Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft
File:                     uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft (raw, json)
Hash identifier:          uMhOxk848C5JJk0QSxS1r8YFcnrdcmNEjJqVK8lACJA=
Subject key identifier:   C6:51:00:DF:13:91:2B:8B:84:4B:E5:67:30:6F:4F:1D:E1:9C:7A:F7
Authority key identifier: BA:FE:D1:39:DF:0F:AD:6F:DE:0D:82:86:91:44:10:4D:20:4B:92:B5
Certificate issuer:       /CN=bafed139df0fad6fde0d82869144104d204b92b5
Certificate serial:       01A0DA96527A0A469CAB36A1FB505771C708
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft
Manifest number:          0987
Signing time:             Fri 25 Sep 2026 22:01:19 +0000
Manifest this update:     Fri 25 Sep 2026 22:01:19 +0000
Manifest next update:     Sat 26 Sep 2026 22:01:19 +0000
Files and hashes:         1: CyS5T2zW6nQi797qSE-dHZYNtEk.roa (hash: vWUPnP09Dg+n2UzJoqoyV1Gr3WvM4iFkkNTv2veFgJU=)
                          2: R-8xZhYdW51nsOeZ20ghKc60eyA.roa (hash: hKGV8Y0Pu4S4Qa9iZVTeOAdSns0yIsurosfpDGf4r2w=)
                          3: U0EReD-V8KE0gBPfwv47LuWsTdo.roa (hash: 5+Ykz2XuDOuKIp6U4q+kGLqLusgQzdBy7kQJCeyoBHI=)
                          4: h3bGoqeRFSMTUyuhGqbYpfwxfqE.roa (hash: C/WkAn9ZisvCfv8kKxfOfN2pz9lqCtnDj8CgMz0djsg=)
                          5: uv7ROd8PrW_eDYKGkUQQTSBLkrU.crl (hash: TvOpBlpll7kWeYD9De9/LYbjVD3uzvraaxEszDnqQbI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:96:52:7a:0a:46:9c:ab:36:a1:fb:50:57:71:c7:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bafed139df0fad6fde0d82869144104d204b92b5
        Validity
            Not Before: Sep 25 22:01:19 2026 GMT
            Not After : Sep 26 22:01:19 2026 GMT
        Subject: CN=c65100df13912b8b844be567306f4f1de19c7af7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ee:be:a4:be:1f:0b:fc:46:bd:f9:39:23:ce:
                    8c:52:a2:cb:91:99:be:b4:45:a4:f4:92:5d:02:e7:
                    7f:ce:3a:de:d7:4d:a8:e1:fb:5f:31:29:ff:c1:33:
                    23:17:81:d2:2f:ed:5e:27:55:ac:fa:76:57:c3:49:
                    00:67:a8:f6:d6:f7:60:c7:81:0b:36:c2:ae:68:d0:
                    94:37:72:ad:bb:36:bd:c0:a8:c9:6d:a3:7b:a1:c2:
                    ea:44:1d:e8:b6:25:28:b6:d1:76:18:23:b6:6c:69:
                    96:8f:51:cd:e1:2a:71:f7:70:c9:43:7f:b1:a9:f6:
                    e0:9a:e6:52:1f:ce:be:ad:62:b6:a6:a1:e0:6b:5e:
                    7a:dc:9b:03:c9:a3:bd:60:bd:73:5c:24:49:da:7f:
                    f2:e4:dc:11:ff:20:b6:1b:f4:2e:8e:22:e1:f9:1f:
                    b4:af:1b:d6:50:3b:e6:6c:74:b2:72:94:ea:f6:ab:
                    0e:22:83:0c:4a:21:1a:c6:e8:5f:82:36:ab:81:de:
                    33:ec:fe:29:f7:dd:a0:87:7e:02:d8:4e:72:2a:8a:
                    d6:44:07:d5:1f:e0:c6:58:36:93:c7:92:2c:02:03:
                    07:49:52:a1:ca:d3:33:e7:5f:c6:1d:33:0d:8c:bc:
                    98:f6:17:cd:f0:c4:68:08:ed:63:cb:ca:14:50:28:
