Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.mft
File:                     uCLebF2ewIbZ0gGrbaVr08_v8kM.mft (raw, json)
Hash identifier:          eKAReyKZZbpOCDDcghWibI29zkJCHGqaDjMJSVKneVk=
Subject key identifier:   B0:EB:76:EF:71:A9:E9:6E:BC:E2:60:8C:15:FA:BF:E0:25:22:21:5E
Authority key identifier: B8:22:DE:6C:5D:9E:C0:86:D9:D2:01:AB:6D:A5:6B:D3:CF:EF:F2:43
Certificate issuer:       /CN=b822de6c5d9ec086d9d201ab6da56bd3cfeff243
Certificate serial:       019D2D3D646A4E5EB23C448D45F9778466A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uCLebF2ewIbZ0gGrbaVr08_v8kM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.mft
Manifest number:          A1
Signing time:             Fri 27 Mar 2026 03:01:31 +0000
Manifest this update:     Fri 27 Mar 2026 03:01:31 +0000
Manifest next update:     Sat 28 Mar 2026 03:01:31 +0000
Files and hashes:         1: fJN7PYZX9Sr-HX_3erhR56oW5z4.roa (hash: 62V7rj0IiHO0OW2XHO1iINDHqaR8ItLLbYMYozGGFjw=)
                          2: uCLebF2ewIbZ0gGrbaVr08_v8kM.crl (hash: 4/IGaksCFYN9hPjz1DRY1jjb99odAv9CoPPQlTlY1Fc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uCLebF2ewIbZ0gGrbaVr08_v8kM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2d:3d:64:6a:4e:5e:b2:3c:44:8d:45:f9:77:84:66:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b822de6c5d9ec086d9d201ab6da56bd3cfeff243
        Validity
            Not Before: Mar 27 03:01:31 2026 GMT
            Not After : Mar 28 03:01:31 2026 GMT
        Subject: CN=b0eb76ef71a9e96ebce2608c15fabfe02522215e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a8:64:5b:4a:41:53:ae:5e:de:5d:41:d8:3d:
                    01:58:7d:30:fd:75:88:c2:99:f3:43:08:f4:04:dd:
                    78:46:b0:cf:a0:5d:e7:05:14:59:67:d4:34:8d:43:
                    d5:d5:e4:cb:39:95:87:dc:46:52:56:48:48:9a:41:
                    86:13:ab:13:93:8d:17:08:a3:2e:ab:2b:7f:c0:46:
                    d1:be:7c:a7:6d:45:38:2c:1a:3f:9b:11:eb:b3:4d:
                    b3:7e:21:ae:bd:8e:42:36:a5:cb:b8:c7:3a:46:57:
                    eb:04:2a:9a:1f:fd:66:4e:3d:d6:b7:30:f9:4d:7a:
                    ba:80:5a:6b:79:23:b9:e9:14:cd:d1:0b:4c:3f:e1:
                    74:50:c2:7b:22:df:18:8c:57:77:dd:37:63:44:cc:
                    df:59:4e:2e:08:f4:ea:e2:5a:e1:41:a9:5b:40:51:
                    55:fa:c5:a7:21:49:6d:7d:61:26:fe:0e:54:51:d6:
                    86:c9:f2:48:30:5e:88:b2:fe:cd:2f:d2:02:27:08:
                    47:21:30:f2:d7:42:c3:4e:ed:4a:d7:eb:b0:c8:e2:
                    80:30:53:3c:c0:0b:00:de:3c:a6:16:f1:c3:21:a7:
                    78:99:b6:6f:a1:cd:d1:98:5f:e0:40:fa:83:44:f5:
                    1b:46:52:5b:0b:45:26:4b:fa:ac:0a:27:25:e2:44:
                    23:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:EB:76:EF:71:A9:E9:6E:BC:E2:60:8C:15:FA:BF:E0:25:22:21:5E
