Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft
File:                     uhfrfV8E0nFV8gF4bzkPtAimquQ.mft (raw, json)
Hash identifier:          qbdZd0y1ctYJakwLVFl/D0wUVnmfm6JJqMk6iI8v7wo=
Subject key identifier:   6A:AC:5B:7F:4A:9B:2B:B2:8C:B8:94:98:F7:8B:13:A9:1E:AD:52:F6
Authority key identifier: BA:17:EB:7D:5F:04:D2:71:55:F2:01:78:6F:39:0F:B4:08:A6:AA:E4
Certificate issuer:       /CN=ba17eb7d5f04d27155f201786f390fb408a6aae4
Certificate serial:       019F946E2DFB9D3ACEB23E101E87779F5CD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft
Manifest number:          0201
Signing time:             Fri 24 Jul 2026 14:01:16 +0000
Manifest this update:     Fri 24 Jul 2026 14:01:16 +0000
Manifest next update:     Sat 25 Jul 2026 14:01:16 +0000
Files and hashes:         1: 0yT0OXiNw9csRLbDIHPuRhRNJuA.roa (hash: V99TnpgsuLfThbZigceHdcceXYaalafIhYll4v0qF0s=)
                          2: uhfrfV8E0nFV8gF4bzkPtAimquQ.crl (hash: 39Dbtoq+lLzMOI5ueLTrYwr9vGl5BpcNMiCYUcFEj64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 14:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:6e:2d:fb:9d:3a:ce:b2:3e:10:1e:87:77:9f:5c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba17eb7d5f04d27155f201786f390fb408a6aae4
        Validity
            Not Before: Jul 24 14:01:16 2026 GMT
            Not After : Jul 25 14:01:16 2026 GMT
        Subject: CN=6aac5b7f4a9b2bb28cb89498f78b13a91ead52f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5f:30:5e:a6:2b:c0:f6:d8:36:5f:83:b2:6e:
                    bd:81:e9:2c:a1:ea:83:7e:e0:61:df:91:4d:50:4d:
                    c9:79:b6:63:c2:3d:7a:7e:1c:fd:2f:c8:dc:38:82:
                    9d:95:e1:85:af:5d:ae:12:ca:ce:4f:1d:81:3b:14:
                    ab:48:0c:b3:6d:83:9f:f5:20:72:b8:53:d6:7a:f4:
                    9a:be:7b:2a:6f:a6:b0:c9:bb:9f:dd:5a:e9:d3:f2:
                    fb:e3:b9:92:17:ca:96:2b:e9:61:23:a2:87:49:d4:
                    fd:21:5f:69:e6:b3:d6:5f:aa:22:0e:da:ae:db:e0:
                    55:50:39:1d:e7:7b:70:19:65:2e:f8:b1:63:3c:10:
                    d0:05:56:13:4e:61:b2:20:4d:1c:ba:22:52:f4:73:
                    3e:79:c4:90:00:b4:81:ce:f8:0a:44:a7:72:b0:d8:
                    d6:67:e0:25:09:99:39:b9:92:4c:1e:99:8f:62:dc:
                    31:6e:b9:77:3f:bf:68:36:0a:da:a6:9f:1b:cb:c0:
                    0d:85:3f:03:76:28:13:0c:e2:91:c0:32:00:39:54:
                    33:ab:63:4c:55:f4:1a:2a:c9:e8:2b:6b:a6:51:79:
                    62:84:c6:3e:f3:2f:15:b7:f7:aa:f9:7b:35:19:7e:
                    d8:1d:9b:f4:65:33:e9:2d:c4:f0:7d:0b:52:a9:6c:
                    bb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:AC:5B:7F:4A:9B:2B:B2:8C:B8:94:98:F7:8B:13:A9:1E:AD:52:F6
            X509v3 Authority Key Identifier:
