Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft
File:                     uJQ3VOkjRai7qz2yvDbWGOXswOg.mft (raw, json)
Hash identifier:          QomRpmyaDu9HEl2vzG8bDedVGSkhYCBKnolUiQ46RqU=
Subject key identifier:   56:98:41:9D:F9:15:4C:CC:2F:55:F6:C3:E1:A8:D6:78:DE:53:65:B4
Authority key identifier: B8:94:37:54:E9:23:45:A8:BB:AB:3D:B2:BC:36:D6:18:E5:EC:C0:E8
Certificate issuer:       /CN=b8943754e92345a8bbab3db2bc36d618e5ecc0e8
Certificate serial:       019CE523A7D6F8BEEB418F808085AEC78D21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft
Manifest number:          17F8
Signing time:             Fri 13 Mar 2026 03:00:44 +0000
Manifest this update:     Fri 13 Mar 2026 03:00:44 +0000
Manifest next update:     Sat 14 Mar 2026 03:00:44 +0000
Files and hashes:         1: uJQ3VOkjRai7qz2yvDbWGOXswOg.crl (hash: QEr9PXKEuy4mM5bOcBWo1TIVNh9VlGWqZd/xSDV7y/M=)
                          2: wFgOguyGf2k_urlg3TTD49UB-Bc.roa (hash: mmkwLxl45AUjDJ9WsNq5QpGXB2gTpDmmeU8A9ngZEvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:23:a7:d6:f8:be:eb:41:8f:80:80:85:ae:c7:8d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8943754e92345a8bbab3db2bc36d618e5ecc0e8
        Validity
            Not Before: Mar 13 03:00:44 2026 GMT
            Not After : Mar 14 03:00:44 2026 GMT
        Subject: CN=5698419df9154ccc2f55f6c3e1a8d678de5365b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4c:71:ba:e9:d6:6e:96:48:9a:17:dc:00:e2:
                    35:bc:4b:14:99:fa:63:41:73:e6:bb:bf:0e:ee:be:
                    94:44:4e:15:71:2c:65:e3:44:c5:a4:ab:59:53:ff:
                    4e:85:15:2b:f4:83:27:89:ee:02:b9:5e:bf:7f:fb:
                    9b:4d:15:c1:b0:89:5c:42:36:da:0d:33:f1:f6:e7:
                    78:e1:f3:60:1d:19:35:22:63:4d:8e:40:3a:7d:59:
                    73:bc:3b:0c:4f:79:4c:76:20:2e:55:cb:f5:84:5f:
                    b0:e7:5f:11:70:84:e8:88:55:ff:4e:65:96:f0:87:
                    40:99:b9:6e:29:5e:cd:f0:2d:f0:cb:d8:2e:62:6b:
                    b5:97:5a:4e:84:71:3f:e0:93:12:34:23:53:ac:e7:
                    15:0e:66:fe:bc:d7:c2:8d:9e:5e:46:16:ea:eb:34:
                    1b:39:a1:25:63:46:51:56:44:7a:7d:61:db:43:3e:
                    4b:d9:43:cd:4f:c6:03:d4:65:7a:04:00:38:09:9d:
                    5a:70:6e:47:6f:60:20:d6:76:81:6d:44:f2:58:c0:
                    0d:08:4a:8b:6e:41:b6:f7:d7:80:b6:5d:4e:4d:3a:
                    8f:1e:0d:05:ff:54:05:02:3f:52:48:b4:c1:c3:45:
                    ff:78:43:9f:e3:f7:e8:47:fc:df:e3:24:7a:24:84:
                    f9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:98:41:9D:F9:15:4C:CC:2F:55:F6:C3:E1:A8:D6:78:DE:53:65:B4
            X509v3 Authority Key Identifier:
                keyid:B8:94:37:54:E9:23:45:A8:BB:AB:3D:B2:BC:36:D6:18:E5:EC:C0:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:45:80:29:02:af:c5:3f:0f:13:2b:53:32:db:49:60:c2:d8:
         75:97:f5:8b:49:d2:fa:d6:fd:1a:1a:8f:4b:31:dc:d6:31:2c:
         31:b5:ee:dd:73:04:26:3b:5d:f4:15:f0:d2:85:bc:bd:d8:c5:
         17:81:9a:a0:b2:86:b3:84:4c:7c:72:2a:13:c7:29:ab:df:4b:
         bb:3e:e8:55:ae:ca:2f:12:27:71:d8:22:dc:38:db:b9:41:bc:
         ba:2e:de:83:c6:a4:94:0d:5a:e9:36:45:93:0e:fb:c3:dc:f0:
         9a:55:fd:3a:53:9c:b6:ac:57:09:ed:d2:04:f8:22:22:5a:a4:
         94:5b:0d:cb:a1:1b:f7:c2:a7:18:a7:dc:57:e8:a4:da:a9:47:
         1a:96:49:1f:03:40:8b:ad:ee:66:05:03:1d:2e:21:7a:d1:ca:
         c0:b3:33:36:53:1e:43:43:84:2d:d6:8c:70:ba:4e:a3:ba:09:
         28:04:5d:4f:d2:06:bd:4a:bc:61:69:c2:e8:95:c5:2b:8e:e4:
         f1:08:8d:1d:0f:ea:a1:8a:d2:20:e7:ae:55:9d:08:7a:49:d9:
         f6:f9:e5:e9:13:be:2f:9e:bd:20:f2:13:fc:7c:6a:9e:36:55:
         67:d6:b2:5d:7f:0b:fa:9c:fc:1f:1e:8d:ca:2a:63:1b:b1:91:
         8d:de:cc:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlI6fW+L7rQY+AgIWux40hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4OTQzNzU0ZTkyMzQ1YThiYmFiM2RiMmJjMzZkNjE4ZTVl
Y2MwZTgwHhcNMjYwMzEzMDMwMDQ0WhcNMjYwMzE0MDMwMDQ0WjAzMTEwLwYDVQQD
Eyg1Njk4NDE5ZGY5MTU0Y2NjMmY1NWY2YzNlMWE4ZDY3OGRlNTM2NWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUxxuunWbpZImhfcAOI1vEsUmfpj
QXPmu78O7r6URE4VcSxl40TFpKtZU/9OhRUr9IMnie4CuV6/f/ubTRXBsIlcQjba
DTPx9ud44fNgHRk1ImNNjkA6fVlzvDsMT3lMdiAuVcv1hF+w518RcIToiFX/TmWW
8IdAmbluKV7N8C3wy9guYmu1l1pOhHE/4JMSNCNTrOcVDmb+vNfCjZ5eRhbq6zQb
OaElY0ZRVkR6fWHbQz5L2UPNT8YD1GV6BAA4CZ1acG5Hb2Ag1naBbUTyWMANCEqL
bkG299eAtl1OTTqPHg0F/1QFAj9SSLTBw0X/eEOf4/foR/zf4yR6JIT5WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFaYQZ35FUzML1X2w+Go1njeU2W0MB8GA1UdIwQY
MBaAFLiUN1TpI0Wou6s9srw21hjl7MDoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUpRM1ZPa2pSYWk3cXoyeXZEYldHT1hzd09nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi81NjZjY2YtMDRlZS00ODIzLWE3ZmMt
M2U2YTE0ZGUyYzQ3LzEvdUpRM1ZPa2pSYWk3cXoyeXZEYldHT1hzd09nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi81NjZjY2YtMDRlZS00ODIzLWE3ZmMtM2U2YTE0ZGUyYzQ3
LzEvdUpRM1ZPa2pSYWk3cXoyeXZEYldHT1hzd09nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMUWAKQKv
xT8PEytTMttJYMLYdZf1i0nS+tb9GhqPSzHc1jEsMbXu3XMEJjtd9BXw0oW8vdjF
F4GaoLKGs4RMfHIqE8cpq99Luz7oVa7KLxIncdgi3DjbuUG8ui7eg8aklA1a6TZF
kw77w9zwmlX9OlOctqxXCe3SBPgiIlqklFsNy6Eb98KnGKfcV+ik2qlHGpZJHwNA
i63uZgUDHS4hetHKwLMzNlMeQ0OELdaMcLpOo7oJKARdT9IGvUq8YWnC6JXFK47k
8QiNHQ/qoYrSIOeuVZ0IeknZ9vnl6RO+L569IPIT/HxqnjZVZ9ayXX8L+pz8Hx6N
yipjG7GRjd7MeQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 07:06:52 2026 by rpki-client