Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/ad0e10-0196-4751-a718-3ed3bf6762d0/1/uEo2bqhiMO_66DFqtJVrFWRcTUM.mft
File:                     uEo2bqhiMO_66DFqtJVrFWRcTUM.mft (raw, json)
Hash identifier:          DvAq++FQbpgUcYCiHDqypTT03Nt5E810csteS6bCzGM=
Subject key identifier:   BD:5B:C6:9D:31:66:D1:F3:17:40:1D:AD:18:FE:AD:66:FB:93:D9:BE
Authority key identifier: B8:4A:36:6E:A8:62:30:EF:FA:E8:31:6A:B4:95:6B:15:64:5C:4D:43
Certificate issuer:       /CN=b84a366ea86230effae8316ab4956b15645c4d43
Certificate serial:       01A0DA96D59F4BEE23915BFD65CE29C3042B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uEo2bqhiMO_66DFqtJVrFWRcTUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/ad0e10-0196-4751-a718-3ed3bf6762d0/1/uEo2bqhiMO_66DFqtJVrFWRcTUM.mft
Manifest number:          4F
Signing time:             Fri 25 Sep 2026 22:01:53 +0000
Manifest this update:     Fri 25 Sep 2026 22:01:53 +0000
Manifest next update:     Sat 26 Sep 2026 22:01:53 +0000
Files and hashes:         1: CNxmEVESKi3VdzXhEwExU9DPZz4.roa (hash: wiIIkgfI8xTRZVHzJS4Y8nVdrsK8cwAvgmVx/dnkzjI=)
                          2: uEo2bqhiMO_66DFqtJVrFWRcTUM.crl (hash: g24yig9v8SUzyj04BnAbd2YoDwSLrB6kKj+CoybZy2w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/ad0e10-0196-4751-a718-3ed3bf6762d0/1/uEo2bqhiMO_66DFqtJVrFWRcTUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/ad0e10-0196-4751-a718-3ed3bf6762d0/1/uEo2bqhiMO_66DFqtJVrFWRcTUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uEo2bqhiMO_66DFqtJVrFWRcTUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:96:d5:9f:4b:ee:23:91:5b:fd:65:ce:29:c3:04:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84a366ea86230effae8316ab4956b15645c4d43
        Validity
            Not Before: Sep 25 22:01:53 2026 GMT
            Not After : Sep 26 22:01:53 2026 GMT
        Subject: CN=bd5bc69d3166d1f317401dad18fead66fb93d9be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ec:25:fd:a6:f7:5b:88:b0:65:f4:8a:48:a8:
                    1d:5b:53:ba:9b:61:fd:72:8b:80:18:35:32:45:45:
                    42:5b:22:e7:1c:b6:87:35:11:6c:7e:a6:bd:45:78:
                    33:60:ec:c2:a4:7a:e2:4b:f5:46:34:47:6f:c1:ae:
                    8e:ec:e4:ff:71:1d:4d:f4:7d:e4:6b:ad:0b:8a:15:
                    a9:2d:45:59:b8:82:56:0b:36:89:01:4f:7e:4e:2e:
                    7f:a2:70:7f:1b:0f:67:b1:f9:c2:ff:12:df:78:66:
                    c7:ff:da:4a:05:85:6f:db:81:6c:b2:f9:5a:50:56:
                    5c:8b:38:75:d6:55:4c:c2:50:fe:f2:99:88:82:84:
                    4f:4c:2f:61:d4:bf:49:d9:8d:d4:d5:8b:68:f3:ea:
                    bd:48:1f:d8:2a:5d:a6:bc:c2:34:f7:f5:75:be:5f:
                    62:b6:89:a4:e8:f7:33:f1:ca:ac:50:ee:11:e2:5b:
                    ae:e4:42:93:b9:aa:4d:d7:db:30:a1:45:b7:c6:71:
                    c0:41:9b:6a:00:c7:79:ef:7a:85:3b:db:1a:90:57:
                    d8:f8:f3:bb:17:16:fa:ed:3c:c9:1b:6d:5f:e0:a3:
                    86:f2:37:1c:6b:d8:21:65:52:81:59:4e:ad:12:3f:
                    e0:10:9b:b6:de:3e:aa:cf:c4:b6:3f:d9:66:16:5b:
                    07:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:5B:C6:9D:31:66:D1:F3:17:40:1D:AD:18:FE:AD:66:FB:93:D9:BE
