Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.mft
File:                     1-uvxB_Bfup1OTKYa6gwXclGfXjg.mft (raw, json)
Hash identifier:          F9c3TYA235cPNea+lPtfHJuv4Yfq+x8cpgZdPDrMtg8=
Subject key identifier:   D8:1E:72:10:18:87:23:54:03:E5:17:3A:AA:07:AE:55:4D:84:03:05
Authority key identifier: FA:EB:F1:07:F0:5F:BA:9D:4E:4C:A6:1A:EA:0C:17:72:51:9F:5E:38
Certificate issuer:       /CN=faebf107f05fba9d4e4ca61aea0c1772519f5e38
Certificate serial:       01A03FDFF2F5E313FA89D0A19641E789E077
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uvxB_Bfup1OTKYa6gwXclGfXjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.mft
Manifest number:          03E3
Signing time:             Wed 26 Aug 2026 21:00:36 +0000
Manifest this update:     Wed 26 Aug 2026 21:00:36 +0000
Manifest next update:     Thu 27 Aug 2026 21:00:36 +0000
Files and hashes:         1: 1-uvxB_Bfup1OTKYa6gwXclGfXjg.crl (hash: 2I3JbSJGOnkc7uBYH907E8ZKY0sDTJOcg1rJ2jJAGSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-uvxB_Bfup1OTKYa6gwXclGfXjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3f:df:f2:f5:e3:13:fa:89:d0:a1:96:41:e7:89:e0:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faebf107f05fba9d4e4ca61aea0c1772519f5e38
        Validity
            Not Before: Aug 26 21:00:36 2026 GMT
            Not After : Aug 27 21:00:36 2026 GMT
        Subject: CN=d81e72101887235403e5173aaa07ae554d840305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:01:e3:ee:77:75:33:04:2d:d6:98:a1:e2:36:
                    77:d2:a5:09:64:8c:e2:34:33:4f:1c:63:87:3f:23:
                    f2:db:56:0e:45:eb:8e:64:b2:a5:0d:34:a1:73:f9:
                    2a:57:2c:bd:94:14:53:f6:21:1a:b2:2b:9c:a3:78:
                    7f:ab:ca:67:f2:1e:7c:dd:6c:00:9d:4f:fc:19:51:
                    15:87:bb:39:71:ad:ea:0d:3c:98:73:25:3f:da:a5:
                    a9:4a:c0:a5:6b:fb:4c:b6:2d:5a:64:91:37:6b:f4:
                    6a:31:8d:3e:77:3d:5b:f1:0d:48:00:1f:49:20:03:
                    10:8a:ad:e6:a2:72:04:80:bf:7f:5f:a9:f7:eb:a8:
                    83:20:1f:2a:a4:df:8e:1a:cf:af:c8:99:25:4a:76:
                    e7:86:4c:04:f8:ed:f1:33:d5:72:dc:2a:34:1f:c7:
                    17:dc:69:80:2a:9d:be:66:9b:6d:69:9a:ae:f2:8b:
                    5a:88:8c:53:fa:bf:a0:c3:f3:ae:f8:ec:e6:94:80:
                    ee:82:40:86:58:d9:35:78:02:25:f9:22:76:27:d0:
                    a5:e5:a0:4e:cb:18:9a:3a:e6:fe:1c:af:8c:21:d0:
                    b5:83:32:55:78:e2:81:15:97:ec:f6:35:25:02:e0:
                    3a:89:f9:40:19:0e:4b:bc:68:48:2f:50:22:b3:28:
                    8a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:1E:72:10:18:87:23:54:03:E5:17:3A:AA:07:AE:55:4D:84:03:05
            X509v3 Authority Key Identifier:
                keyid:FA:EB:F1:07:F0:5F:BA:9D:4E:4C:A6:1A:EA:0C:17:72:51:9F:5E:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uvxB_Bfup1OTKYa6gwXclGfXjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:17:9b:2f:6f:10:12:2b:da:3f:02:5b:4b:c9:b3:ee:85:8a:
         99:fc:7b:77:da:fb:34:d1:7d:32:62:2a:61:c8:bc:a4:44:8a:
         a3:c5:a5:f0:db:72:d3:fa:0d:12:df:c9:c9:fe:7e:f8:62:61:
         73:43:5e:de:be:7c:c4:f1:8d:2a:de:6f:99:01:a3:83:ab:cd:
         b2:9e:98:8d:59:00:26:d6:dc:a0:f2:49:21:47:70:a9:93:73:
         5e:a5:4d:b1:b4:a7:70:1a:1f:93:fb:0d:cb:cf:a3:50:57:6b:
         fc:60:ed:85:25:3c:d9:f2:be:1c:9d:c4:5c:54:00:5a:65:88:
         b3:5f:8d:84:41:17:6b:18:29:6e:00:76:d6:80:ab:39:1e:fb:
         0d:7c:93:82:94:04:4c:ae:e7:ac:44:54:49:76:5c:9a:c4:c5:
         8f:61:ee:31:87:31:e0:b9:a8:90:5a:95:3a:f3:dd:70:30:bf:
         ab:4b:c3:5c:ea:62:d0:8c:bf:eb:90:1e:ed:d9:37:16:ed:f5:
         6b:f6:96:39:e8:75:18:64:08:95:44:2f:6e:94:b7:6a:80:e2:
         32:e1:ed:b8:1a:af:be:b9:12:48:7d:44:73:8b:9d:88:e1:c2:
         ec:de:4d:9c:47:77:7a:59:e2:f5:96:26:a1:d0:1c:2a:29:00:
         88:37:6e:f8
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaA/3/L14xP6idChlkHnieB3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZWJmMTA3ZjA1ZmJhOWQ0ZTRjYTYxYWVhMGMxNzcyNTE5
ZjVlMzgwHhcNMjYwODI2MjEwMDM2WhcNMjYwODI3MjEwMDM2WjAzMTEwLwYDVQQD
EyhkODFlNzIxMDE4ODcyMzU0MDNlNTE3M2FhYTA3YWU1NTRkODQwMzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwHj7nd1MwQt1pih4jZ30qUJZIzi
NDNPHGOHPyPy21YOReuOZLKlDTShc/kqVyy9lBRT9iEasiuco3h/q8pn8h583WwA
nU/8GVEVh7s5ca3qDTyYcyU/2qWpSsCla/tMti1aZJE3a/RqMY0+dz1b8Q1IAB9J
IAMQiq3monIEgL9/X6n366iDIB8qpN+OGs+vyJklSnbnhkwE+O3xM9Vy3Co0H8cX
3GmAKp2+ZpttaZqu8otaiIxT+r+gw/Ou+OzmlIDugkCGWNk1eAIl+SJ2J9Cl5aBO
yxiaOub+HK+MIdC1gzJVeOKBFZfs9jUlAuA6iflAGQ5LvGhIL1AisyiKJQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNgechAYhyNUA+UXOqoHrlVNhAMFMB8GA1UdIwQY
MBaAFPrr8QfwX7qdTkymGuoMF3JRn144MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS11dnhCX0JmdXAxT1RLWWE2Z3dYY2xHZlhqZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvMDY5NjI4LTk3ZGEtNDBmZS05YTA4
LTY4ZWY4ODJiYzk3My8xLzEtdXZ4Ql9CZnVwMU9US1lhNmd3WGNsR2ZYamcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzJiLzA2OTYyOC05N2RhLTQwZmUtOWEwOC02OGVmODgyYmM5
NzMvMS8xLXV2eEJfQmZ1cDFPVEtZYTZnd1hjbEdmWGpnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABReb
L28QEivaPwJbS8mz7oWKmfx7d9r7NNF9MmIqYci8pESKo8Wl8Nty0/oNEt/Jyf5+
+GJhc0Ne3r58xPGNKt5vmQGjg6vNsp6YjVkAJtbcoPJJIUdwqZNzXqVNsbSncBof
k/sNy8+jUFdr/GDthSU82fK+HJ3EXFQAWmWIs1+NhEEXaxgpbgB21oCrOR77DXyT
gpQETK7nrERUSXZcmsTFj2HuMYcx4LmokFqVOvPdcDC/q0vDXOpi0Iy/65Ae7dk3
Fu31a/aWOeh1GGQIlUQvbpS3aoDiMuHtuBqvvrkSSH1Ec4udiOHC7N5NnEd3elni
9ZYmodAcKikAiDdu+A==
-----END CERTIFICATE-----
Generated at Thu Aug 27 06:23:10 2026 by rpki-client