Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft
File:                     Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft (raw, json)
Hash identifier:          plyAHPR3um4byb8nqQ0yEgyx2g3noVfKIY16B1XvxM4=
Subject key identifier:   7D:96:A8:55:8D:EB:DF:FC:CE:F9:3C:E3:FE:75:BB:CB:44:64:13:DA
Authority key identifier: 52:2F:98:79:CC:FA:DE:E5:D0:4A:9A:99:73:F5:B2:79:52:97:1B:FB
Certificate issuer:       /CN=522f9879ccfadee5d04a9a9973f5b27952971bfb
Certificate serial:       01A0D64BC96B23AD4EF3C7962AA50B67BED7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft
Manifest number:          1630
Signing time:             Fri 25 Sep 2026 02:01:25 +0000
Manifest this update:     Fri 25 Sep 2026 02:01:25 +0000
Manifest next update:     Sat 26 Sep 2026 02:01:25 +0000
Files and hashes:         1: Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl (hash: T4RglYRAQ4YP2nkssykmbNf40OtYrusIZpLyzdzx13A=)
                          2: oOmlfKVzpMVENSLkIqqHr9oYYIg.roa (hash: /1cGoeAjRc1hP5Tzk5VY4ttcaNmL4WoxJgl5UoSxmIg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:4b:c9:6b:23:ad:4e:f3:c7:96:2a:a5:0b:67:be:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522f9879ccfadee5d04a9a9973f5b27952971bfb
        Validity
            Not Before: Sep 25 02:01:25 2026 GMT
            Not After : Sep 26 02:01:25 2026 GMT
        Subject: CN=7d96a8558debdffccef93ce3fe75bbcb446413da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:71:80:07:22:36:d6:70:6a:38:3c:a3:3c:9a:
                    73:e4:bb:16:33:bc:57:91:0e:6a:18:26:4c:7c:04:
                    1b:b3:9d:05:5f:64:d4:c7:20:19:fa:31:e8:7e:25:
                    4c:7f:6a:15:3a:03:cd:27:ca:f6:c3:bb:f2:fb:1a:
                    a1:23:a5:93:61:da:a5:fa:e9:28:c4:a9:4f:94:da:
                    d7:98:d5:fc:5f:06:15:63:7c:60:78:ae:18:4b:f4:
                    de:24:6e:de:56:fd:e8:92:0c:21:19:2e:fa:d2:d3:
                    94:d5:29:4a:9f:ea:a9:fa:a0:44:ee:a3:d9:d0:93:
                    75:a8:56:e2:6e:6c:3e:a3:63:5b:d4:16:61:93:c0:
                    25:04:0d:96:a2:6a:0d:99:50:d5:15:4f:8c:4e:7f:
                    61:37:fe:8f:b1:1e:1d:59:ed:f4:06:21:50:4c:76:
                    8f:cb:3b:2b:d1:6d:3f:61:62:88:e4:00:07:b5:be:
                    71:d1:45:4c:68:30:ab:40:5e:7f:77:d8:15:c1:48:
                    61:4b:98:22:77:8a:0a:6a:62:4a:95:32:e2:a5:de:
                    1e:30:67:7b:f1:e6:46:39:46:02:65:22:1e:07:30:
                    d8:a4:0d:e0:18:42:a5:5a:97:e2:08:05:5c:5b:24:
                    60:34:be:b7:9e:7f:08:dc:90:2a:13:c3:64:1e:a3:
                    e7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:96:A8:55:8D:EB:DF:FC:CE:F9:3C:E3:FE:75:BB:CB:44:64:13:DA
            X509v3 Authority Key Identifier:
