Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
File:                     uFsMinWJOk-OHvDZpNQUeNizMng.mft (raw, json)
Hash identifier:          vyTMA4PduaqOKQK7IjKDS+GXKJHfogzSIJlMrHV/ob8=
Subject key identifier:   FD:70:C6:EB:F9:45:52:84:D4:AE:49:0B:84:5B:12:CE:3D:D2:92:3F
Authority key identifier: B8:5B:0C:8A:75:89:3A:4F:8E:1E:F0:D9:A4:D4:14:78:D8:B3:32:78
Certificate issuer:       /CN=b85b0c8a75893a4f8e1ef0d9a4d41478d8b33278
Certificate serial:       019CE8C9EA30EE9D259B97FC7F1591B7212F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
Manifest number:          17C1
Signing time:             Fri 13 Mar 2026 20:01:12 +0000
Manifest this update:     Fri 13 Mar 2026 20:01:12 +0000
Manifest next update:     Sat 14 Mar 2026 20:01:12 +0000
Files and hashes:         1: 8y3Tj4TsEaNV9uqE3_Wm8d75SXY.roa (hash: yZH4sqNiTJoNNbuM1J9mJYZWJbe1HILioSLqth5sEdY=)
                          2: HVxmAfBjZ6ZLdFwLWBto8AESvAs.asa (hash: hcVfaTwHi+0pfWKV+QVinfnUuQbFH+9lvzWtmpQvDYI=)
                          3: HqKAWum-OFZ9NLI9L0i8Qooknqs.asa (hash: lOJrYcM36+x+F6jmp2VCjFJX1AVn86mOQN9gIP6YbRA=)
                          4: IpKrE-_m-Bh_Vf9sAiL9RizjUYg.roa (hash: 8q6f4vw2poLJek7yAHJ0nyjZ8IKhwyPGqBKWSnBCaDo=)
                          5: Jo3OhvYKqzyTMsOO-06Cr6N1_P8.roa (hash: n7Kb4qqB8hRT0/AEwz8YCJRJUt0Sd29P7/pf8OQNdu4=)
                          6: uFsMinWJOk-OHvDZpNQUeNizMng.crl (hash: 3Dtqvr2h8aGVkdYESsCmSrEFnVyjqOXLET82N3KhUIk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 18:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e8:c9:ea:30:ee:9d:25:9b:97:fc:7f:15:91:b7:21:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b85b0c8a75893a4f8e1ef0d9a4d41478d8b33278
        Validity
            Not Before: Mar 13 20:01:12 2026 GMT
            Not After : Mar 14 20:01:12 2026 GMT
        Subject: CN=fd70c6ebf9455284d4ae490b845b12ce3dd2923f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:02:9d:d1:d6:7b:48:a0:ca:89:17:b3:a3:2d:
                    85:0c:88:58:6e:16:50:a8:1f:5c:b7:79:8a:e7:e3:
                    e2:20:31:3d:60:b5:d6:99:f8:fa:3c:0f:8b:84:67:
                    03:3c:37:03:52:97:43:89:15:ae:1a:37:fe:7d:15:
                    17:5a:06:a0:33:7c:6f:6c:dd:50:a9:0d:54:8c:12:
                    da:b7:c4:b5:d0:68:f0:2b:31:70:53:07:6b:e2:97:
                    ff:df:ee:c5:8c:c7:60:09:9b:3b:c3:15:64:33:41:
                    67:cc:35:3f:2c:ce:d8:42:c4:29:a0:52:81:8a:a8:
                    05:31:3a:11:91:e9:23:2c:cb:90:75:58:96:43:04:
                    be:ea:6d:4e:ca:1e:5e:34:e1:7c:f3:f7:de:97:cd:
                    bd:24:8d:75:6f:8e:d6:1b:80:56:f8:f5:41:ae:88:
                    db:42:a8:4c:10:2a:64:f8:d9:60:49:e7:cf:ae:6f:
                    76:6a:82:9b:b4:d3:21:92:e7:90:b4:55:11:25:16:
                    3b:54:97:9e:58:ed:a0:42:c6:83:3f:81:17:60:8d:
                    83:cc:c3:91:92:4e:d9:93:b7:de:0e:4e:02:3d:71:
                    9d:73:2c:db:f8:da:88:ac:7f:af:fa:ea:f7:9a:d1:
                    22:f9:57:a8:53:7a:c0:27:13:b6:18:63:49:99:ec:
                    c7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:70:C6:EB:F9:45:52:84:D4:AE:49:0B:84:5B:12:CE:3D:D2:92:3F
            X509v3 Authority Key Identifier:
                keyid:B8:5B:0C:8A:75:89:3A:4F:8E:1E:F0:D9:A4:D4:14:78:D8:B3:32:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:87:61:9a:d9:64:e2:00:a4:69:b0:50:fd:1a:08:3b:94:b3:
         c7:cd:59:f7:93:72:fa:a7:51:5c:3d:7e:32:09:03:9e:73:c1:
         d9:c1:1c:db:4a:46:46:aa:64:17:72:b9:f7:00:19:f3:00:03:
         b1:a0:ed:1d:12:24:59:1b:5c:85:60:ca:c7:5d:52:0c:a2:89:
         59:3d:25:55:0d:08:10:f2:7d:9c:5a:97:b4:4a:e0:47:7d:7d:
         43:69:10:b3:0f:54:16:a3:c2:20:4c:f4:d3:02:d1:7e:08:cd:
         3d:c5:4e:bc:11:08:ce:20:6c:5a:e0:11:82:81:85:ce:be:f8:
         eb:70:3d:61:1a:d6:2a:86:01:ea:88:98:ed:d7:0e:ff:b9:6e:
         50:54:a9:ae:e5:10:5f:00:f8:1a:98:7d:97:46:c4:4b:b0:36:
         4e:6f:53:0e:6f:c6:ee:00:e6:b1:61:c3:62:a3:0f:d7:f1:98:
         86:d2:78:d1:a2:ed:4e:d7:67:f0:57:64:db:87:b4:92:03:d0:
         88:44:63:8a:93:69:e6:33:44:62:15:3d:b3:2b:a8:32:ec:8c:
         15:29:6b:4d:56:ed:e3:3c:7e:77:c2:74:e4:6f:df:94:df:24:
         4a:61:cb:df:df:c1:ae:5d:69:55:87:01:a4:07:4f:de:9c:73:
         ed:55:5b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 02:45:04 2026 by rpki-client