2BC5409ACF9BD9308ABFDC5F301
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqs_CIW1VmubFTPSCW32jlSf7D4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.mft
Manifest number:          17CD
Signing time:             Tue 06 Oct 2026 01:01:14 +0000
Manifest this update:     Tue 06 Oct 2026 01:01:14 +0000
Manifest next update:     Wed 07 Oct 2026 01:01:14 +0000
Files and hashes:         1: uqs_CIW1VmubFTPSCW32jlSf7D4.crl (hash: uIhUquA19MC4k3/5OLHtHMWmJwPz98pwZqhRR+vqIdw=)
                          2: vUVrsBxk_ZUy0s2IP3gA1vQjVcc.roa (hash: jdQIPt1Uhbi952qXzHWO2e5b80hHvTs1H8idT8nlc+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqs_CIW1VmubFTPSCW32jlSf7D4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 01:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0e:ba:a2:bc:54:09:ac:f9:bd:93:08:ab:fd:c5:f3:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baab3f0885b5566b9b1533d2096df68e549fec3e
        Validity
            Not Before: Oct  6 01:01:14 2026 GMT
            Not After : Oct  7 01:01:14 2026 GMT
        Subject: CN=7795514d3900bc9c7e9725e16a30a98e2f8b09fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f2:0a:17:f2:4e:cc:67:f7:9c:83:c4:db:3c:
                    05:6c:5a:d8:73:dc:cb:3b:73:65:2c:2e:28:1b:57:
                    f2:b7:e4:23:98:28:60:f9:06:ca:8d:13:0b:31:9c:
                    b8:42:23:94:d8:e6:c2:33:46:07:3e:39:0f:a4:0e:
                    bc:a3:07:31:15:10:93:7f:86:41:86:c6:3b:9b:5e:
                    cb:41:5a:88:0d:3b:76:49:7d:99:31:17:14:c2:72:
                    39:5d:8a:34:3f:94:2a:84:1f:48:48:9e:c2:a9:f2:
                    c4:91:0c:df:ca:f1:71:65:cb:01:84:d3:17:f6:30:
                    40:33:0d:a6:ca:dd:c5:73:84:b8:15:9c:b0:d1:38:
                    b4:ad:0e:7a:9d:97:3b:1f:e6:97:c0:9b:77:89:1c:
                    e1:3d:00:81:65:de:b9:e8:39:6b:e9:4d:52:6c:91:
                    d7:56:80:d5:29:77:e3:ed:6e:1b:db:70:94:52:aa:
                    08:4c:84:1a:94:70:0f:3f:52:6c:af:b6:49:fe:c7:
                    85:61:7f:ff:80:71:ea:4a:ce:8f:26:c3:73:2e:d5:
                    79:41:d1:3f:42:3b:51:45:04:be:c4:9a:75:42:a8:
                    01:26:56:2f:3d:67:1b:30:28:b1:54:ea:a0:6d:35:
                    8c:e6:f4:80:d6:b4:2b:51:c1:ea:45:ab:a1:6b:f9:
                    6d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:95:51:4D:39:00:BC:9C:7E:97:25:E1:6A:30:A9:8E:2F:8B:09:FA
            X509v3 Authority Key Identifier:
                keyid:BA:AB:3F:08:85:B5:56:6B:9B:15:33:D2:09:6D:F6:8E:54:9F:EC:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqs_CIW1VmubFTPSCW32jlSf7D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:fb:82:fe:e6:d0:a9:fb:f3:5c:ce:20:23:04:c9:a9:b5:72:
         aa:3f:82:4d:7e:a1:5c:eb:30:39:ca:4e:c2:49:0d:74:fc:ea:
         e8:4b:49:43:63:8b:e0:18:83:e0:b8:96:d0:61:99:28:b0:97:
         00:0c:33:5c:12:37:a1:13:6d:53:8c:c0:2e:b5:aa:b7:ec:50:
         9c:05:38:ca:5e:e9:75:84:ea:bc:b7:a3:ee:f5:22:4f:66:fb:
         9a:f2:07:32:0d:ea:6e:e1:12:22:a8:da:df:a6:9e:e1:80:8f:
         f3:bb:04:eb:de:de:0b:a3:61:b9:c0:63:8b:2b:4a:a1:34:89:
         ef:da:c1:4d:8e:c6:59:28:22:96:23:bd:01:d8:79:2d:3e:bc:
         0b:11:9f:ba:60:66:26:df:dd:c6:a9:a1:ba:36:d9:a8:20:21:
         08:4a:db:f3:6a:ba:e5:32:72:c8:99:b5:78:67:18:c8:76:4d:
         05:25:b9:1e:37:9f:1f:50:08:ad:e3:0b:8a:ce:b1:e8:be:90:
         c4:16:d0:9a:4c:21:c6:45:c7:14:f8:ef:f9:78:78:66:2d:45:
         43:cc:7a:bd:f7:f2:96:ce:fb:1b:96:c1:b9:47:e0:56:58:3b:
         ab:d0:0e:c7:d8:1c:e1:d2:14:72:4a:14:a2:34:56:ee:92:10:
         55:0f:23:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEOuqK8VAms+b2TCKv9xfMBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYWIzZjA4ODViNTU2NmI5YjE1MzNkMjA5NmRmNjhlNTQ5
ZmVjM2UwHhcNMjYxMDA2MDEwMTE0WhcNMjYxMDA3MDEwMTE0WjAzMTEwLwYDVQQD
Eyg3Nzk1NTE0ZDM5MDBiYzljN2U5NzI1ZTE2YTMwYTk4ZTJmOGIwOWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPIKF/JOzGf3nIPE2zwFbFrYc9zL
O3NlLC4oG1fyt+QjmChg+QbKjRMLMZy4QiOU2ObCM0YHPjkPpA68owcxFRCTf4ZB
hsY7m17LQVqIDTt2SX2ZMRcUwnI5XYo0P5QqhB9ISJ7CqfLEkQzfyvFxZcsBhNMX
9jBAMw2myt3Fc4S4FZyw0Ti0rQ56nZc7H+aXwJt3iRzhPQCBZd656Dlr6U1SbJHX
VoDVKXfj7W4b23CUUqoITIQalHAPP1Jsr7ZJ/seFYX//gHHqSs6PJsNzLtV5QdE/
QjtRRQS+xJp1QqgBJlYvPWcbMCixVOqgbTWM5vSA1rQrUcHqRauha/ltTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHeVUU05ALycfpcl4WowqY4viwn6MB8GA1UdIwQY
MBaAFLqrPwiFtVZrmxUz0glt9o5Un+w+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXFzX0NJVzFWbXViRlRQU0NXMzJqbFNmN0Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jZDExMWMtMmQ3Zi00NGYzLTllYjYt
OWFmMTNmODM2ODc5LzEvdXFzX0NJVzFWbXViRlRQU0NXMzJqbFNmN0Q0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9jZDExMWMtMmQ3Zi00NGYzLTllYjYtOWFmMTNmODM2ODc5
LzEvdXFzX0NJVzFWbXViRlRQU0NXMzJqbFNmN0Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIvuC/ubQ
qfvzXM4gIwTJqbVyqj+CTX6hXOswOcpOwkkNdPzq6EtJQ2OL4BiD4LiW0GGZKLCX
AAwzXBI3oRNtU4zALrWqt+xQnAU4yl7pdYTqvLej7vUiT2b7mvIHMg3qbuESIqja
36ae4YCP87sE697eC6NhucBjiytKoTSJ79rBTY7GWSgiliO9Adh5LT68CxGfumBm
Jt/dxqmhujbZqCAhCErb82q65TJyyJm1eGcYyHZNBSW5HjefH1AIreMLis6x6L6Q
xBbQmkwhxkXHFPjv+Xh4Zi1FQ8x6vffyls77G5bBuUfgVlg7q9AOx9gc4dIUckoU
ojRW7pIQVQ8jbA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 13:14:08 2026 by rpki-client