                keyid:52:2F:98:79:CC:FA:DE:E5:D0:4A:9A:99:73:F5:B2:79:52:97:1B:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:37:b4:ef:71:57:81:76:f5:79:59:41:b0:43:a2:c9:95:6d:
         07:da:94:80:1a:d1:89:ee:8c:a4:d0:64:ee:72:7e:1e:1b:3f:
         bb:b5:df:e5:1e:17:11:f5:f1:2f:3f:07:86:3b:32:e1:5a:a5:
         10:d9:64:43:c0:3a:7a:5d:4e:98:77:0d:93:90:15:23:50:3a:
         6f:0f:e0:87:8b:88:a3:a7:81:2a:59:17:f2:e1:b3:08:e2:e7:
         0a:b7:54:e6:38:91:d4:fc:69:78:fe:c2:03:5d:86:b5:6f:34:
         1b:61:44:33:b5:58:e8:7b:0c:4b:c7:a6:6f:2e:3c:be:28:ca:
         f4:0b:77:ed:26:c4:e2:09:e9:2b:5d:81:e0:18:15:a2:40:e5:
         6b:c7:37:36:c7:dc:d0:84:c5:4a:ad:6b:7d:68:da:86:6f:db:
         d4:d5:c7:d9:34:26:93:38:a6:23:d5:aa:d0:95:af:f0:41:a4:
         c2:fe:51:60:98:79:12:e5:43:85:42:c5:bc:f3:a6:29:a0:81:
         6a:3b:3e:ff:ac:ef:17:a0:39:0d:58:a0:e7:b0:da:1a:82:47:
         a3:c7:b5:9e:64:7d:fc:21:54:cf:e1:f9:df:31:1c:5a:38:97:
         f3:88:7f:a0:43:85:af:6e:ea:41:7b:87:06:da:12:39:39:d7:
         7c:52:92:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWS8lrI61O88eWKqULZ77XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMmY5ODc5Y2NmYWRlZTVkMDRhOWE5OTczZjViMjc5NTI5
NzFiZmIwHhcNMjYwOTI1MDIwMTI1WhcNMjYwOTI2MDIwMTI1WjAzMTEwLwYDVQQD
Eyg3ZDk2YTg1NThkZWJkZmZjY2VmOTNjZTNmZTc1YmJjYjQ0NjQxM2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nGAByI21nBqODyjPJpz5LsWM7xX
kQ5qGCZMfAQbs50FX2TUxyAZ+jHofiVMf2oVOgPNJ8r2w7vy+xqhI6WTYdql+uko
xKlPlNrXmNX8XwYVY3xgeK4YS/TeJG7eVv3okgwhGS760tOU1SlKn+qp+qBE7qPZ
0JN1qFbibmw+o2Nb1BZhk8AlBA2WomoNmVDVFU+MTn9hN/6PsR4dWe30BiFQTHaP
yzsr0W0/YWKI5AAHtb5x0UVMaDCrQF5/d9gVwUhhS5gid4oKamJKlTLipd4eMGd7
8eZGOUYCZSIeBzDYpA3gGEKlWpfiCAVcWyRgNL63nn8I3JAqE8NkHqPnpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2WqFWN69/8zvk84/51u8tEZBPaMB8GA1UdIwQY
MBaAFFIvmHnM+t7l0EqamXP1snlSlxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWktWWVjejYzdVhRU3BxWmNfV3llVktYR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9mYWQ0ZjEtOTFmMC00N2UxLWIzNzAt
ZWU1MDlmYmQ4MGUxLzEvVWktWWVjejYzdVhRU3BxWmNfV3llVktYR19zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9mYWQ0ZjEtOTFmMC00N2UxLWIzNzAtZWU1MDlmYmQ4MGUx
LzEvVWktWWVjejYzdVhRU3BxWmNfV3llVktYR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxDe073FX
gXb1eVlBsEOiyZVtB9qUgBrRie6MpNBk7nJ+Hhs/u7Xf5R4XEfXxLz8Hhjsy4Vql
ENlkQ8A6el1OmHcNk5AVI1A6bw/gh4uIo6eBKlkX8uGzCOLnCrdU5jiR1PxpeP7C
A12GtW80G2FEM7VY6HsMS8emby48vijK9At37SbE4gnpK12B4BgVokDla8c3Nsfc
0ITFSq1rfWjahm/b1NXH2TQmkzimI9Wq0JWv8EGkwv5RYJh5EuVDhULFvPOmKaCB
ajs+/6zvF6A5DVig57DaGoJHo8e1nmR9/CFUz+H53zEcWjiX84h/oEOFr27qQXuH
BtoSOTnXfFKS2w==
-----END CERTIFICATE-----
Generated at Fri Sep 25 07:27:53 2026 by rpki-client