Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.mft
File:                     uetMLe4ILeo7gNjvslpGhlcIy7Q.mft (raw, json)
Hash identifier:          d2rPz7SVCEJhe4moqhqg+kEinQAmXEkFel0jJ6mrItw=
Subject key identifier:   EF:B9:96:1B:02:FF:11:5C:81:A7:4D:9E:C2:EA:45:67:19:4E:DE:FD
Authority key identifier: B9:EB:4C:2D:EE:08:2D:EA:3B:80:D8:EF:B2:5A:46:86:57:08:CB:B4
Certificate issuer:       /CN=b9eb4c2dee082dea3b80d8efb25a46865708cbb4
Certificate serial:       019D330827FBC31D19CE4AA1C319A511A64C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uetMLe4ILeo7gNjvslpGhlcIy7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.mft
Manifest number:          1112
Signing time:             Sat 28 Mar 2026 06:01:05 +0000
Manifest this update:     Sat 28 Mar 2026 06:01:05 +0000
Manifest next update:     Sun 29 Mar 2026 06:01:05 +0000
Files and hashes:         1: YrOiyXQBvFt-emPhJBkIUx-kXzY.roa (hash: gDdOxaSqMhs+DnQoSQE1kiV7IppRkHiklEiaQCzF0J8=)
                          2: uetMLe4ILeo7gNjvslpGhlcIy7Q.crl (hash: OP4Mf9Y+WoMndDR4vSUe/ualqFgF/1uik5gTXw/EiQ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uetMLe4ILeo7gNjvslpGhlcIy7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 00:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:33:08:27:fb:c3:1d:19:ce:4a:a1:c3:19:a5:11:a6:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9eb4c2dee082dea3b80d8efb25a46865708cbb4
        Validity
            Not Before: Mar 28 06:01:05 2026 GMT
            Not After : Mar 29 06:01:05 2026 GMT
        Subject: CN=efb9961b02ff115c81a74d9ec2ea4567194edefd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e7:36:4c:fa:0f:f7:25:a7:cf:f5:39:17:be:
                    04:94:5c:57:68:70:e8:ef:46:1b:51:32:07:a0:8e:
                    5d:81:2a:2c:4a:4b:94:16:f2:0c:9c:4f:db:54:62:
                    bb:aa:b0:30:c2:96:78:10:54:42:b7:d1:1c:b6:37:
                    40:67:3d:35:77:2d:28:19:41:83:93:be:40:73:04:
                    d8:4e:c2:c6:9f:d7:14:ba:69:00:db:4c:23:7d:ad:
                    cb:c6:2d:c2:5d:38:52:53:ae:e7:6b:06:24:7f:13:
                    36:65:84:7d:d8:0b:8a:9f:91:ab:f4:6f:38:82:e8:
                    3d:d7:be:24:88:02:e4:9c:69:1e:e7:b9:1a:fd:60:
                    c6:47:78:c2:3b:99:e4:47:ed:db:ad:4e:43:c7:aa:
                    c6:3e:4e:dc:64:60:9c:41:f6:3a:f0:4e:ff:1d:94:
                    57:d2:03:63:65:12:2b:2f:29:28:4d:3d:d8:61:ba:
                    a9:78:4b:91:e5:cd:35:58:df:5a:b7:cf:bd:06:2f:
                    b5:7b:0c:c6:71:72:b7:af:66:11:ae:e9:a5:f7:7a:
                    01:83:ef:c6:63:fb:6a:8e:76:6a:73:06:36:69:be:
                    de:ec:e7:51:fc:b9:ad:68:c5:fa:72:2d:5b:6c:ab:
                    20:ce:88:7c:6a:53:46:77:f7:50:31:8e:d9:96:ad:
                    cd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B9:96:1B:02:FF:11:5C:81:A7:4D:9E:C2:EA:45:67:19:4E:DE:FD
            X509v3 Authority Key Identifier:
                keyid:B9:EB:4C:2D:EE:08:2D:EA:3B:80:D8:EF:B2:5A:46:86:57:08:CB:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uetMLe4ILeo7gNjvslpGhlcIy7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6167-649b-4f39-b39a-e6767ad5f5e7/1/uetMLe4ILeo7gNjvslpGhlcIy7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:e0:c6:36:8e:47:b4:84:cf:fa:a7:0a:00:ef:3f:39:47:8a:
         6e:47:57:1e:99:c5:e4:25:57:54:19:8f:89:91:05:c8:7b:9a:
         fd:51:2f:7f:9b:51:ae:25:e5:7a:7a:06:78:00:0c:e6:6f:6f:
         d7:30:fb:d5:8d:e7:97:df:05:21:69:17:fa:ba:6a:45:fe:34:
         13:82:31:e8:55:39:b7:ff:8d:11:e8:3c:f6:49:e5:05:64:9b:
         1b:2b:06:04:b9:18:c7:36:b0:ab:9c:2c:df:9d:31:21:02:13:
         f9:2a:b7:6e:c0:47:80:8b:3c:c9:12:27:60:e8:3d:a5:99:e8:
         83:22:a4:50:35:40:03:9d:37:a8:a3:80:a1:f1:70:a7:f8:3a:
         49:d9:8f:c2:b3:91:25:6a:82:3e:03:23:11:e5:ad:99:c6:a4:
         b0:ca:c7:c8:08:6a:f5:69:c7:28:55:63:57:54:48:cd:f6:7b:
         5f:a9:fe:89:a6:9e:1d:b9:97:ee:d4:bb:69:f0:12:12:f0:de:
         87:63:d2:27:87:34:82:21:e0:b4:29:fe:9f:3d:e6:92:f4:93:
         82:b1:7a:c6:e8:7a:79:9a:99:e6:f3:8c:6b:a4:9c:12:72:f0:
         de:d3:f4:9b:b9:a9:ef:60:a6:3b:59:e6:ce:41:2f:87:fa:af:
         e0:ce:52:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:39:27 2026 by rpki-client