            X509v3 Authority Key Identifier:
                keyid:B8:4A:36:6E:A8:62:30:EF:FA:E8:31:6A:B4:95:6B:15:64:5C:4D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEo2bqhiMO_66DFqtJVrFWRcTUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ad0e10-0196-4751-a718-3ed3bf6762d0/1/uEo2bqhiMO_66DFqtJVrFWRcTUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ad0e10-0196-4751-a718-3ed3bf6762d0/1/uEo2bqhiMO_66DFqtJVrFWRcTUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:de:9a:05:69:a7:70:9c:98:dc:71:00:b2:87:ec:a1:4b:0e:
         ba:79:28:58:e2:2d:b4:c7:7e:6d:64:8e:21:f6:2d:47:e4:2b:
         03:97:52:f3:8c:f3:32:16:51:2b:5f:5f:69:60:85:a3:e5:92:
         c0:c2:d8:d4:67:e0:bf:b0:ef:6c:17:ec:af:de:d0:5e:33:c4:
         48:51:20:8b:64:7f:c6:a0:41:96:46:fe:98:7f:1c:7c:53:cc:
         03:fd:fc:f1:86:9c:50:f1:34:89:b5:00:62:73:22:80:ef:a2:
         ed:cb:f0:c0:ff:ba:61:a2:4b:c2:f9:4a:4c:55:45:a3:c4:84:
         1b:63:0b:1c:9c:76:74:3f:eb:8a:9f:48:48:42:47:1c:b2:ce:
         65:ae:c3:be:2c:e8:d2:dd:48:e8:16:66:df:c8:0b:42:29:d6:
         66:06:0b:bd:b8:3e:4e:ce:9b:0a:36:ca:d1:ff:c4:7f:87:00:
         1e:82:1a:45:5b:03:06:0c:e7:60:de:cb:26:4a:42:ab:9f:b4:
         7e:8f:69:df:7b:03:82:f8:30:dd:2f:20:3b:6f:ac:2a:2c:d5:
         dc:6c:13:b7:3a:d8:27:7a:b4:cd:96:68:71:f1:90:20:d5:1e:
         2f:60:9d:d7:92:26:2f:96:cb:8e:23:3e:fb:10:65:28:47:c3:
         4c:88:a4:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDaltWfS+4jkVv9Zc4pwwQrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NGEzNjZlYTg2MjMwZWZmYWU4MzE2YWI0OTU2YjE1NjQ1
YzRkNDMwHhcNMjYwOTI1MjIwMTUzWhcNMjYwOTI2MjIwMTUzWjAzMTEwLwYDVQQD
EyhiZDViYzY5ZDMxNjZkMWYzMTc0MDFkYWQxOGZlYWQ2NmZiOTNkOWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArewl/ab3W4iwZfSKSKgdW1O6m2H9
couAGDUyRUVCWyLnHLaHNRFsfqa9RXgzYOzCpHriS/VGNEdvwa6O7OT/cR1N9H3k
a60LihWpLUVZuIJWCzaJAU9+Ti5/onB/Gw9nsfnC/xLfeGbH/9pKBYVv24Fssvla
UFZcizh11lVMwlD+8pmIgoRPTC9h1L9J2Y3U1Yto8+q9SB/YKl2mvMI09/V1vl9i
tomk6Pcz8cqsUO4R4luu5EKTuapN19swoUW3xnHAQZtqAMd573qFO9sakFfY+PO7
Fxb67TzJG21f4KOG8jcca9ghZVKBWU6tEj/gEJu23j6qz8S2P9lmFlsHhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1bxp0xZtHzF0AdrRj+rWb7k9m+MB8GA1UdIwQY
MBaAFLhKNm6oYjDv+ugxarSVaxVkXE1DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUVvMmJxaGlNT182NkRGcXRKVnJGV1JjVFVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9hZDBlMTAtMDE5Ni00NzUxLWE3MTgt
M2VkM2JmNjc2MmQwLzEvdUVvMmJxaGlNT182NkRGcXRKVnJGV1JjVFVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9hZDBlMTAtMDE5Ni00NzUxLWE3MTgtM2VkM2JmNjc2MmQw
LzEvdUVvMmJxaGlNT182NkRGcXRKVnJGV1JjVFVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACt6aBWmn
cJyY3HEAsofsoUsOunkoWOIttMd+bWSOIfYtR+QrA5dS84zzMhZRK19faWCFo+WS
wMLY1Gfgv7DvbBfsr97QXjPESFEgi2R/xqBBlkb+mH8cfFPMA/388YacUPE0ibUA
YnMigO+i7cvwwP+6YaJLwvlKTFVFo8SEG2MLHJx2dD/rip9ISEJHHLLOZa7Dvizo
0t1I6BZm38gLQinWZgYLvbg+Ts6bCjbK0f/Ef4cAHoIaRVsDBgznYN7LJkpCq5+0
fo9p33sDgvgw3S8gO2+sKizV3GwTtzrYJ3q0zZZocfGQINUeL2Cd15ImL5bLjiM+
+xBlKEfDTIik9w==
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:39:41 2026 by rpki-client