Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft
File:                     UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft (raw, json)
Hash identifier:          q2nWBCZcP/XnVkyXEn+QKGn60ueaCGlKcqD9VvBLclw=
Subject key identifier:   71:28:F9:FB:09:37:50:55:69:AE:71:1E:62:F6:65:F1:82:12:CC:03
Authority key identifier: 50:1C:10:57:BC:B9:D1:E0:D1:57:48:B7:F3:2C:59:F8:C7:B7:2A:4E
Certificate issuer:       /CN=501c1057bcb9d1e0d15748b7f32c59f8c7b72a4e
Certificate serial:       019D29CDEFD67946439D8C444ECC7879A92B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft
Manifest number:          0758
Signing time:             Thu 26 Mar 2026 11:00:55 +0000
Manifest this update:     Thu 26 Mar 2026 11:00:55 +0000
Manifest next update:     Fri 27 Mar 2026 11:00:55 +0000
Files and hashes:         1: UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl (hash: pGOyJBVE0bvAv2VfzZx1CtF5fPuqg1jVCsYl6bwMZOs=)
                          2: kyxqx7NPhGb4ggxOfoZpnu1n_S0.roa (hash: TCL6ozSUuPbHKcQL9MhFYjm+l3Ilnl3GbAL+XQhGlFc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:cd:ef:d6:79:46:43:9d:8c:44:4e:cc:78:79:a9:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501c1057bcb9d1e0d15748b7f32c59f8c7b72a4e
        Validity
            Not Before: Mar 26 11:00:55 2026 GMT
            Not After : Mar 27 11:00:55 2026 GMT
        Subject: CN=7128f9fb0937505569ae711e62f665f18212cc03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:dc:36:a4:a2:ac:fe:3a:4e:e4:72:76:17:93:
                    21:6e:dd:7c:fb:08:3d:9b:27:58:5e:ca:72:86:aa:
                    88:ed:c7:c1:59:d2:0a:13:38:af:8c:ad:b8:a8:c4:
                    7e:2f:f6:ed:8b:85:80:70:50:2a:a7:ee:18:db:98:
                    96:34:c9:ea:eb:a2:a1:f9:53:91:de:ad:bf:1c:e6:
                    b7:1b:5a:a8:98:c2:b9:10:4f:57:00:de:c0:54:37:
                    a4:3e:26:17:94:c9:60:26:8b:67:22:25:e0:16:ba:
                    f1:e6:cb:a7:f1:06:2a:62:07:45:31:69:87:1c:15:
                    8f:ad:fe:36:73:b1:1b:e4:54:b4:66:a4:44:c1:7e:
                    7f:77:f8:8e:f4:ee:3b:5f:d6:24:27:c0:4c:98:cd:
                    61:fc:8f:c9:f4:96:79:cb:34:2e:c2:56:fa:cc:b0:
                    1e:16:d7:23:25:2f:d8:71:04:05:b5:d9:d9:fe:82:
                    3b:aa:93:17:8c:11:72:f8:94:01:30:40:85:ac:75:
                    55:69:31:bf:54:85:db:ac:30:f4:b9:46:01:1a:e0:
                    38:33:72:52:85:af:77:3e:5f:5a:5f:72:0e:cc:b3:
                    c7:43:e1:a2:76:27:7b:20:3e:09:03:b3:4b:dc:6f:
                    53:4c:44:b0:d3:4c:cd:b6:d2:f9:45:10:90:5e:dd:
                    f9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:28:F9:FB:09:37:50:55:69:AE:71:1E:62:F6:65:F1:82:12:CC:03
            X509v3 Authority Key Identifier:
                keyid:50:1C:10:57:BC:B9:D1:E0:D1:57:48:B7:F3:2C:59:F8:C7:B7:2A:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:44:cc:ba:30:c6:39:55:01:ef:a8:dc:0f:6e:e7:df:92:81:
         2b:df:9b:32:57:4b:63:c2:62:11:16:ac:c0:51:11:90:6b:d0:
         2f:70:d2:e8:28:66:37:5a:91:9c:e9:3a:79:36:e7:2f:a4:7f:
         2f:87:ac:6a:a7:a8:30:5b:51:4d:19:ce:22:21:f1:91:da:99:
         47:d9:1a:fd:ac:6c:c0:85:0c:50:8c:4f:7b:42:13:53:3a:95:
         c5:6f:bb:b1:38:14:48:d0:24:d8:05:9d:25:38:f1:5f:28:13:
         f3:25:4a:55:3f:b5:e3:17:23:8d:43:8c:72:3e:cb:c3:b1:68:
         5a:21:4b:43:3f:dc:60:30:5e:b4:65:57:2e:52:69:90:b4:a7:
         52:ac:83:4d:1d:90:21:d5:a7:e4:d0:8e:cc:15:6f:6b:c7:21:
         03:49:a3:b2:e9:b6:c5:c0:fb:3f:0f:a7:5e:b2:67:06:ac:77:
         ef:ad:f4:39:55:4b:cf:f5:c1:62:98:e4:57:8e:a3:2f:6b:42:
         98:36:3a:97:be:eb:b8:84:ae:d7:ce:b9:33:6a:ba:63:af:36:
         01:8f:1c:53:fd:de:47:99:91:95:d3:c5:25:f3:86:e2:7b:3f:
         6d:20:98:48:21:76:33:24:ca:4f:17:3b:74:d0:39:fb:4c:5e:
         79:19:7e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:00:49 2026 by rpki-client