Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.mft
File:                     uBcWKHfan0Awu8uf6KwUPmqyhxs.mft (raw, json)
Hash identifier:          rgmY/8edESfWKM3bl1N23jm74qtFGh+0rXdGpGw3moE=
Subject key identifier:   37:C4:B0:73:39:F7:8D:CD:DD:81:26:BD:20:4A:C2:30:22:A3:3E:D0
Authority key identifier: B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B
Certificate issuer:       /CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b
Certificate serial:       019CD98CF491A50857C6DAC12E46C509764E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.mft
Manifest number:          16E9
Signing time:             Tue 10 Mar 2026 21:00:19 +0000
Manifest this update:     Tue 10 Mar 2026 21:00:19 +0000
Manifest next update:     Wed 11 Mar 2026 21:00:19 +0000
Files and hashes:         1: 2WXoZsn32fgVX8aqYMrc08d9fY8.roa (hash: bkwPNVH2ORQnIRn5LBtVmwQryOqVX18kB3tiu7t2/40=)
                          2: D48UgkokE1vhCTwhPkqZ0LLoocA.roa (hash: fMJLF+vFo9vEbRLFDDkPD4SnqGkEa/lJe6CpbUSG9eQ=)
                          3: PEnbwEnEOUP5a1qMbrFIPU4NOkU.roa (hash: CnUSPKXJdJobJ8CN6jHtjZLTtAxSZjk1/h8PvReUstg=)
                          4: sDmZmF3fo3gdZLDEv2WCfsdt6Z8.roa (hash: EiTHbukI/Tpn+Gtw5R4ZOGfo0HNyDTx7rIEuV9YoQNo=)
                          5: uBcWKHfan0Awu8uf6KwUPmqyhxs.crl (hash: TdLJShbAtJGlUs9j9AAsuC1B/s1pi7HFCNNJTolNzfs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Mar 2026 21:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:d9:8c:f4:91:a5:08:57:c6:da:c1:2e:46:c5:09:76:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b
        Validity
            Not Before: Mar 10 21:00:19 2026 GMT
            Not After : Mar 11 21:00:19 2026 GMT
        Subject: CN=37c4b07339f78dcddd8126bd204ac23022a33ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a2:cc:a7:ce:92:01:67:99:44:7a:bd:5d:09:
                    58:19:94:65:04:49:cc:8a:03:dd:72:21:69:a7:8d:
                    8f:d3:3a:51:a1:3a:3b:70:c1:a0:3f:24:1d:11:ec:
                    82:1c:9c:6b:e0:4a:03:9c:9d:61:b6:16:69:01:a1:
                    9d:f9:1b:6d:fa:9f:c9:c2:ae:d5:8c:43:20:10:51:
                    a0:34:bf:cb:fd:a5:45:85:98:70:67:30:39:fd:ee:
                    29:a2:e6:38:72:f8:40:83:73:b7:30:25:3a:75:b3:
                    9a:8c:0b:d8:65:3d:99:0a:f5:a1:75:20:23:16:f5:
                    e2:cf:25:62:84:bd:58:6b:60:9e:51:fe:f8:e9:1d:
                    c5:11:d5:10:91:37:28:9b:69:83:7c:88:2f:af:e8:
                    f1:fe:64:42:87:76:e6:55:b7:ff:d1:b5:d8:18:7a:
                    97:d4:6c:bd:b3:47:39:b9:12:6d:3b:fe:4e:08:19:
                    e2:6a:f6:ba:e4:bb:95:5d:b5:a2:43:94:99:4f:fe:
                    1a:b6:23:bc:0a:29:9d:0e:d1:12:88:02:c3:c1:40:
                    ca:70:a7:e9:e2:57:7d:ad:6b:bd:74:55:09:b0:ff:
                    04:77:c6:9d:a8:b0:53:2e:9d:21:f0:86:9b:b3:07:
                    95:bd:4b:34:12:ee:19:04:01:5c:3c:fe:f8:29:f2:
                    a1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C4:B0:73:39:F7:8D:CD:DD:81:26:BD:20:4A:C2:30:22:A3:3E:D0
            X509v3 Authority Key Identifier:
                keyid:B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:ce:f8:dd:f8:a8:f6:f1:6e:12:1a:68:b6:b9:1e:d7:75:da:
         2e:70:dc:96:94:5a:d8:a7:14:49:33:4b:f0:95:ef:d9:42:f3:
         01:89:62:55:27:e7:6e:0e:5d:d8:cb:dc:bf:1e:7d:ef:8f:23:
         21:5e:f9:92:89:cc:c1:7b:a2:81:a9:4d:2c:e8:fe:2d:f8:35:
         7e:17:09:57:74:90:b7:d7:a3:b2:5b:29:0c:a4:af:06:52:f2:
         0b:3b:a7:27:1e:82:48:93:38:05:8c:fa:bb:e4:68:5c:c5:83:
         88:5b:f0:b8:f3:71:3e:0d:e0:e2:6d:20:f5:0e:96:01:94:e8:
         7b:dc:05:1a:30:1d:99:79:fe:ae:01:4d:5e:a0:6d:50:3b:b8:
         b8:e4:30:95:68:95:80:d1:5d:58:1f:7e:14:be:51:57:44:3e:
         79:d5:b8:8d:e8:f6:cf:aa:71:76:a3:8c:2b:40:7b:40:4b:96:
         e3:0a:93:2f:fb:e3:97:f3:f4:55:0f:cd:80:49:73:20:34:c2:
         c5:74:15:fe:7a:39:91:3c:87:fd:90:d5:67:01:dc:68:3e:06:
         67:84:c0:17:37:d4:c8:65:7e:56:b3:c7:03:1c:ee:19:8e:f7:
         1f:01:42:fd:bf:4b:f1:c6:ff:f7:5d:1e:48:de:ae:ab:7e:5e:
         68:f6:ab:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 05:36:09 2026 by rpki-client