Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft
File:                     uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft (raw, json)
Hash identifier:          1J/GlvWwn6JB8iEQFbdFpVtIhARpFVkWR7S8r34hgeM=
Subject key identifier:   15:7D:61:75:75:EC:4D:47:9A:59:72:E3:BB:B8:9F:5F:10:1C:2A:E4
Authority key identifier: B8:7B:BF:8E:5C:74:A5:26:BA:AF:61:85:AB:D9:49:DA:FA:8F:6D:CB
Certificate issuer:       /CN=b87bbf8e5c74a526baaf6185abd949dafa8f6dcb
Certificate serial:       019CF3BADE8564FD13EB184738E6B318ECBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft
Manifest number:          0AE5
Signing time:             Sun 15 Mar 2026 23:00:35 +0000
Manifest this update:     Sun 15 Mar 2026 23:00:35 +0000
Manifest next update:     Mon 16 Mar 2026 23:00:35 +0000
Files and hashes:         1: DkZq0zpUFhASpEE4ImZTT8jsmXs.roa (hash: DqNcDnHcsyHeYm9qtIpPz2EwaV9dY65pLLq3MnQC1Qk=)
                          2: uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl (hash: A2kOMcZ8vREd3lHIjnDTcOxyYLrtep30wB8TzijF99c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 23:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:f3:ba:de:85:64:fd:13:eb:18:47:38:e6:b3:18:ec:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87bbf8e5c74a526baaf6185abd949dafa8f6dcb
        Validity
            Not Before: Mar 15 23:00:35 2026 GMT
            Not After : Mar 16 23:00:35 2026 GMT
        Subject: CN=157d617575ec4d479a5972e3bbb89f5f101c2ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dd:5b:1a:4e:ab:e2:3a:91:88:38:b4:93:27:
                    91:4d:70:90:21:42:d5:4c:6a:d4:19:6e:cf:87:e1:
                    58:2b:fc:83:5a:33:bc:35:b4:4d:54:92:3d:9b:d5:
                    34:b3:fc:77:56:da:58:1d:58:33:79:fe:ae:43:f5:
                    de:dc:bd:9b:be:ed:44:a9:a9:f8:5c:b9:92:a8:60:
                    61:16:39:d1:27:5b:f1:16:18:73:bd:72:dc:6b:91:
                    8d:c6:7a:3a:e0:0e:df:72:59:f3:d0:9b:f9:b7:a5:
                    84:d7:8d:0c:dc:f9:f1:07:12:63:71:5a:cc:de:37:
                    ad:30:04:f8:ee:96:dd:9b:44:55:cd:cc:2c:61:0a:
                    8c:8c:6f:16:2a:5f:98:7a:a6:af:0c:5d:44:13:24:
                    d1:4a:af:ef:21:8d:2d:71:82:6e:79:a9:47:c1:fe:
                    82:fe:72:93:81:98:79:a4:55:ee:ca:99:95:40:d2:
                    80:69:d0:56:25:8b:3a:4c:c8:cc:95:c8:c2:36:ea:
                    a8:fb:21:81:92:29:04:db:a4:00:0e:5e:bd:7d:c7:
                    cf:fa:f5:0f:9f:fa:ed:f1:6e:44:0f:05:85:5d:f6:
                    27:22:3d:ae:74:84:45:5d:bd:d7:04:2c:39:c0:5d:
                    d3:b2:0c:7d:4c:c5:a4:d2:7a:89:49:8d:b0:1c:0d:
                    cf:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:7D:61:75:75:EC:4D:47:9A:59:72:E3:BB:B8:9F:5F:10:1C:2A:E4