                    25:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:51:00:DF:13:91:2B:8B:84:4B:E5:67:30:6F:4F:1D:E1:9C:7A:F7
            X509v3 Authority Key Identifier:
                keyid:BA:FE:D1:39:DF:0F:AD:6F:DE:0D:82:86:91:44:10:4D:20:4B:92:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:b6:ef:f1:c6:ae:57:fa:ef:71:d0:91:ae:c3:60:a8:7a:22:
         44:4d:69:4b:b5:1e:d8:70:41:5c:79:c3:22:64:3c:e6:a7:63:
         0b:6f:4c:d6:b6:82:60:31:52:ee:3a:9c:4b:97:9c:79:76:cc:
         bd:54:66:36:0c:78:32:99:ec:42:27:88:f5:7a:95:2f:69:03:
         7c:dc:05:9b:cf:ec:a4:bc:d5:a7:56:78:39:17:94:22:39:d1:
         db:4f:3d:bf:b8:e6:1a:77:1f:06:e6:58:3b:a8:1e:68:41:88:
         ea:f2:8a:82:50:28:8c:5f:f0:6f:a0:62:bf:54:60:2b:06:0e:
         89:b9:f9:26:ae:04:c9:ef:ad:ce:f7:b4:5f:5a:fe:4e:b5:76:
         82:38:6d:e2:87:e0:13:84:92:58:bb:20:ae:61:c8:a0:a4:17:
         44:95:29:49:59:98:16:e2:fb:aa:84:3e:f6:20:08:85:25:ed:
         92:3b:2b:ed:81:8b:eb:b0:f8:df:44:df:18:b4:4c:dc:62:1f:
         e8:39:94:59:ee:1e:0c:ab:05:d4:e4:2d:ff:a5:01:34:2d:07:
         b9:ef:e6:d2:82:38:a1:9f:cf:86:bc:e3:e8:54:50:8c:b2:9b:
         28:de:0e:99:6c:34:f8:f4:b3:a6:90:cc:3d:bd:c6:a6:51:51:
         27:aa:a2:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDallJ6Ckacqzah+1BXcccIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhZmVkMTM5ZGYwZmFkNmZkZTBkODI4NjkxNDQxMDRkMjA0
YjkyYjUwHhcNMjYwOTI1MjIwMTE5WhcNMjYwOTI2MjIwMTE5WjAzMTEwLwYDVQQD
EyhjNjUxMDBkZjEzOTEyYjhiODQ0YmU1NjczMDZmNGYxZGUxOWM3YWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu6+pL4fC/xGvfk5I86MUqLLkZm+
tEWk9JJdAud/zjre102o4ftfMSn/wTMjF4HSL+1eJ1Ws+nZXw0kAZ6j21vdgx4EL
NsKuaNCUN3Ktuza9wKjJbaN7ocLqRB3otiUottF2GCO2bGmWj1HN4Spx93DJQ3+x
qfbgmuZSH86+rWK2pqHga1563JsDyaO9YL1zXCRJ2n/y5NwR/yC2G/QujiLh+R+0
rxvWUDvmbHSycpTq9qsOIoMMSiEaxuhfgjargd4z7P4p992gh34C2E5yKorWRAfV
H+DGWDaTx5IsAgMHSVKhytMz51/GHTMNjLyY9hfN8MRoCO1jy8oUUCgl5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZRAN8TkSuLhEvlZzBvTx3hnHr3MB8GA1UdIwQY
MBaAFLr+0TnfD61v3g2ChpFEEE0gS5K1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXY3Uk9kOFByV19lRFlLR2tVUVFUU0JMa3JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9jNTgxMWQtMWRhMC00YzMyLTljNGMt
ZDgyYTkwZTM0YzJkLzEvdXY3Uk9kOFByV19lRFlLR2tVUVFUU0JMa3JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9jNTgxMWQtMWRhMC00YzMyLTljNGMtZDgyYTkwZTM0YzJk
LzEvdXY3Uk9kOFByV19lRFlLR2tVUVFUU0JMa3JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG7bv8cau
V/rvcdCRrsNgqHoiRE1pS7Ue2HBBXHnDImQ85qdjC29M1raCYDFS7jqcS5eceXbM
vVRmNgx4MpnsQieI9XqVL2kDfNwFm8/spLzVp1Z4OReUIjnR2089v7jmGncfBuZY
O6geaEGI6vKKglAojF/wb6Biv1RgKwYOibn5Jq4Eye+tzve0X1r+TrV2gjht4ofg
E4SSWLsgrmHIoKQXRJUpSVmYFuL7qoQ+9iAIhSXtkjsr7YGL67D430TfGLRM3GIf
6DmUWe4eDKsF1OQt/6UBNC0Hue/m0oI4oZ/Phrzj6FRQjLKbKN4OmWw0+PSzppDM
Pb3GplFRJ6qiLg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 02:08:02 2026 by rpki-client