                keyid:BA:17:EB:7D:5F:04:D2:71:55:F2:01:78:6F:39:0F:B4:08:A6:AA:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:9b:c5:b7:27:a9:17:17:2b:6c:9b:2c:63:2d:65:50:55:dd:
         8f:c9:97:31:fa:ab:50:c3:0f:35:f8:f2:5d:41:1f:54:26:fa:
         89:3f:51:cd:3f:26:a6:2b:5d:0b:cf:1f:bc:3f:1b:de:e7:56:
         62:e9:76:55:92:a6:e7:69:28:82:9e:82:51:e7:d4:7d:13:3d:
         fa:56:3e:9e:93:8e:d8:e0:82:c3:62:18:fe:a1:5e:b5:a9:1a:
         52:5e:c9:fb:40:a9:0e:b3:b7:6f:7a:40:a4:07:ba:40:63:87:
         ff:a8:f3:64:61:3d:c2:f3:0d:74:de:9a:ce:07:3e:77:ad:54:
         1f:64:b0:7f:8b:a3:9d:1a:6a:e1:c0:3a:1b:61:68:b5:de:fa:
         7d:da:d1:dd:52:d7:a0:95:b3:bf:cb:13:75:50:b5:78:97:59:
         d2:c2:77:cc:24:95:58:da:f6:61:3a:51:5a:7a:33:9f:7f:67:
         11:00:c8:cc:d3:69:42:e1:0e:c1:0b:4e:06:fd:ef:1a:c8:fe:
         27:4d:44:4b:b4:78:c9:ab:11:46:2f:23:3d:66:37:55:ab:dd:
         da:1b:83:89:b2:bc:24:91:53:ca:df:43:57:65:76:d5:3c:e0:
         b7:33:86:09:71:45:d6:c1:03:4a:90:4e:d4:20:ab:86:8c:67:
         9d:bd:32:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ubi37nTrOsj4QHod3n1zQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhMTdlYjdkNWYwNGQyNzE1NWYyMDE3ODZmMzkwZmI0MDhh
NmFhZTQwHhcNMjYwNzI0MTQwMTE2WhcNMjYwNzI1MTQwMTE2WjAzMTEwLwYDVQQD
Eyg2YWFjNWI3ZjRhOWIyYmIyOGNiODk0OThmNzhiMTNhOTFlYWQ1MmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV8wXqYrwPbYNl+Dsm69geksoeqD
fuBh35FNUE3JebZjwj16fhz9L8jcOIKdleGFr12uEsrOTx2BOxSrSAyzbYOf9SBy
uFPWevSavnsqb6awybuf3Vrp0/L747mSF8qWK+lhI6KHSdT9IV9p5rPWX6oiDtqu
2+BVUDkd53twGWUu+LFjPBDQBVYTTmGyIE0cuiJS9HM+ecSQALSBzvgKRKdysNjW
Z+AlCZk5uZJMHpmPYtwxbrl3P79oNgrapp8by8ANhT8DdigTDOKRwDIAOVQzq2NM
VfQaKsnoK2umUXlihMY+8y8Vt/eq+Xs1GX7YHZv0ZTPpLcTwfQtSqWy7ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqsW39KmyuyjLiUmPeLE6kerVL2MB8GA1UdIwQY
MBaAFLoX631fBNJxVfIBeG85D7QIpqrkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWhmcmZWOEUwbkZWOGdGNGJ6a1B0QWltcXVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xM2QxNzUtZjY3NS00YjJlLWE0YjAt
MzBhZTEyNjQ2NGY3LzEvdWhmcmZWOEUwbkZWOGdGNGJ6a1B0QWltcXVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8xM2QxNzUtZjY3NS00YjJlLWE0YjAtMzBhZTEyNjQ2NGY3
LzEvdWhmcmZWOEUwbkZWOGdGNGJ6a1B0QWltcXVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqpvFtyep
FxcrbJssYy1lUFXdj8mXMfqrUMMPNfjyXUEfVCb6iT9RzT8mpitdC88fvD8b3udW
Yul2VZKm52kogp6CUefUfRM9+lY+npOO2OCCw2IY/qFetakaUl7J+0CpDrO3b3pA
pAe6QGOH/6jzZGE9wvMNdN6azgc+d61UH2Swf4ujnRpq4cA6G2Fotd76fdrR3VLX
oJWzv8sTdVC1eJdZ0sJ3zCSVWNr2YTpRWnozn39nEQDIzNNpQuEOwQtOBv3vGsj+
J01ES7R4yasRRi8jPWY3Vavd2huDibK8JJFTyt9DV2V21TzgtzOGCXFF1sEDSpBO
1CCrhoxnnb0yqg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:17:00 2026 by rpki-client