Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.mft
File:                     uuKqXiYD98-V17CaeLWIrc7-Mig.mft (raw, json)
Hash identifier:          XY+6wnNg5x8lD6QFbRFh/tJ3dEOlcxw9OGoO/F7MEBY=
Subject key identifier:   29:5E:43:DD:3F:A9:30:D7:3B:5E:16:9B:C6:D8:D4:36:46:5A:07:01
Authority key identifier: BA:E2:AA:5E:26:03:F7:CF:95:D7:B0:9A:78:B5:88:AD:CE:FE:32:28
Certificate issuer:       /CN=bae2aa5e2603f7cf95d7b09a78b588adcefe3228
Certificate serial:       019F95125C929A3EDE02DF9D20F341425A95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uuKqXiYD98-V17CaeLWIrc7-Mig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.mft
Manifest number:          0113
Signing time:             Fri 24 Jul 2026 17:00:36 +0000
Manifest this update:     Fri 24 Jul 2026 17:00:36 +0000
Manifest next update:     Sat 25 Jul 2026 17:00:36 +0000
Files and hashes:         1: TkW7QsEHj7p4co1qQ-4GY3yy26s.roa (hash: iaZGknezVQgDJrbwMB8HGoEB5UI8hMfa/n4ACZ8oQkM=)
                          2: uuKqXiYD98-V17CaeLWIrc7-Mig.crl (hash: kAF4vUb6jkRD6DQp7q/a1AniM1/RTripelqVLcdE8dw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uuKqXiYD98-V17CaeLWIrc7-Mig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:12:5c:92:9a:3e:de:02:df:9d:20:f3:41:42:5a:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bae2aa5e2603f7cf95d7b09a78b588adcefe3228
        Validity
            Not Before: Jul 24 17:00:36 2026 GMT
            Not After : Jul 25 17:00:36 2026 GMT
        Subject: CN=295e43dd3fa930d73b5e169bc6d8d436465a0701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c6:d0:e0:9f:e7:e3:0e:48:8c:c8:ae:0f:4e:
                    ce:5e:57:ca:0d:c0:7b:70:8e:a2:dc:93:f0:96:ea:
                    d0:62:ec:c5:23:6c:42:67:5e:5c:3d:db:27:73:af:
                    2c:87:a3:bb:b6:92:d9:c0:76:ff:b8:6f:8b:4b:f5:
                    a0:3f:64:e7:65:8d:fb:db:ad:3e:a9:7e:bd:93:11:
                    46:d2:70:55:71:fb:b0:f5:32:c1:2c:ce:74:b9:6e:
                    e2:3f:2e:23:3a:c2:27:df:47:fd:12:54:3c:46:5f:
                    b2:d3:a2:20:cc:b0:39:52:c5:58:b3:d8:03:d0:9b:
                    40:c4:2b:5e:70:55:6e:3c:b9:be:fd:a9:63:f1:c6:
                    41:09:a6:20:a5:ca:03:1b:61:6e:b2:ef:d0:b0:0b:
                    56:96:a6:c7:bf:b2:c9:e8:0f:e7:09:5a:c2:bd:bd:
                    4e:20:95:50:f9:89:81:54:54:de:62:b3:4e:8c:b5:
                    c0:45:e7:15:32:92:59:73:2a:00:9f:69:17:fa:e1:
                    4f:08:96:2c:e8:09:1b:c2:6f:37:51:96:92:a0:41:
                    09:00:86:d4:ab:36:31:2c:c6:a1:e7:29:fe:8d:63:
                    77:0a:f6:6f:be:e5:0c:b0:d1:a6:c0:c3:e1:32:50:
                    39:c7:4e:18:a8:f1:c3:ac:18:87:0f:da:82:94:c5:
                    36:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:5E:43:DD:3F:A9:30:D7:3B:5E:16:9B:C6:D8:D4:36:46:5A:07:01
            X509v3 Authority Key Identifier:
                keyid:BA:E2:AA:5E:26:03:F7:CF:95:D7:B0:9A:78:B5:88:AD:CE:FE:32:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uuKqXiYD98-V17CaeLWIrc7-Mig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0cee23-064b-4566-b863-b496437cc5dc/1/uuKqXiYD98-V17CaeLWIrc7-Mig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:d7:98:fb:99:c4:c6:dc:27:80:48:2d:db:c5:01:cf:14:ff:
         73:7b:22:10:e9:fa:b9:9a:a0:d9:49:28:58:c9:17:81:66:d3:
         58:f0:83:25:58:20:ef:a7:fa:f6:c7:8d:1d:cf:92:20:07:8c:
         48:8c:82:2b:49:46:db:5d:d0:71:4b:7a:86:7a:18:94:eb:b7:
         8b:d5:45:2b:47:2a:e8:1a:ea:2c:53:ae:88:af:ba:ea:e9:1f:
         60:77:55:44:13:5a:99:1a:94:1d:2d:2e:6a:7a:b2:35:9b:95:
         94:b1:9d:25:06:79:62:58:84:d3:41:f7:74:f2:0b:2f:38:33:
         bc:b1:da:50:00:c2:7b:5f:d4:5c:56:8d:26:57:6e:47:06:d8:
         a1:dc:35:c5:4a:39:44:e4:cc:94:5e:89:e7:b0:56:17:f3:a5:
         32:4f:9c:45:57:86:ac:ec:48:e3:d0:7a:04:39:db:f3:6d:db:
         a9:e1:49:04:4e:e7:16:8f:42:21:14:c2:32:18:6e:f7:a9:3d:
         c8:a1:90:02:07:cf:31:65:2c:ff:a9:29:bc:80:96:4c:59:07:
         52:ff:1f:4a:48:8f:a6:7b:48:ce:b2:4f:78:ef:81:0c:4d:b0:
         46:79:6a:11:5e:d9:5e:3c:d6:a8:58:bf:df:9c:06:d5:6d:8d:
         21:93:89:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VElySmj7eAt+dIPNBQlqVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhZTJhYTVlMjYwM2Y3Y2Y5NWQ3YjA5YTc4YjU4OGFkY2Vm
ZTMyMjgwHhcNMjYwNzI0MTcwMDM2WhcNMjYwNzI1MTcwMDM2WjAzMTEwLwYDVQQD
EygyOTVlNDNkZDNmYTkzMGQ3M2I1ZTE2OWJjNmQ4ZDQzNjQ2NWEwNzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcbQ4J/n4w5IjMiuD07OXlfKDcB7
cI6i3JPwlurQYuzFI2xCZ15cPdsnc68sh6O7tpLZwHb/uG+LS/WgP2TnZY37260+
qX69kxFG0nBVcfuw9TLBLM50uW7iPy4jOsIn30f9ElQ8Rl+y06IgzLA5UsVYs9gD
0JtAxCtecFVuPLm+/alj8cZBCaYgpcoDG2Fusu/QsAtWlqbHv7LJ6A/nCVrCvb1O
IJVQ+YmBVFTeYrNOjLXARecVMpJZcyoAn2kX+uFPCJYs6Akbwm83UZaSoEEJAIbU
qzYxLMah5yn+jWN3CvZvvuUMsNGmwMPhMlA5x04YqPHDrBiHD9qClMU2EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCleQ90/qTDXO14Wm8bY1DZGWgcBMB8GA1UdIwQY
MBaAFLriql4mA/fPldewmni1iK3O/jIoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXVLcVhpWUQ5OC1WMTdDYWVMV0lyYzctTWlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8wY2VlMjMtMDY0Yi00NTY2LWI4NjMt
YjQ5NjQzN2NjNWRjLzEvdXVLcVhpWUQ5OC1WMTdDYWVMV0lyYzctTWlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8wY2VlMjMtMDY0Yi00NTY2LWI4NjMtYjQ5NjQzN2NjNWRj
LzEvdXVLcVhpWUQ5OC1WMTdDYWVMV0lyYzctTWlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPteY+5nE
xtwngEgt28UBzxT/c3siEOn6uZqg2UkoWMkXgWbTWPCDJVgg76f69seNHc+SIAeM
SIyCK0lG213QcUt6hnoYlOu3i9VFK0cq6BrqLFOuiK+66ukfYHdVRBNamRqUHS0u
anqyNZuVlLGdJQZ5YliE00H3dPILLzgzvLHaUADCe1/UXFaNJlduRwbYodw1xUo5
ROTMlF6J57BWF/OlMk+cRVeGrOxI49B6BDnb823bqeFJBE7nFo9CIRTCMhhu96k9
yKGQAgfPMWUs/6kpvICWTFkHUv8fSkiPpntIzrJPeO+BDE2wRnlqEV7ZXjzWqFi/
35wG1W2NIZOJNQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:47:13 2026 by rpki-client