Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
File:                     UAm8siUutkaQLMv9TJhssMK5E5g.mft (raw, json)
Hash identifier:          tLBTKTHfdQIwMacCg6N6ihpt6kE5s6QyU+2C0hkhUk4=
Subject key identifier:   7B:A4:D1:43:01:A3:BD:11:44:62:3C:DA:45:72:B6:FB:D2:10:0F:A8
Authority key identifier: 50:09:BC:B2:25:2E:B6:46:90:2C:CB:FD:4C:98:6C:B0:C2:B9:13:98
Certificate issuer:       /CN=5009bcb2252eb646902ccbfd4c986cb0c2b91398
Certificate serial:       01A0D64B61B859A6595EB4373EE7D88054D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
Manifest number:          057C
Signing time:             Fri 25 Sep 2026 02:00:59 +0000
Manifest this update:     Fri 25 Sep 2026 02:00:59 +0000
Manifest next update:     Sat 26 Sep 2026 02:00:59 +0000
Files and hashes:         1: UAm8siUutkaQLMv9TJhssMK5E5g.crl (hash: HdF1nFiqHf62/5L4e+wEnPfU4vAlOwks8lRuw6j9OKQ=)
                          2: s2NzqhDpn_MIzIu3sU4Nnz5OdmI.roa (hash: gFIZdnfNAaCxSgU4XX/5DvqZKxy3vUU3BhECHFZPGJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:4b:61:b8:59:a6:59:5e:b4:37:3e:e7:d8:80:54:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5009bcb2252eb646902ccbfd4c986cb0c2b91398
        Validity
            Not Before: Sep 25 02:00:59 2026 GMT
            Not After : Sep 26 02:00:59 2026 GMT
        Subject: CN=7ba4d14301a3bd1144623cda4572b6fbd2100fa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b3:a0:b8:f8:e4:26:65:d1:f8:21:c1:e0:9b:
                    59:d0:3f:66:ba:a9:3e:72:f9:54:c4:e3:2f:96:24:
                    30:71:43:eb:ce:f4:2e:79:9e:1f:96:d2:cf:3c:ec:
                    ad:3d:b4:5f:80:64:0f:e4:aa:1c:4e:31:cf:e2:44:
                    bc:ce:2e:8c:43:58:c0:d8:60:da:06:09:c1:44:bb:
                    69:6d:6e:de:b6:0a:4d:97:6e:f4:79:9c:46:4f:b7:
                    36:8c:a8:00:4e:5d:9d:d8:10:64:b2:f2:99:84:b9:
                    6f:94:82:d3:8a:6b:4c:d2:1a:69:ff:00:b8:cd:ac:
                    74:91:97:8f:05:be:37:61:99:38:c2:57:45:46:32:
                    2e:9f:f6:47:18:9a:38:69:73:bf:98:59:57:22:ec:
                    22:f0:36:a5:a2:1e:48:54:82:05:49:46:b1:a8:70:
                    30:7d:d3:23:ac:3a:20:ae:90:55:97:cd:4b:46:bb:
                    cf:92:ba:88:f9:a6:f8:85:dc:71:81:4c:a1:84:1a:
                    fa:31:a4:8c:76:ec:be:09:17:b9:6b:31:db:f6:ac:
                    be:26:85:09:a5:35:8f:e8:24:f9:63:a9:43:4b:50:
                    96:28:49:40:c1:ac:3d:ca:27:18:e5:13:83:ef:f5:
                    75:45:5a:1d:bd:b3:61:f0:b1:90:cf:42:7a:b9:d2:
                    12:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A4:D1:43:01:A3:BD:11:44:62:3C:DA:45:72:B6:FB:D2:10:0F:A8
            X509v3 Authority Key Identifier:
                keyid:50:09:BC:B2:25:2E:B6:46:90:2C:CB:FD:4C:98:6C:B0:C2:B9:13:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:7a:89:bc:26:43:99:22:7d:be:cb:d7:bd:e9:a5:a9:c7:da:
         c6:a5:2b:f3:f8:b2:a9:a0:23:a8:0e:95:d1:f7:6d:05:d5:fb:
         f3:e6:3d:8a:bf:f3:13:50:d8:df:9b:e8:54:e9:67:6b:11:0f:
         e6:9c:01:5d:70:a4:f1:f4:3f:42:46:12:0b:17:b9:d3:58:5a:
         51:fe:b3:8c:2f:cd:c4:8d:ed:4b:32:06:be:4a:4e:2b:7a:6a:
         8b:1e:7b:47:ff:9e:d7:cd:2c:f9:88:37:b8:d9:06:6e:13:19:
         ed:32:be:3b:c1:54:dd:45:c0:60:4f:34:8e:fb:a9:22:9d:d7:
         65:e7:da:65:62:e0:7f:57:14:84:4a:e7:59:d9:b0:da:8c:f5:
         d5:dc:03:16:94:d2:b7:37:c8:35:fc:13:d9:c3:43:2a:0f:69:
         17:dd:04:a0:60:ab:77:5c:e1:17:a2:27:01:a0:fb:c9:11:af:
         18:f8:27:9b:d7:54:82:c4:74:f5:89:7d:36:67:ab:55:0b:0d:
         9e:40:11:04:e8:83:1e:16:ac:2e:c1:ac:eb:18:35:2f:41:6a:
         51:e1:33:3e:66:e5:1a:89:a2:5e:0b:e4:de:5f:75:48:5f:f3:
         4a:a4:3a:78:ba:ab:f6:f3:5a:41:57:b4:15:3d:14:9c:20:18:
         fd:8a:a4:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWS2G4WaZZXrQ3PufYgFTXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMDliY2IyMjUyZWI2NDY5MDJjY2JmZDRjOTg2Y2IwYzJi
OTEzOTgwHhcNMjYwOTI1MDIwMDU5WhcNMjYwOTI2MDIwMDU5WjAzMTEwLwYDVQQD
Eyg3YmE0ZDE0MzAxYTNiZDExNDQ2MjNjZGE0NTcyYjZmYmQyMTAwZmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirOguPjkJmXR+CHB4JtZ0D9muqk+
cvlUxOMvliQwcUPrzvQueZ4fltLPPOytPbRfgGQP5KocTjHP4kS8zi6MQ1jA2GDa
BgnBRLtpbW7etgpNl270eZxGT7c2jKgATl2d2BBksvKZhLlvlILTimtM0hpp/wC4
zax0kZePBb43YZk4wldFRjIun/ZHGJo4aXO/mFlXIuwi8Daloh5IVIIFSUaxqHAw
fdMjrDogrpBVl81LRrvPkrqI+ab4hdxxgUyhhBr6MaSMduy+CRe5azHb9qy+JoUJ
pTWP6CT5Y6lDS1CWKElAwaw9yicY5ROD7/V1RVodvbNh8LGQz0J6udIS5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHuk0UMBo70RRGI82kVytvvSEA+oMB8GA1UdIwQY
MBaAFFAJvLIlLrZGkCzL/UyYbLDCuROYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUFtOHNpVXV0a2FRTE12OVRKaHNzTUs1RTVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9mMTJkODAtZGViNi00YmY1LTg1M2Mt
ZDVkYTg1OGUxNWZiLzEvVUFtOHNpVXV0a2FRTE12OVRKaHNzTUs1RTVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9mMTJkODAtZGViNi00YmY1LTg1M2MtZDVkYTg1OGUxNWZi
LzEvVUFtOHNpVXV0a2FRTE12OVRKaHNzTUs1RTVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyXqJvCZD
mSJ9vsvXvemlqcfaxqUr8/iyqaAjqA6V0fdtBdX78+Y9ir/zE1DY35voVOlnaxEP
5pwBXXCk8fQ/QkYSCxe501haUf6zjC/NxI3tSzIGvkpOK3pqix57R/+e180s+Yg3
uNkGbhMZ7TK+O8FU3UXAYE80jvupIp3XZefaZWLgf1cUhErnWdmw2oz11dwDFpTS
tzfINfwT2cNDKg9pF90EoGCrd1zhF6InAaD7yRGvGPgnm9dUgsR09Yl9NmerVQsN
nkARBOiDHhasLsGs6xg1L0FqUeEzPmblGomiXgvk3l91SF/zSqQ6eLqr9vNaQVe0
FT0UnCAY/YqkDA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 05:10:36 2026 by rpki-client