Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft
File:                     uqSm69s4PhGdaVPHfxaGbnPvLbU.mft (raw, json)
Hash identifier:          LGhWQj9fBiRA/CU7eae0YUxdtTz6Ayysd3+HV2vX+V0=
Subject key identifier:   F2:7D:98:36:D7:C1:4B:98:0D:CC:A9:B4:DF:A4:D8:F5:C5:77:A1:F6
Authority key identifier: BA:A4:A6:EB:DB:38:3E:11:9D:69:53:C7:7F:16:86:6E:73:EF:2D:B5
Certificate issuer:       /CN=baa4a6ebdb383e119d6953c77f16866e73ef2db5
Certificate serial:       019E1D5946B8A239FA94BD7658B6E8FC668C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft
Manifest number:          0153
Signing time:             Tue 12 May 2026 18:00:50 +0000
Manifest this update:     Tue 12 May 2026 18:00:50 +0000
Manifest next update:     Wed 13 May 2026 18:00:50 +0000
Files and hashes:         1: _YxvUoR5WB4wYKYvopBg6R1wyQY.asa (hash: yHWWVgA+9d+6bFWZAxgVAfp5/UE5nZYg7alMcUo5W/E=)
                          2: uqSm69s4PhGdaVPHfxaGbnPvLbU.crl (hash: PEViJSaI0e5asEYTb+wdQtcxG7+Dn/8P54HkW+X/tEc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:46:b8:a2:39:fa:94:bd:76:58:b6:e8:fc:66:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baa4a6ebdb383e119d6953c77f16866e73ef2db5
        Validity
            Not Before: May 12 18:00:50 2026 GMT
            Not After : May 13 18:00:50 2026 GMT
        Subject: CN=f27d9836d7c14b980dcca9b4dfa4d8f5c577a1f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a4:e3:51:04:d5:95:da:67:ca:99:5e:95:6a:
                    0f:97:a6:b3:86:70:60:1e:1f:b6:45:7c:a9:76:26:
                    65:5b:8a:30:db:dc:f4:3c:87:b1:9b:eb:5f:dc:66:
                    b4:b7:63:4e:11:0a:60:24:36:04:9b:70:ed:ab:c0:
                    df:35:ff:cc:83:94:4d:7b:37:e0:3a:88:c2:66:18:
                    f1:5a:52:fc:11:0a:70:25:c8:a5:2a:01:42:12:e9:
                    4a:4b:b8:b2:fe:f1:c3:e7:66:76:81:7f:e8:5c:7f:
                    b7:f6:e0:d8:e0:b4:35:df:fb:0a:5e:c0:4f:0d:a4:
                    c9:1e:06:69:b4:76:1d:5a:de:af:1c:8b:e5:9b:e0:
                    6f:16:92:a6:9f:a5:83:6e:65:e2:61:56:4c:4e:a8:
                    66:e7:e3:d6:c2:85:77:c8:90:81:2c:02:2c:b5:5d:
                    ef:88:18:0b:04:03:3a:a2:27:92:03:c4:91:ab:87:
                    80:38:0a:b0:f4:0d:60:04:9d:bf:2d:15:c1:5b:a1:
                    e6:af:cd:8d:d0:34:71:f0:09:91:92:33:ff:22:de:
                    c0:28:a4:1d:33:a0:13:a5:d4:76:0a:1f:aa:6c:b9:
                    6f:d1:71:12:f4:2c:99:ac:db:26:e5:46:90:8e:ca:
                    ea:1d:3c:eb:a7:dd:97:c4:0e:5a:9c:b8:58:80:3c:
                    7c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:7D:98:36:D7:C1:4B:98:0D:CC:A9:B4:DF:A4:D8:F5:C5:77:A1:F6
            X509v3 Authority Key Identifier:
                keyid:BA:A4:A6:EB:DB:38:3E:11:9D:69:53:C7:7F:16:86:6E:73:EF:2D:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:6d:ed:9f:e1:8c:a2:95:83:c1:6a:3f:a5:7e:47:d2:49:ff:
         a9:93:bd:37:0f:35:a2:8f:48:e3:bb:49:e0:96:ff:b7:57:bd:
         46:b6:2f:4c:41:61:3e:ef:c7:02:34:cf:1e:b5:2d:70:b2:36:
         02:50:2f:4b:7c:ec:4b:4d:96:cc:83:22:2b:c0:77:3b:15:07:
         ec:ef:40:06:c5:3e:a7:00:55:69:fd:9d:f8:16:b4:46:77:b3:
         b3:61:0d:75:e3:96:e8:61:3d:cc:af:48:b7:a6:1c:77:33:9e:
         7f:b6:6d:60:eb:c3:f6:ba:e4:e2:3c:cb:84:0e:44:97:10:aa:
         6a:0b:28:6a:2f:b3:a1:47:be:1f:ff:b2:46:86:47:dc:f7:59:
         c8:f1:ee:15:bd:c6:af:0a:0c:27:0b:ba:4a:01:0a:01:1c:ad:
         27:64:e4:a1:2c:8f:60:20:68:ad:7d:6c:10:5d:38:af:d5:0d:
         63:dc:bf:c8:54:4d:e1:05:2f:3d:d5:81:72:ca:8c:8f:85:e9:
         c8:25:ec:0a:5b:ab:65:d7:30:2b:02:32:c9:9f:a8:5a:91:10:
         73:97:ff:0b:95:05:a4:0e:6a:9f:97:dd:62:28:53:0e:fa:81:
         eb:74:56:ad:51:a1:fb:b0:77:1e:fb:d8:93:db:8d:01:c4:6b:
         c0:89:1c:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWUa4ojn6lL12WLbo/GaMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYTRhNmViZGIzODNlMTE5ZDY5NTNjNzdmMTY4NjZlNzNl
ZjJkYjUwHhcNMjYwNTEyMTgwMDUwWhcNMjYwNTEzMTgwMDUwWjAzMTEwLwYDVQQD
EyhmMjdkOTgzNmQ3YzE0Yjk4MGRjY2E5YjRkZmE0ZDhmNWM1NzdhMWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qTjUQTVldpnyplelWoPl6azhnBg
Hh+2RXypdiZlW4ow29z0PIexm+tf3Ga0t2NOEQpgJDYEm3Dtq8DfNf/Mg5RNezfg
OojCZhjxWlL8EQpwJcilKgFCEulKS7iy/vHD52Z2gX/oXH+39uDY4LQ13/sKXsBP
DaTJHgZptHYdWt6vHIvlm+BvFpKmn6WDbmXiYVZMTqhm5+PWwoV3yJCBLAIstV3v
iBgLBAM6oieSA8SRq4eAOAqw9A1gBJ2/LRXBW6Hmr82N0DRx8AmRkjP/It7AKKQd
M6ATpdR2Ch+qbLlv0XES9CyZrNsm5UaQjsrqHTzrp92XxA5anLhYgDx8LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJ9mDbXwUuYDcyptN+k2PXFd6H2MB8GA1UdIwQY
MBaAFLqkpuvbOD4RnWlTx38Whm5z7y21MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXFTbTY5czRQaEdkYVZQSGZ4YUdiblB2TGJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84ZGFhMjktYzg1Ny00MGMyLWI5N2Et
ODM5YWQ3ZDA5M2VkLzEvdXFTbTY5czRQaEdkYVZQSGZ4YUdiblB2TGJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS84ZGFhMjktYzg1Ny00MGMyLWI5N2EtODM5YWQ3ZDA5M2Vk
LzEvdXFTbTY5czRQaEdkYVZQSGZ4YUdiblB2TGJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABm3tn+GM
opWDwWo/pX5H0kn/qZO9Nw81oo9I47tJ4Jb/t1e9RrYvTEFhPu/HAjTPHrUtcLI2
AlAvS3zsS02WzIMiK8B3OxUH7O9ABsU+pwBVaf2d+Ba0Rnezs2ENdeOW6GE9zK9I
t6YcdzOef7ZtYOvD9rrk4jzLhA5ElxCqagsoai+zoUe+H/+yRoZH3PdZyPHuFb3G
rwoMJwu6SgEKARytJ2TkoSyPYCBorX1sEF04r9UNY9y/yFRN4QUvPdWBcsqMj4Xp
yCXsClurZdcwKwIyyZ+oWpEQc5f/C5UFpA5qn5fdYihTDvqB63RWrVGh+7B3HvvY
k9uNAcRrwIkcQw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:50:59 2026 by rpki-client