            X509v3 Authority Key Identifier:
                keyid:B8:22:DE:6C:5D:9E:C0:86:D9:D2:01:AB:6D:A5:6B:D3:CF:EF:F2:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCLebF2ewIbZ0gGrbaVr08_v8kM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:4f:3b:8c:74:78:47:e1:90:0e:b1:0a:30:30:61:bb:e6:65:
         9e:53:bf:08:30:54:80:3d:7c:5f:d2:03:df:a7:ca:06:b4:c6:
         97:a8:6d:43:d2:79:b2:af:6a:a6:25:2f:d8:bd:0f:1a:72:a1:
         26:f3:20:b8:fb:b5:0b:d3:c1:e4:ec:92:8e:ab:ee:38:e4:58:
         2b:ca:77:9b:48:7f:f6:59:7f:9a:ae:44:1a:c1:e3:47:e8:1b:
         46:99:fc:da:b3:4b:4b:2b:37:3a:96:76:5b:6a:9c:88:a5:ab:
         c5:ad:90:fe:83:22:a2:6a:0f:39:8c:f1:a8:5e:a8:31:ed:70:
         22:7a:f9:61:7d:a1:b1:16:d9:25:50:e7:bb:c9:ca:f0:ad:0e:
         ad:0e:66:a1:b5:74:c8:b2:9d:dd:d4:4d:30:fb:c6:94:41:5a:
         b0:5a:7a:28:2c:7a:d9:28:81:46:5c:62:d1:32:d8:a6:50:0b:
         f3:89:0b:5b:a7:96:71:dc:8a:1c:e4:e5:f8:4c:e6:b5:9c:9f:
         05:00:c1:5c:57:75:e3:33:90:98:65:33:cb:f8:95:50:f5:03:
         02:b6:f0:06:a6:b1:6e:a3:46:4a:7c:17:e5:90:9c:72:b0:ff:
         04:3c:17:7e:54:54:06:04:ad:04:0d:98:95:8e:28:b7:33:7e:
         de:67:8d:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0tPWRqTl6yPESNRfl3hGaoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MjJkZTZjNWQ5ZWMwODZkOWQyMDFhYjZkYTU2YmQzY2Zl
ZmYyNDMwHhcNMjYwMzI3MDMwMTMxWhcNMjYwMzI4MDMwMTMxWjAzMTEwLwYDVQQD
EyhiMGViNzZlZjcxYTllOTZlYmNlMjYwOGMxNWZhYmZlMDI1MjIyMTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqhkW0pBU65e3l1B2D0BWH0w/XWI
wpnzQwj0BN14RrDPoF3nBRRZZ9Q0jUPV1eTLOZWH3EZSVkhImkGGE6sTk40XCKMu
qyt/wEbRvnynbUU4LBo/mxHrs02zfiGuvY5CNqXLuMc6RlfrBCqaH/1mTj3WtzD5
TXq6gFpreSO56RTN0QtMP+F0UMJ7It8YjFd33TdjRMzfWU4uCPTq4lrhQalbQFFV
+sWnIUltfWEm/g5UUdaGyfJIMF6Isv7NL9ICJwhHITDy10LDTu1K1+uwyOKAMFM8
wAsA3jymFvHDIad4mbZvoc3RmF/gQPqDRPUbRlJbC0UmS/qsCicl4kQjlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLDrdu9xqeluvOJgjBX6v+AlIiFeMB8GA1UdIwQY
MBaAFLgi3mxdnsCG2dIBq22la9PP7/JDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUNMZWJGMmV3SWJaMGdHcmJhVnIwOF92OGtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8zYjBmNjAtMzdlNC00NWI5LThhMmMt
YWYzOGJmNzA2ZjM3LzEvdUNMZWJGMmV3SWJaMGdHcmJhVnIwOF92OGtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8zYjBmNjAtMzdlNC00NWI5LThhMmMtYWYzOGJmNzA2ZjM3
LzEvdUNMZWJGMmV3SWJaMGdHcmJhVnIwOF92OGtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATU87jHR4
R+GQDrEKMDBhu+ZlnlO/CDBUgD18X9ID36fKBrTGl6htQ9J5sq9qpiUv2L0PGnKh
JvMguPu1C9PB5OySjqvuOORYK8p3m0h/9ll/mq5EGsHjR+gbRpn82rNLSys3OpZ2
W2qciKWrxa2Q/oMiomoPOYzxqF6oMe1wInr5YX2hsRbZJVDnu8nK8K0OrQ5mobV0
yLKd3dRNMPvGlEFasFp6KCx62SiBRlxi0TLYplAL84kLW6eWcdyKHOTl+EzmtZyf
BQDBXFd14zOQmGUzy/iVUPUDArbwBqaxbqNGSnwX5ZCccrD/BDwXflRUBgStBA2Y
lY4otzN+3meNXQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 06:39:05 2026 by rpki-client