            X509v3 Authority Key Identifier:
                keyid:B8:7B:BF:8E:5C:74:A5:26:BA:AF:61:85:AB:D9:49:DA:FA:8F:6D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:be:c5:c8:e7:f9:04:ea:f7:37:14:87:cc:a5:6d:6e:c5:27:
         71:74:52:a9:f9:50:c9:40:93:4e:81:14:ac:84:93:91:8b:51:
         26:b1:57:e9:3c:52:2b:e0:4a:ff:0b:42:03:f2:be:f8:b8:6b:
         a5:a5:46:32:5c:3f:83:24:30:b2:1b:f5:dc:ca:ca:f1:b8:5c:
         14:b2:bd:40:48:fd:88:2d:ec:72:58:e5:c2:1f:31:47:bd:93:
         f5:bf:36:e0:c3:36:c4:b6:3b:53:dc:1a:a3:e8:0f:7a:f7:2d:
         df:f9:b3:9d:04:9c:76:c4:cb:fb:cb:e9:e6:a9:4d:db:ff:65:
         30:f3:33:bc:db:3c:08:9a:44:b3:b0:84:a9:c3:3b:d1:d2:21:
         16:bf:32:b5:6f:a3:85:96:1a:97:3b:71:ad:66:3b:a1:61:54:
         dd:3e:5b:5a:c3:1a:e4:77:87:38:50:49:f9:03:59:79:bd:2c:
         03:24:3d:70:b1:32:37:0e:03:5a:2e:cf:b7:18:e9:44:98:1d:
         e5:97:e7:96:a4:eb:39:8e:7f:2e:46:0f:3e:29:b0:f7:cd:7e:
         43:84:94:da:b4:1f:fc:d7:b8:54:b5:57:c7:a1:7d:f6:9e:f9:
         0f:fb:39:a3:d9:57:57:f0:c1:ac:c3:41:c3:30:ff:db:cc:da:
         ce:7e:91:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzzut6FZP0T6xhHOOazGOy9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4N2JiZjhlNWM3NGE1MjZiYWFmNjE4NWFiZDk0OWRhZmE4
ZjZkY2IwHhcNMjYwMzE1MjMwMDM1WhcNMjYwMzE2MjMwMDM1WjAzMTEwLwYDVQQD
EygxNTdkNjE3NTc1ZWM0ZDQ3OWE1OTcyZTNiYmI4OWY1ZjEwMWMyYWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq91bGk6r4jqRiDi0kyeRTXCQIULV
TGrUGW7Ph+FYK/yDWjO8NbRNVJI9m9U0s/x3VtpYHVgzef6uQ/Xe3L2bvu1Eqan4
XLmSqGBhFjnRJ1vxFhhzvXLca5GNxno64A7fclnz0Jv5t6WE140M3PnxBxJjcVrM
3jetMAT47pbdm0RVzcwsYQqMjG8WKl+YeqavDF1EEyTRSq/vIY0tcYJuealHwf6C
/nKTgZh5pFXuypmVQNKAadBWJYs6TMjMlcjCNuqo+yGBkikE26QADl69fcfP+vUP
n/rt8W5EDwWFXfYnIj2udIRFXb3XBCw5wF3Tsgx9TMWk0nqJSY2wHA3PPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBV9YXV17E1Hmlly47u4n18QHCrkMB8GA1UdIwQY
MBaAFLh7v45cdKUmuq9hhavZSdr6j23LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUh1X2pseDBwU2E2cjJHRnE5bEoydnFQYmNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS84MDhiZTEtYTY5MC00NWU5LTkwMGUt
NTM5MGY5ZjgzNjIwLzEvdUh1X2pseDBwU2E2cjJHRnE5bEoydnFQYmNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS84MDhiZTEtYTY5MC00NWU5LTkwMGUtNTM5MGY5ZjgzNjIw
LzEvdUh1X2pseDBwU2E2cjJHRnE5bEoydnFQYmNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWb7FyOf5
BOr3NxSHzKVtbsUncXRSqflQyUCTToEUrISTkYtRJrFX6TxSK+BK/wtCA/K++Lhr
paVGMlw/gyQwshv13MrK8bhcFLK9QEj9iC3scljlwh8xR72T9b824MM2xLY7U9wa
o+gPevct3/mznQScdsTL+8vp5qlN2/9lMPMzvNs8CJpEs7CEqcM70dIhFr8ytW+j
hZYalztxrWY7oWFU3T5bWsMa5HeHOFBJ+QNZeb0sAyQ9cLEyNw4DWi7PtxjpRJgd
5ZfnlqTrOY5/LkYPPimw981+Q4SU2rQf/Ne4VLVXx6F99p75D/s5o9lXV/DBrMNB
wzD/28zazn6Rvg==
-----END CERTIFICATE-----
Generated at Mon Mar 16 01:56:49 2026 by rpki-client