Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft
File:                     uhfrfV8E0nFV8gF4bzkPtAimquQ.mft (raw, json)
Hash identifier:          C0JW2F9agyvYfridSQe7yTrTU5vODreM9dQej8OVhKc=
Subject key identifier:   DF:CE:0F:0C:62:79:44:21:97:70:5F:46:21:1F:B8:04:4D:36:3A:26
Authority key identifier: BA:17:EB:7D:5F:04:D2:71:55:F2:01:78:6F:39:0F:B4:08:A6:AA:E4
Certificate issuer:       /CN=ba17eb7d5f04d27155f201786f390fb408a6aae4
Certificate serial:       019D39E5728078C867487FD42B87527250D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft
Manifest number:          C9
Signing time:             Sun 29 Mar 2026 14:00:31 +0000
Manifest this update:     Sun 29 Mar 2026 14:00:31 +0000
Manifest next update:     Mon 30 Mar 2026 14:00:31 +0000
Files and hashes:         1: 0yT0OXiNw9csRLbDIHPuRhRNJuA.roa (hash: V99TnpgsuLfThbZigceHdcceXYaalafIhYll4v0qF0s=)
                          2: uhfrfV8E0nFV8gF4bzkPtAimquQ.crl (hash: 2NTVovMtP8GyCDLoKysQNOmr/1aZdOv8ugwPCOAdglA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:e5:72:80:78:c8:67:48:7f:d4:2b:87:52:72:50:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba17eb7d5f04d27155f201786f390fb408a6aae4
        Validity
            Not Before: Mar 29 14:00:31 2026 GMT
            Not After : Mar 30 14:00:31 2026 GMT
        Subject: CN=dfce0f0c6279442197705f46211fb8044d363a26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:77:04:bd:fa:cf:2b:70:ae:17:b2:94:e0:41:
                    ad:ff:4e:aa:c3:cf:4a:d3:8b:36:78:ae:04:11:de:
                    d3:c7:8a:7a:64:ac:89:3a:70:b7:a7:16:4c:4d:9f:
                    ad:93:0e:d1:fa:38:17:28:cd:be:0a:04:ba:9f:99:
                    a5:16:94:f1:99:1e:69:55:2c:71:5d:3b:f6:e0:0b:
                    3f:56:6a:f4:27:93:73:3f:b2:10:2f:c8:cd:17:db:
                    2c:e0:c2:d5:34:f0:ea:b1:2f:8d:e9:82:1f:20:57:
                    60:59:5f:6e:b4:cf:8b:d6:a6:ae:71:ac:5a:29:0a:
                    31:74:48:54:7f:7b:d5:af:e3:0c:03:2a:a6:7b:68:
                    30:a1:7a:c4:fa:78:0a:21:c0:f6:5e:a0:23:44:c4:
                    ac:04:a7:41:f9:b3:57:48:cd:b9:5e:de:e9:de:d1:
                    da:a1:a6:73:1b:74:c7:dc:64:6c:ab:09:72:94:f7:
                    7e:37:d1:8b:63:b5:26:9e:81:e0:0c:ab:a0:6a:38:
                    6c:67:cb:73:48:69:5a:c9:e8:80:14:8b:93:85:79:
                    af:cc:40:84:15:57:fd:c2:6d:56:92:7f:18:07:43:
                    19:b8:99:3d:53:9d:f2:cc:12:08:f2:83:da:e8:0b:
                    06:86:e9:1f:74:60:de:56:e2:57:36:c1:74:06:f7:
                    89:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:CE:0F:0C:62:79:44:21:97:70:5F:46:21:1F:B8:04:4D:36:3A:26
            X509v3 Authority Key Identifier:
                keyid:BA:17:EB:7D:5F:04:D2:71:55:F2:01:78:6F:39:0F:B4:08:A6:AA:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:b9:41:91:ba:a7:00:8a:14:cd:4b:c0:30:ce:bd:c5:7a:98:
         c7:c4:3b:2e:32:b4:d8:b1:0c:f7:b0:65:ea:9b:85:be:dd:fe:
         fb:d0:2e:b2:4e:5a:6d:d2:89:5d:84:f3:aa:6b:c8:3c:3c:fe:
         e7:56:14:c8:3c:c3:49:6b:0d:70:90:d0:db:27:07:f7:fd:a2:
         9b:b8:6a:58:47:e4:48:6a:49:d8:a2:b1:92:5d:c0:b6:31:00:
         f2:9e:0d:77:e4:41:d7:73:48:22:49:5f:05:7a:ff:3f:5d:30:
         6d:13:24:e0:57:4f:02:fe:92:2d:c8:9b:aa:6e:27:ae:57:1c:
         c2:6a:82:df:ab:05:78:69:7e:de:d1:8f:40:49:85:fe:a7:74:
         b2:fb:fd:14:5b:ff:00:4b:0d:44:f1:8d:02:0f:55:2c:d0:c9:
         dd:92:0c:df:cb:3f:e9:af:f2:27:98:39:1c:b0:c4:cd:57:35:
         11:0c:3b:30:41:22:20:3c:85:9c:b4:36:96:11:71:16:2b:10:
         e6:0e:df:1f:ae:a2:21:98:68:1b:6d:22:96:13:65:f5:e9:4f:
         7c:3c:ea:d4:81:08:90:bb:0d:2f:00:3d:cd:c7:c5:d6:7a:60:
         5a:94:1a:3d:cb:f7:0e:61:f0:10:19:02:b5:94:9e:d3:68:4b:
         a0:a0:34:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:33 2026 by rpki-client