Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft
File:                     uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft (raw, json)
Hash identifier:          qcgbXWfpXeoYGSZepTFefGgtykFDwngIRiG9qYhwad0=
Subject key identifier:   E4:1A:8C:E6:69:14:55:A5:8B:27:CD:3B:CD:54:E5:B1:8B:0D:83:2E
Authority key identifier: B8:B3:D4:AC:E7:35:61:3E:CB:C5:91:DF:FC:29:85:F3:41:76:67:D3
Certificate issuer:       /CN=b8b3d4ace735613ecbc591dffc2985f3417667d3
Certificate serial:       019D38665BC47442B4CA2FC8723361FE4498
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft
Manifest number:          01BB
Signing time:             Sun 29 Mar 2026 07:02:05 +0000
Manifest this update:     Sun 29 Mar 2026 07:02:05 +0000
Manifest next update:     Mon 30 Mar 2026 07:02:05 +0000
Files and hashes:         1: NV3S-cYsExUdRgl5V11Uj7aYoCA.asa (hash: m9YjhpG3Ej72IcJ1NL2xN/91w8rQ4C6t6YmqSlG2Q/Q=)
                          2: ZCHxju4N5_hWAUjZ5PsoUevMzO4.roa (hash: ZuY9l1MEP5ns/5zS4M4Uxiwc0zR/t3Ns6GDag16Mf6M=)
                          3: eeJX5peQ1g-nWbA9lZGu8mlVXvk.roa (hash: /dJXTuDaINBRLHLHkbz+FLFKHSjS7Mr+y/EC0teqSLs=)
                          4: hlO_AecNEmj4D79lmjDucZzwZB4.asa (hash: /6I3ZOv6LwKowpbuh2iIMzDSrB6Wbph+0AzHVvuZ8eE=)
                          5: uLPUrOc1YT7LxZHf_CmF80F2Z9M.crl (hash: eAjmRdsiPuA6BEWqwvzguVuMUJItSvWPOjLeOxZm9EE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:66:5b:c4:74:42:b4:ca:2f:c8:72:33:61:fe:44:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8b3d4ace735613ecbc591dffc2985f3417667d3
        Validity
            Not Before: Mar 29 07:02:05 2026 GMT
            Not After : Mar 30 07:02:05 2026 GMT
        Subject: CN=e41a8ce6691455a58b27cd3bcd54e5b18b0d832e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0b:4f:29:95:52:9a:87:25:4a:2c:ce:02:11:
                    a8:32:9a:ae:be:21:e4:13:e8:ec:ff:9a:fa:9a:9c:
                    95:7e:22:db:1c:e9:f2:8e:0c:42:ab:f8:9b:c8:50:
                    02:d5:7b:fc:2e:35:e2:63:49:3b:1b:82:62:ed:20:
                    a7:91:8e:d8:93:73:30:4b:63:80:00:bb:4b:a0:42:
                    3d:e5:3b:6b:be:b0:02:04:94:5e:f4:c8:c6:9e:39:
                    0c:30:72:bb:97:32:d9:2f:33:37:72:49:2f:1f:0b:
                    d1:38:1e:27:18:51:9e:35:83:e6:ad:0e:ab:e0:87:
                    97:80:0a:c6:1d:db:03:40:01:94:3c:c4:1a:4b:e1:
                    7e:a4:33:af:7c:da:f9:e0:1b:15:90:df:a6:29:af:
                    45:2f:78:27:06:cc:c1:39:56:d5:5b:99:10:b3:f7:
                    a6:0d:15:1b:9a:20:5c:0a:b2:67:25:ae:c9:e0:d0:
                    f7:4e:0b:f0:42:57:ec:d5:6f:3d:c8:51:0d:e3:dc:
                    fa:b5:7b:67:5d:20:f2:cc:c0:6c:40:0b:4e:37:82:
                    32:32:11:d7:4b:0b:ea:8f:16:02:11:80:d5:d5:ef:
                    8a:09:8b:f8:f4:a8:52:f9:b1:7b:f3:8f:a5:02:c9:
                    bd:16:cb:7a:ea:6a:e7:bd:c5:c3:e8:ae:14:2e:5d:
                    4a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:1A:8C:E6:69:14:55:A5:8B:27:CD:3B:CD:54:E5:B1:8B:0D:83:2E
            X509v3 Authority Key Identifier:
                keyid:B8:B3:D4:AC:E7:35:61:3E:CB:C5:91:DF:FC:29:85:F3:41:76:67:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:39:7b:ff:1c:cf:cf:79:3f:23:63:19:61:d0:d2:0f:9d:bb:
         25:d5:92:f4:af:2d:d3:48:60:4c:5a:8d:8f:da:5d:a6:a9:c3:
         0c:48:fa:b7:8d:63:19:87:65:17:37:52:c6:1d:28:0f:f5:d3:
         01:8e:9d:44:f1:38:2e:89:72:a5:bb:65:fe:f0:f3:d1:0e:a4:
         fb:bd:e9:74:56:b0:51:5e:c4:1a:01:a5:4d:7c:e2:92:67:42:
         51:19:f9:e5:c4:10:a7:da:68:65:91:38:c9:c4:c1:f1:ce:ec:
         59:6c:ac:53:ae:fa:00:82:dd:00:2f:32:0d:bf:fe:49:1c:4e:
         9d:f8:37:35:ff:87:28:b7:69:c1:a5:6e:ce:a0:de:3a:a3:db:
         d4:3b:64:52:65:3d:a5:6f:52:11:e8:31:31:37:ba:ff:54:8b:
         87:a0:5b:2d:dd:1f:21:a8:a0:62:92:63:fa:7b:8b:48:91:6a:
         c2:75:48:14:4c:be:8c:2c:1a:86:4f:6b:eb:8a:2b:18:4d:bc:
         c7:c9:d6:2f:d7:85:23:69:ed:2c:7c:98:96:ce:0c:60:96:72:
         92:1b:20:33:5c:99:10:75:64:25:48:0b:e4:0a:5f:5d:60:d9:
         2d:91:b0:31:c0:46:2d:88:9d:62:0b:b8:bb:e8:10:2a:6b:88:
         41:ac:79:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:13 2026 by rpki-client