Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft
File:                     uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft (raw, json)
Hash identifier:          Jq2n9nJL1xip1f+aegtLugW0N+B5DTkgpWIOGIhSF1w=
Subject key identifier:   40:0E:B6:17:C2:6C:46:2F:C2:F5:54:14:33:A4:7F:99:CB:5F:AB:78
Authority key identifier: BB:30:15:57:64:CB:2E:E0:F5:EE:EF:CD:F5:2A:7B:12:D3:72:ED:DD
Certificate issuer:       /CN=bb30155764cb2ee0f5eeefcdf52a7b12d372eddd
Certificate serial:       019D37F73D4424EED9BE2C569FB5A59D46BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft
Manifest number:          1112
Signing time:             Sun 29 Mar 2026 05:00:43 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:43 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:43 +0000
Files and hashes:         1: VAvUr1f-cH2wVMGQJ7gXcOubzkw.roa (hash: wf7BIMcrMEI40pV4LBSertjbA6/RgKL8Q4IuVS5+68E=)
                          2: uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl (hash: iVcjDORyxr5BGd3dYenNDwxAQu4L/x6N9tqJFTO84l4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f7:3d:44:24:ee:d9:be:2c:56:9f:b5:a5:9d:46:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb30155764cb2ee0f5eeefcdf52a7b12d372eddd
        Validity
            Not Before: Mar 29 05:00:43 2026 GMT
            Not After : Mar 30 05:00:43 2026 GMT
        Subject: CN=400eb617c26c462fc2f5541433a47f99cb5fab78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d6:2b:2b:a2:12:95:f8:f5:0f:0d:dc:54:38:
                    16:2e:6a:2d:6a:d1:38:52:7d:72:fc:1e:a7:36:1b:
                    7b:9f:37:1b:12:64:a4:11:79:70:41:64:0b:b7:e0:
                    65:49:20:10:09:8a:9e:d8:e4:9b:15:45:51:32:cb:
                    3d:70:12:fa:83:65:49:4e:19:f3:38:1a:72:a1:0f:
                    31:9c:98:64:02:cc:10:42:25:bb:86:bf:1c:39:b9:
                    a0:4a:bb:32:bb:1a:61:f7:d1:d5:e1:c4:6a:87:33:
                    20:9f:ed:7f:3b:9c:09:dc:d1:77:b6:e9:1c:02:97:
                    67:1c:e2:af:6a:78:f0:c8:26:7c:37:ee:9a:ca:ed:
                    0d:12:59:82:89:b4:7e:5e:53:47:ad:8a:4f:97:06:
                    81:58:8a:b2:d7:ef:a3:09:1e:1f:43:c3:16:f7:da:
                    43:6a:47:ae:eb:2a:a5:74:3a:71:0d:2d:93:f1:fd:
                    15:91:2d:45:90:37:64:d0:c2:f4:b6:87:74:79:89:
                    6d:42:ba:d0:3b:45:5a:03:c6:5f:11:74:d7:c3:c5:
                    20:06:25:f8:2c:c0:fe:95:07:cb:97:b8:c0:53:e2:
                    93:75:72:c6:b3:10:b9:13:51:67:96:5c:43:8d:5f:
                    48:09:47:66:69:70:87:fa:37:b8:0b:05:cf:ec:d7:
                    7f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:0E:B6:17:C2:6C:46:2F:C2:F5:54:14:33:A4:7F:99:CB:5F:AB:78
            X509v3 Authority Key Identifier:
                keyid:BB:30:15:57:64:CB:2E:E0:F5:EE:EF:CD:F5:2A:7B:12:D3:72:ED:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:bd:46:6c:54:b4:92:f6:c2:21:e3:a7:97:c1:26:97:56:50:
         c2:fe:8f:e8:8f:83:f7:7d:f6:04:be:29:17:8b:cf:d0:b0:ee:
         24:cc:9e:25:91:a8:fb:1f:86:1d:7f:5a:85:49:4d:c6:cd:98:
         52:fb:73:6b:f5:cb:8a:b5:ba:bb:79:75:5d:d8:28:56:5e:52:
         32:2c:90:d3:52:31:db:d8:82:1a:ff:44:0f:2f:1c:26:3a:46:
         5a:14:16:a3:c8:4a:7c:bb:55:30:ff:20:25:b3:3f:c8:51:72:
         a1:c9:7c:0d:b6:b9:df:0d:f6:0e:7a:08:6f:69:90:1b:c5:27:
         63:0b:eb:f9:43:1e:dd:6a:70:1c:8a:1c:6c:f2:97:c9:a4:3a:
         ac:7c:69:08:f7:4d:96:dc:4b:3c:4f:f8:a5:ba:ad:e1:9c:7a:
         70:2c:87:14:7e:2d:a1:2b:49:f1:0a:07:a7:f3:bf:3a:a0:7e:
         c7:cc:02:77:c2:90:70:44:ea:0f:93:0f:06:e4:c6:60:6f:ca:
         5b:92:27:b4:c7:f7:0a:f5:31:bd:38:4f:98:11:a5:e4:29:79:
         37:5a:a1:d0:c6:a7:90:ed:6a:a9:30:24:82:55:2f:83:b3:65:
         67:07:8b:8d:31:88:74:7b:4b:b3:7c:72:9e:23:11:26:f4:3f:
         89:0f:6b:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039z1EJO7ZvixWn7WlnUa/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMzAxNTU3NjRjYjJlZTBmNWVlZWZjZGY1MmE3YjEyZDM3
MmVkZGQwHhcNMjYwMzI5MDUwMDQzWhcNMjYwMzMwMDUwMDQzWjAzMTEwLwYDVQQD
Eyg0MDBlYjYxN2MyNmM0NjJmYzJmNTU0MTQzM2E0N2Y5OWNiNWZhYjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNYrK6ISlfj1Dw3cVDgWLmotatE4
Un1y/B6nNht7nzcbEmSkEXlwQWQLt+BlSSAQCYqe2OSbFUVRMss9cBL6g2VJThnz
OBpyoQ8xnJhkAswQQiW7hr8cObmgSrsyuxph99HV4cRqhzMgn+1/O5wJ3NF3tukc
ApdnHOKvanjwyCZ8N+6ayu0NElmCibR+XlNHrYpPlwaBWIqy1++jCR4fQ8MW99pD
akeu6yqldDpxDS2T8f0VkS1FkDdk0ML0tod0eYltQrrQO0VaA8ZfEXTXw8UgBiX4
LMD+lQfLl7jAU+KTdXLGsxC5E1FnllxDjV9ICUdmaXCH+je4CwXP7Nd/dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEAOthfCbEYvwvVUFDOkf5nLX6t4MB8GA1UdIwQY
MBaAFLswFVdkyy7g9e7vzfUqexLTcu3dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXpBVlYyVExMdUQxN3VfTjlTcDdFdE55N2QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iNzk4NzEtYjFkZC00ZTZlLTk1ZTct
ZGUwMjVlNmY4NTg5LzEvdXpBVlYyVExMdUQxN3VfTjlTcDdFdE55N2QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iNzk4NzEtYjFkZC00ZTZlLTk1ZTctZGUwMjVlNmY4NTg5
LzEvdXpBVlYyVExMdUQxN3VfTjlTcDdFdE55N2QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqr1GbFS0
kvbCIeOnl8Eml1ZQwv6P6I+D9332BL4pF4vP0LDuJMyeJZGo+x+GHX9ahUlNxs2Y
Uvtza/XLirW6u3l1XdgoVl5SMiyQ01Ix29iCGv9EDy8cJjpGWhQWo8hKfLtVMP8g
JbM/yFFyocl8Dba53w32DnoIb2mQG8UnYwvr+UMe3WpwHIocbPKXyaQ6rHxpCPdN
ltxLPE/4pbqt4Zx6cCyHFH4toStJ8QoHp/O/OqB+x8wCd8KQcETqD5MPBuTGYG/K
W5IntMf3CvUxvThPmBGl5Cl5N1qh0MankO1qqTAkglUvg7NlZweLjTGIdHtLs3xy
niMRJvQ/iQ9rdg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:31 2026 by rpki-client