Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft
File:                     uF6twuxwsw-kIl7X_NVzDwx7xhY.mft (raw, json)
Hash identifier:          ezI5DSToOIY2rAGR9YxtM4H2J9cpHnvyGB0uk70Hgz0=
Subject key identifier:   FD:26:6D:1A:5E:50:B8:52:42:60:3D:3B:5C:38:95:62:58:EA:7F:A8
Authority key identifier: B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16
Certificate issuer:       /CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616
Certificate serial:       019D39411DCCA5DC5269616536C173E7C526
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft
Manifest number:          08E0
Signing time:             Sun 29 Mar 2026 11:01:01 +0000
Manifest this update:     Sun 29 Mar 2026 11:01:01 +0000
Manifest next update:     Mon 30 Mar 2026 11:01:01 +0000
Files and hashes:         1: 8pZUXvACu9QhvKuW-qMjjg-zMpg.roa (hash: 0/gavMRZtZdbhY3KH3ekU0vMqEL7/EvqYK9+J6uWS6E=)
                          2: G-toJfPo5_lPvfgOuGF2O7gK5MU.roa (hash: f/HsVZaK7DlKBZfvaInpx95ilwjwGX/MKV/SRXvYXG8=)
                          3: GSvze0OvgyB86_aIjXE_zYpEcJ8.roa (hash: i0T9AmgsVXvoJ7juXc0u6ILs8JxVxErhczJ27Ywnx4c=)
                          4: WEBxfBgljdO2-_OPHWGZu1V4u-E.roa (hash: nt1blU8jTILJsm/QWLFQx/HjDxyXCoII44gqy3P+yHo=)
                          5: daB6TCjb0g5mJAh5C9L7PP2C3bU.roa (hash: LCCpR6Wg5909zrCuVhiyOKBdbzncNfnlYiYr8mrOsJg=)
                          6: uF6twuxwsw-kIl7X_NVzDwx7xhY.crl (hash: mO0dN70yvxJnAJUSNQr5Vsdo8OQGiKurWPkGfzDNNxg=)
                          7: yvd72ao7oZeloqF7PcjwFXQOaKg.roa (hash: p8n/0jBEU3JxwNl8gzkR0TyAriDfbE7fJ2mPGP83LhU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 11:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:41:1d:cc:a5:dc:52:69:61:65:36:c1:73:e7:c5:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616
        Validity
            Not Before: Mar 29 11:01:01 2026 GMT
            Not After : Mar 30 11:01:01 2026 GMT
        Subject: CN=fd266d1a5e50b85242603d3b5c38956258ea7fa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1a:38:14:f5:6b:29:6f:eb:89:c8:3b:b4:9e:
                    a4:b9:bf:bb:3c:a5:a7:6f:b9:95:f0:57:98:ff:3e:
                    78:0b:be:ed:8f:58:11:54:88:66:eb:25:38:e6:4c:
                    49:80:87:87:c1:f9:c4:12:ce:a4:5c:f4:c8:3e:7e:
                    b8:82:50:df:b0:b0:81:f5:f8:47:f1:ae:bc:8a:76:
                    ab:e5:e1:9c:71:51:c4:34:67:31:8a:74:3d:d2:1b:
                    89:76:1c:b6:c1:81:c4:03:67:0e:b4:cb:b8:b7:5d:
                    6e:0a:b0:64:94:56:aa:ab:06:87:9a:31:5f:8c:b7:
                    c0:c5:59:61:17:57:e0:e0:d0:97:1a:b1:ee:d3:05:
                    3e:66:24:b4:1f:47:b7:8c:92:02:12:3e:c7:63:e5:
                    d3:de:25:9d:03:d6:d9:64:32:35:30:f2:22:dd:17:
                    e9:96:70:05:36:a7:1e:05:0d:b2:7a:70:2b:7a:5d:
                    0b:23:53:1c:14:83:0e:6f:c5:0e:08:57:c5:40:84:
                    61:69:2a:ee:68:c9:ca:68:ae:de:1f:55:e3:ae:7c:
                    89:7c:58:45:33:76:91:49:6a:31:71:b0:78:e1:5c:
                    b3:6b:80:6c:72:37:ac:b6:5f:8e:6e:56:2d:10:c3:
                    9c:74:c1:17:6c:ce:0b:c6:3f:db:19:73:23:7b:f7:
                    30:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:26:6D:1A:5E:50:B8:52:42:60:3D:3B:5C:38:95:62:58:EA:7F:A8
            X509v3 Authority Key Identifier:
                keyid:B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:1a:55:ab:0b:7d:45:c8:39:a6:52:ae:da:a0:c3:47:5e:e8:
         0a:b4:02:00:a7:a3:2f:26:dd:11:4e:1a:dc:57:02:00:bb:c0:
         68:19:5a:a3:4d:8a:a2:35:57:34:f7:aa:98:a6:5b:f9:56:7e:
         7a:1f:b7:ef:a3:6d:8d:19:14:16:c5:04:17:8e:57:96:c2:f8:
         f4:09:8e:c3:ea:e8:ef:25:2b:bc:2a:f7:65:39:e8:03:9a:dc:
         9a:b7:55:fd:0b:91:f6:44:94:89:f4:9e:5b:f0:43:2b:5f:38:
         ae:2d:9b:37:30:06:b1:97:90:cf:48:e6:ca:a6:14:f8:ee:6d:
         34:bf:e8:aa:d1:67:94:a9:a6:b8:c2:e2:5c:71:45:58:8a:c9:
         fe:73:42:e3:6a:6d:88:80:8d:27:9c:e8:67:28:3c:38:bb:46:
         ae:6f:25:ba:ac:9b:49:ed:45:f0:23:41:a6:b3:8a:85:92:bb:
         39:c5:8f:32:87:88:a3:69:b3:a8:24:d7:6e:c1:60:17:36:74:
         7b:1f:fe:97:a1:62:66:44:c3:eb:f5:bf:e3:92:ed:a1:7d:9c:
         9f:26:cb:a3:2b:8e:70:47:4a:79:f3:9a:65:53:16:8b:de:8f:
         f9:6a:b4:f6:25:81:3e:57:58:76:98:95:d4:ee:d5:0a:68:84:
         c7:f8:a1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:15:41 2026 by rpki-client