Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/f431ea-5d30-4312-9f8b-6c3595fb7212/1/uu2YpEwWfcvekny7jgRPz6Oh2GI.mft
File:                     uu2YpEwWfcvekny7jgRPz6Oh2GI.mft (raw, json)
Hash identifier:          c3KiCR1A00cKSd03CI+2TSpIQRMZsabub3mOgjPtnJk=
Subject key identifier:   7E:CE:A8:4E:07:85:CC:2D:39:7C:FC:55:EA:96:54:9B:D5:1A:E4:E4
Authority key identifier: BA:ED:98:A4:4C:16:7D:CB:DE:92:7C:BB:8E:04:4F:CF:A3:A1:D8:62
Certificate issuer:       /CN=baed98a44c167dcbde927cbb8e044fcfa3a1d862
Certificate serial:       019D37524E8BE0B30D40A22502BC546A5936
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uu2YpEwWfcvekny7jgRPz6Oh2GI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/f431ea-5d30-4312-9f8b-6c3595fb7212/1/uu2YpEwWfcvekny7jgRPz6Oh2GI.mft
Manifest number:          0177
Signing time:             Sun 29 Mar 2026 02:00:34 +0000
Manifest this update:     Sun 29 Mar 2026 02:00:34 +0000
Manifest next update:     Mon 30 Mar 2026 02:00:34 +0000
Files and hashes:         1: RXBYuM_vbvXcudnuqxXF-aAZIBI.roa (hash: ygatlUjuSPju9x/rM5pSSXGzshHRduyfzx3H900RDBY=)
                          2: uu2YpEwWfcvekny7jgRPz6Oh2GI.crl (hash: 6Gog22TGtkuBy/9+eWjLHwucOh2eoTi/6NlPDXuYS3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/f431ea-5d30-4312-9f8b-6c3595fb7212/1/uu2YpEwWfcvekny7jgRPz6Oh2GI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/f431ea-5d30-4312-9f8b-6c3595fb7212/1/uu2YpEwWfcvekny7jgRPz6Oh2GI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uu2YpEwWfcvekny7jgRPz6Oh2GI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:52:4e:8b:e0:b3:0d:40:a2:25:02:bc:54:6a:59:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baed98a44c167dcbde927cbb8e044fcfa3a1d862
        Validity
            Not Before: Mar 29 02:00:34 2026 GMT
            Not After : Mar 30 02:00:34 2026 GMT
        Subject: CN=7ecea84e0785cc2d397cfc55ea96549bd51ae4e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:46:60:c9:6a:25:b1:51:99:b1:02:75:82:f3:
                    ce:25:67:b4:a4:2a:c6:7d:ef:d4:db:3b:23:7c:38:
                    5b:f3:d1:b2:fd:2f:fb:9a:e4:14:a3:61:51:64:67:
                    76:94:11:af:36:6a:a7:a7:ed:3f:d5:1d:2c:e7:c0:
                    3c:e4:2b:7d:e3:13:b8:98:92:fc:c6:e3:3b:c4:ee:
                    b8:e6:9c:09:06:9f:27:70:6c:5b:95:6e:40:bf:ba:
                    52:6d:2e:f9:8c:c6:76:f8:29:76:7b:c7:d1:8d:59:
                    ef:a6:2e:37:ca:43:0d:40:13:80:d5:8c:e3:8d:0b:
                    9a:4c:6f:f5:7b:b1:16:31:ab:95:e7:b2:12:8f:6e:
                    7b:85:17:e8:15:a4:07:bf:40:b3:22:10:ef:af:98:
                    f2:76:d3:a7:24:10:95:83:9e:89:7e:2e:09:89:21:
                    99:d8:b9:c1:f5:95:bc:b3:cf:9a:b0:e6:c3:32:45:
                    f0:5e:0d:b4:e3:91:2a:15:7d:ea:73:24:f4:02:45:
                    57:d6:b4:3a:16:37:0f:02:d1:04:9d:4f:86:cf:07:
                    30:24:d9:cd:a8:9e:83:ec:28:d6:8e:a7:25:81:28:
                    19:b8:ff:af:c9:77:89:08:89:2b:6c:ca:e2:51:9e:
                    1c:88:51:46:c4:c4:11:54:79:ae:4f:3b:25:63:2b:
                    22:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CE:A8:4E:07:85:CC:2D:39:7C:FC:55:EA:96:54:9B:D5:1A:E4:E4
            X509v3 Authority Key Identifier:
                keyid:BA:ED:98:A4:4C:16:7D:CB:DE:92:7C:BB:8E:04:4F:CF:A3:A1:D8:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uu2YpEwWfcvekny7jgRPz6Oh2GI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f431ea-5d30-4312-9f8b-6c3595fb7212/1/uu2YpEwWfcvekny7jgRPz6Oh2GI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f431ea-5d30-4312-9f8b-6c3595fb7212/1/uu2YpEwWfcvekny7jgRPz6Oh2GI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:73:20:1f:57:43:87:1e:4e:dc:34:32:e4:e8:6c:5a:fc:13:
         4e:5d:5b:c7:60:88:a0:87:57:fe:4e:48:1b:c6:74:7e:3a:28:
         0b:1d:d2:76:7b:62:f7:4b:46:12:15:5f:7e:3f:f3:79:22:3a:
         ae:41:93:c2:90:57:a4:55:36:82:5b:d8:a3:06:a0:d1:6a:35:
         61:a8:2d:74:a9:a3:75:95:fe:1e:67:fb:c5:9e:ed:73:d1:59:
         2a:fa:f4:40:7c:38:68:d4:a7:ba:e6:55:5c:d0:7e:89:c9:c6:
         b5:00:58:72:bf:3a:30:13:dc:ec:d9:85:97:3a:23:98:b0:3f:
         6c:8d:c8:9a:12:83:eb:72:06:19:15:78:f1:e1:4d:90:53:fe:
         cb:96:10:43:66:6e:59:23:5c:50:d4:b2:48:10:41:bb:d7:fe:
         7d:4c:0f:3b:dc:df:0f:5f:57:ef:10:4a:ea:d6:79:e2:aa:73:
         6a:b9:31:28:17:0c:6a:8e:6f:9e:34:00:03:d4:8c:1b:56:5b:
         3f:1b:7c:f9:4b:d3:30:53:64:b6:17:bd:37:8f:a7:94:5b:91:
         84:8f:d2:25:e5:88:fc:d7:76:b8:68:fd:a7:04:b2:e8:3b:e5:
         92:2d:1f:a6:da:9e:02:88:85:49:43:0d:36:4d:92:35:68:b4:
         da:7b:12:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:09 2026 by rpki-client