Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft
File:                     uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft (raw, json)
Hash identifier:          ycAtnSVuXm4KmptooeznXoREhihr3Ba5yH5Ctx2mcos=
Subject key identifier:   5A:67:E2:AF:63:D8:FB:99:B2:B8:A4:01:95:D2:F8:D7:D8:3D:8E:EE
Authority key identifier: B9:46:19:87:D0:00:D8:E6:18:85:4C:E4:E3:FF:81:9F:F8:F4:D2:44
Certificate issuer:       /CN=b9461987d000d8e618854ce4e3ff819ff8f4d244
Certificate serial:       019D390A07C434503D9FA884294D57F288AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft
Manifest number:          07EC
Signing time:             Sun 29 Mar 2026 10:00:51 +0000
Manifest this update:     Sun 29 Mar 2026 10:00:51 +0000
Manifest next update:     Mon 30 Mar 2026 10:00:51 +0000
Files and hashes:         1: 8ckA-TW7EdXihYdZdkqiS3M4HTc.roa (hash: e4A0NWF+aH4l7eHRDWs3d41SyQFvOrkVOSjq2z6q+xo=)
                          2: uUYZh9AA2OYYhUzk4_-Bn_j00kQ.crl (hash: Uh0nGhCJHsQv6JcQBd4+rlv5ZKauXZCDRwpGqOptAZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:0a:07:c4:34:50:3d:9f:a8:84:29:4d:57:f2:88:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9461987d000d8e618854ce4e3ff819ff8f4d244
        Validity
            Not Before: Mar 29 10:00:51 2026 GMT
            Not After : Mar 30 10:00:51 2026 GMT
        Subject: CN=5a67e2af63d8fb99b2b8a40195d2f8d7d83d8eee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a4:f4:6d:63:8a:11:c4:83:d6:e9:28:61:1d:
                    9b:3c:bf:99:3a:58:ef:ec:b1:27:1f:03:5a:d1:88:
                    75:34:59:bb:6a:59:7b:10:30:2e:ca:f7:f4:39:38:
                    24:ed:9c:02:d0:de:eb:7f:c6:c0:35:1b:a2:29:79:
                    b8:b7:b1:b7:5d:fc:49:a4:49:f1:bf:bb:ee:c7:84:
                    f4:c6:5c:6c:a9:2f:10:86:d1:d1:34:c4:45:16:54:
                    a1:f5:17:55:9d:d1:0f:f2:a9:68:ac:49:61:97:a8:
                    cd:98:67:a1:52:2e:ef:8c:37:bd:f3:f8:95:d2:92:
                    0f:d5:9f:0a:54:fa:03:b1:71:54:11:9d:32:25:3a:
                    f9:ee:10:61:3d:88:a4:cd:dd:56:e8:87:2c:46:6a:
                    41:a5:8b:ca:8b:79:41:55:64:17:31:21:ad:fd:04:
                    3a:ef:5e:fd:f8:40:49:09:d6:5c:ff:4d:d8:6d:95:
                    8d:80:cb:8a:0b:31:5c:81:76:d4:fc:a9:e5:24:14:
                    46:2d:f8:a8:ad:e5:a8:bf:b3:b5:cc:3b:58:91:d1:
                    1e:63:d9:40:be:4e:f4:c4:91:0a:ee:d3:01:e7:83:
                    c7:7b:39:45:5d:e4:9e:f6:e7:10:d2:2f:9d:7f:51:
                    47:10:7c:7c:57:41:ba:71:f4:91:40:b7:80:2e:a6:
                    dc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:67:E2:AF:63:D8:FB:99:B2:B8:A4:01:95:D2:F8:D7:D8:3D:8E:EE
            X509v3 Authority Key Identifier:
                keyid:B9:46:19:87:D0:00:D8:E6:18:85:4C:E4:E3:FF:81:9F:F8:F4:D2:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:a9:bd:aa:bf:5f:82:31:0b:62:70:09:8c:b1:84:4c:30:53:
         49:e2:ac:36:82:6c:e9:42:49:2a:9e:9f:0a:1f:25:d8:37:1f:
         04:31:34:0c:be:28:0c:bb:4f:19:14:dc:36:65:b4:ff:d3:ed:
         05:bf:eb:37:7c:5c:66:b2:4e:77:85:70:d9:a2:2c:8f:03:64:
         02:26:f6:b5:c0:3c:11:da:ec:39:38:6b:87:bc:d3:53:d7:f6:
         6a:17:fc:6a:e5:d9:10:64:07:9c:ac:94:b2:30:08:8d:51:19:
         0f:67:f5:cb:0a:8f:1d:a6:75:58:76:8e:db:c3:e4:29:4c:da:
         76:2d:e7:23:1d:25:94:07:0e:23:e7:11:84:fa:1e:e7:04:08:
         c0:b0:48:1f:8e:9b:ce:c3:bc:4d:d6:eb:05:84:46:a1:43:40:
         36:a7:ba:33:cf:ec:60:28:cd:22:3e:06:90:c8:c1:0d:59:ee:
         0a:e9:e7:0e:88:0b:37:d3:4c:d1:11:b1:3b:f0:5d:1b:2f:0f:
         69:27:56:e1:35:91:f4:e4:6b:20:99:8c:77:04:c8:5c:d7:21:
         e5:96:1c:15:d7:e9:6e:ab:a6:e1:55:30:60:83:86:15:57:f0:
         70:3a:fe:5e:02:cb:e4:44:80:d4:19:3f:76:11:67:ed:03:18:
         2e:46:10:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:26 2026 by rpki-client