Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft
File:                     uqSm69s4PhGdaVPHfxaGbnPvLbU.mft (raw, json)
Hash identifier:          h6rh7SYs38lH6KJyZXKhjoY8oXGZ8gSJ6kbWJfpdqwM=
Subject key identifier:   5D:9A:4B:85:10:99:1F:25:09:6C:03:9A:1A:43:B6:90:4E:A6:A8:F5
Authority key identifier: BA:A4:A6:EB:DB:38:3E:11:9D:69:53:C7:7F:16:86:6E:73:EF:2D:B5
Certificate issuer:       /CN=baa4a6ebdb383e119d6953c77f16866e73ef2db5
Certificate serial:       01A0D8726044846A335D6D6D28DADE995EF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft
Manifest number:          02BD
Signing time:             Fri 25 Sep 2026 12:02:49 +0000
Manifest this update:     Fri 25 Sep 2026 12:02:49 +0000
Manifest next update:     Sat 26 Sep 2026 12:02:49 +0000
Files and hashes:         1: _YxvUoR5WB4wYKYvopBg6R1wyQY.asa (hash: yHWWVgA+9d+6bFWZAxgVAfp5/UE5nZYg7alMcUo5W/E=)
                          2: uqSm69s4PhGdaVPHfxaGbnPvLbU.crl (hash: 1Wx/tqEqonadVMJb496MANHUYWiOoBGXNAJ9s6+tvJE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 12:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:72:60:44:84:6a:33:5d:6d:6d:28:da:de:99:5e:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baa4a6ebdb383e119d6953c77f16866e73ef2db5
        Validity
            Not Before: Sep 25 12:02:49 2026 GMT
            Not After : Sep 26 12:02:49 2026 GMT
        Subject: CN=5d9a4b8510991f25096c039a1a43b6904ea6a8f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c4:b5:31:de:aa:7b:31:94:c3:b9:f2:1c:4a:
                    de:d5:d4:95:ab:a0:1f:02:a4:f4:5f:c1:b3:04:62:
                    2f:f5:76:f3:dd:75:e8:d9:ea:88:9c:0e:60:39:ba:
                    ed:d9:bb:42:ed:e0:a5:e6:da:6d:d2:e6:c5:c7:ff:
                    57:82:6e:43:ae:a3:5a:2c:6b:50:13:82:bb:f0:e6:
                    e1:5a:2a:6c:cd:13:7d:9d:3d:bb:d5:45:45:3d:a1:
                    3e:ef:8a:24:0c:e6:fe:1a:5e:ee:16:54:be:e3:c5:
                    b0:8d:1d:ca:47:54:17:31:06:89:45:b7:73:11:74:
                    c5:8f:06:a8:53:d1:42:87:d1:71:06:66:ec:78:98:
                    5e:5b:4e:82:6e:4c:4b:d8:cf:50:9a:1e:07:f6:46:
                    cb:a0:16:69:64:55:89:34:de:f8:50:64:34:3f:2e:
                    9f:8f:6c:47:4d:f2:ff:f4:1a:ca:6a:b6:7b:c4:43:
                    63:3d:e6:db:e2:9e:33:93:0d:d7:f9:85:a5:57:7b:
                    90:0f:f1:16:c0:9c:e8:6a:0c:ab:53:27:e9:9c:a5:
                    19:4b:ae:26:ce:9c:56:4e:f5:9a:e9:7f:96:5b:9a:
                    85:9a:84:72:0b:ea:2f:86:f6:44:7e:0d:17:92:bb:
                    2a:35:5d:fe:95:73:d8:ca:c1:5e:f1:d9:65:9c:02:
                    18:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:9A:4B:85:10:99:1F:25:09:6C:03:9A:1A:43:B6:90:4E:A6:A8:F5
            X509v3 Authority Key Identifier:
                keyid:BA:A4:A6:EB:DB:38:3E:11:9D:69:53:C7:7F:16:86:6E:73:EF:2D:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:0d:a2:97:3b:06:21:df:dd:d3:98:4c:9a:12:5e:5d:ca:cc:
         bf:dc:a2:ec:ac:7c:a6:c0:8e:17:75:14:25:5d:e3:80:37:cc:
         27:ea:f8:61:93:c0:0e:64:50:06:db:ba:80:0d:08:0a:6b:b7:
         5c:68:89:4f:35:67:bf:cd:d1:a7:20:4d:f1:9a:8b:51:77:c9:
         12:97:2e:e0:5f:78:fa:c4:c0:59:f5:2e:4d:2f:e8:c2:17:c0:
         37:ac:6b:a7:be:87:fa:97:ae:ec:80:9e:3a:be:fa:af:98:e4:
         03:27:5f:09:ea:a7:e5:58:3c:36:ff:3c:5a:f4:8a:9e:28:f4:
         77:c3:2e:56:f6:3d:50:94:06:16:75:04:f1:72:fa:4d:60:8d:
         23:31:02:86:2f:61:4a:fb:ba:a0:05:fe:68:e3:bf:6a:43:69:
         a4:7c:7e:a8:bd:a1:23:fe:b6:f5:ac:18:15:0a:59:bc:78:55:
         5f:e1:00:7d:2b:c6:8e:f8:2f:45:5f:07:dc:8f:9c:ca:2b:cf:
         86:4c:97:f2:bb:6b:06:ff:8b:80:91:57:06:75:db:cd:8c:d9:
         95:56:2f:7e:95:d5:01:e5:90:57:77:07:b0:14:bc:8a:47:6b:
         27:dc:d4:46:46:f1:05:2c:ed:4e:04:05:5c:ed:04:93:a2:80:
         df:d4:61:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYcmBEhGozXW1tKNremV75MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYTRhNmViZGIzODNlMTE5ZDY5NTNjNzdmMTY4NjZlNzNl
ZjJkYjUwHhcNMjYwOTI1MTIwMjQ5WhcNMjYwOTI2MTIwMjQ5WjAzMTEwLwYDVQQD
Eyg1ZDlhNGI4NTEwOTkxZjI1MDk2YzAzOWExYTQzYjY5MDRlYTZhOGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMS1Md6qezGUw7nyHEre1dSVq6Af
AqT0X8GzBGIv9Xbz3XXo2eqInA5gObrt2btC7eCl5tpt0ubFx/9Xgm5DrqNaLGtQ
E4K78ObhWipszRN9nT271UVFPaE+74okDOb+Gl7uFlS+48WwjR3KR1QXMQaJRbdz
EXTFjwaoU9FCh9FxBmbseJheW06CbkxL2M9Qmh4H9kbLoBZpZFWJNN74UGQ0Py6f
j2xHTfL/9BrKarZ7xENjPebb4p4zkw3X+YWlV3uQD/EWwJzoagyrUyfpnKUZS64m
zpxWTvWa6X+WW5qFmoRyC+ovhvZEfg0XkrsqNV3+lXPYysFe8dllnAIYGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2aS4UQmR8lCWwDmhpDtpBOpqj1MB8GA1UdIwQY
MBaAFLqkpuvbOD4RnWlTx38Whm5z7y21MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXFTbTY5czRQaEdkYVZQSGZ4YUdiblB2TGJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84ZGFhMjktYzg1Ny00MGMyLWI5N2Et
ODM5YWQ3ZDA5M2VkLzEvdXFTbTY5czRQaEdkYVZQSGZ4YUdiblB2TGJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS84ZGFhMjktYzg1Ny00MGMyLWI5N2EtODM5YWQ3ZDA5M2Vk
LzEvdXFTbTY5czRQaEdkYVZQSGZ4YUdiblB2TGJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANw2ilzsG
Id/d05hMmhJeXcrMv9yi7Kx8psCOF3UUJV3jgDfMJ+r4YZPADmRQBtu6gA0ICmu3
XGiJTzVnv83RpyBN8ZqLUXfJEpcu4F94+sTAWfUuTS/owhfAN6xrp76H+peu7ICe
Or76r5jkAydfCeqn5Vg8Nv88WvSKnij0d8MuVvY9UJQGFnUE8XL6TWCNIzEChi9h
Svu6oAX+aOO/akNppHx+qL2hI/629awYFQpZvHhVX+EAfSvGjvgvRV8H3I+cyivP
hkyX8rtrBv+LgJFXBnXbzYzZlVYvfpXVAeWQV3cHsBS8ikdrJ9zURkbxBSztTgQF
XO0Ek6KA39Rh5Q==
-----END CERTIFICATE-----
Generated at Fri Sep 25 23:32:18 2026 by rpki-client