Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft
File:                     uO0-vNIVX5oXihA62rSP2osidaU.mft (raw, json)
Hash identifier:          k4mpuAOhsahYrnXxnbHiRsoMeBFGI3NoI6p2tyTrlAI=
Subject key identifier:   05:35:70:88:B5:A1:E6:5E:93:E9:F5:25:94:13:25:AE:F9:9E:9B:52
Authority key identifier: B8:ED:3E:BC:D2:15:5F:9A:17:8A:10:3A:DA:B4:8F:DA:8B:22:75:A5
Certificate issuer:       /CN=b8ed3ebcd2155f9a178a103adab48fda8b2275a5
Certificate serial:       019D39AEEE9CC882F27985D51773F8D735B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft
Manifest number:          13F7
Signing time:             Sun 29 Mar 2026 13:00:58 +0000
Manifest this update:     Sun 29 Mar 2026 13:00:58 +0000
Manifest next update:     Mon 30 Mar 2026 13:00:58 +0000
Files and hashes:         1: 1-fsHYTIUTFY0216Qbk8IXnoEcp8.roa (hash: bfgMgiAWnH7b52b8mMjuMw9kDEycqTEWeJ8kbQp2a6c=)
                          2: WIAk63chBCdGYiGDL4jJVIzgpHA.roa (hash: e3taT/GSCbu7IKCePzef39V4CQeoRg7zNm3KotlMe7A=)
                          3: Z4cd67t_oTbTTOY62m-SDIBMEfk.roa (hash: /PTXJtjmPJ7VKf+Ddpyha9KTCciauyGlpPXGyj6aw+Y=)
                          4: uO0-vNIVX5oXihA62rSP2osidaU.crl (hash: lB5TEk8c1VM0QZ4xEapdBZfRBQdLcykVAQw4aqVLe8I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:ae:ee:9c:c8:82:f2:79:85:d5:17:73:f8:d7:35:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8ed3ebcd2155f9a178a103adab48fda8b2275a5
        Validity
            Not Before: Mar 29 13:00:58 2026 GMT
            Not After : Mar 30 13:00:58 2026 GMT
        Subject: CN=05357088b5a1e65e93e9f525941325aef99e9b52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:86:7a:22:a9:7c:24:fb:4e:46:8b:75:a9:1e:
                    e7:96:52:1e:a2:57:b7:0c:38:33:10:17:1e:77:a3:
                    df:b4:bc:65:6c:7e:b9:ae:db:e5:8d:af:01:1b:bd:
                    cc:b6:85:2a:77:7b:bb:7a:bb:4d:55:1d:65:e0:a4:
                    e5:41:7b:74:d7:c2:69:60:95:87:fc:38:29:b1:62:
                    e8:c8:62:2b:86:d9:de:7b:e2:c5:0d:5e:4c:0b:38:
                    e7:24:ef:ae:46:7d:42:30:fc:ac:4f:1a:ac:73:62:
                    af:f5:3b:7c:b1:93:97:cd:28:26:17:46:ea:d7:ce:
                    bd:24:9e:dc:3d:59:38:73:5c:e3:5a:43:08:78:2f:
                    c4:60:cf:8e:91:38:7e:c7:a5:9e:11:3f:d8:74:34:
                    bd:da:45:e1:e2:69:76:c8:30:07:05:a9:2f:b1:0b:
                    1b:f8:d3:cf:26:33:bf:bd:8f:7c:07:e5:b1:51:76:
                    58:4a:36:fa:0f:04:28:c8:27:e4:3f:ef:51:2b:2d:
                    b6:24:28:7f:6d:53:1e:c1:57:d6:6e:82:2a:89:8e:
                    04:6e:93:29:ce:7c:4c:83:17:a5:a6:73:af:67:ed:
                    32:92:1f:2e:de:4f:3a:8e:a9:ba:d1:2c:5f:6e:05:
                    7c:d3:f8:11:56:fc:4a:45:b4:c3:3b:ac:c0:a7:63:
                    21:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:35:70:88:B5:A1:E6:5E:93:E9:F5:25:94:13:25:AE:F9:9E:9B:52
            X509v3 Authority Key Identifier:
                keyid:B8:ED:3E:BC:D2:15:5F:9A:17:8A:10:3A:DA:B4:8F:DA:8B:22:75:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:1e:32:75:f2:ad:eb:b6:4a:ba:94:67:8a:f4:a7:77:87:5d:
         d9:8d:56:91:a0:a8:df:a3:2a:5e:64:8f:0a:78:be:71:16:5b:
         e8:c6:37:6b:0f:8c:99:c0:84:36:1b:51:11:53:38:74:81:b9:
         c8:42:79:80:83:9b:85:a6:b2:62:41:62:84:cc:86:7c:d3:44:
         2a:bc:5f:98:4e:cc:c4:7d:f9:0a:bd:ac:c0:bb:13:12:0a:99:
         de:69:d0:00:d2:05:13:a6:90:f7:7e:12:1a:76:ae:f7:79:ad:
         61:96:79:01:aa:55:17:e2:57:ed:3e:19:76:46:c4:0f:ce:40:
         be:9b:d4:f5:95:8c:18:c5:1f:7d:ab:8c:8d:c2:b9:73:a0:cd:
         c6:39:3b:b7:76:c2:de:dd:e3:af:63:5f:47:7a:1d:11:e5:0d:
         36:14:8b:79:0c:64:9a:5b:20:51:96:a1:ed:ed:a2:a1:af:a3:
         0f:4f:06:32:f9:01:56:b7:65:00:7a:05:59:38:44:5c:22:53:
         27:43:20:3e:5d:69:b0:b0:b1:ef:65:de:9a:39:44:7c:06:aa:
         4f:c1:2e:da:c5:e2:b8:58:5a:da:13:a6:e1:38:bb:64:61:88:
         4d:b4:67:8f:90:39:76:fb:94:e5:d7:e1:82:36:ac:1e:13:56:
         78:07:1e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:25:58 2026 by rpki-client