Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
File:                     0uTP5_R_UkZFRa27C7xNM0eKrrI.mft (raw, json)
Hash identifier:          h3BCCyoYBPv+T2la+xF6/1S/KUnJHDfEwCHomYEqWzk=
Subject key identifier:   F3:3E:42:5D:86:65:5A:5B:22:AC:D8:73:4A:85:CD:33:98:E4:4C:15
Authority key identifier: D2:E4:CF:E7:F4:7F:52:46:45:45:AD:BB:0B:BC:4D:33:47:8A:AE:B2
Certificate issuer:       /CN=d2e4cfe7f47f52464545adbb0bbc4d33478aaeb2
Certificate serial:       019D27A93213318FFD708EB25554DB3F88A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
Manifest number:          0461
Signing time:             Thu 26 Mar 2026 01:01:32 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:32 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:32 +0000
Files and hashes:         1: 0uTP5_R_UkZFRa27C7xNM0eKrrI.crl (hash: 7GmbJUqCC3FII49ul+EZ7qE/GYxysJ4nDkH4/wJd8/8=)
                          2: j330ZQOtQiCZJuxomPWTMdBKcHQ.roa (hash: MzEVW/Ea4Il5bIfwlWQJ+ibRovLnW9XexRlsZqbNutk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a9:32:13:31:8f:fd:70:8e:b2:55:54:db:3f:88:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2e4cfe7f47f52464545adbb0bbc4d33478aaeb2
        Validity
            Not Before: Mar 26 01:01:32 2026 GMT
            Not After : Mar 27 01:01:32 2026 GMT
        Subject: CN=f33e425d86655a5b22acd8734a85cd3398e44c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e6:aa:82:ef:ec:c3:c0:15:e1:05:d3:b9:49:
                    f3:77:74:f5:c6:50:35:1a:b8:6a:fe:aa:1a:8a:5f:
                    4e:04:d8:55:1f:a3:f2:e1:6b:8a:1a:be:94:34:18:
                    f8:ff:ae:c7:e9:26:30:6e:d9:94:68:4e:d8:4b:02:
                    93:14:3e:86:80:e9:ba:92:fa:8d:3f:ac:86:9a:40:
                    16:31:9b:c3:8c:0a:17:cd:26:19:0a:d1:b8:8b:9d:
                    9d:f9:bf:78:24:79:95:76:35:66:e4:b0:7f:24:ec:
                    9b:9e:48:17:1c:9a:ff:d7:a0:15:62:17:25:09:d8:
                    d3:62:ee:e5:89:8c:c4:11:96:ae:12:76:ef:04:3b:
                    0f:46:02:42:2e:b9:d0:34:6d:aa:6e:c6:de:15:a4:
                    dc:b0:6a:9f:71:4d:8f:25:f5:53:2b:f9:70:2d:5c:
                    42:49:22:c8:54:f8:53:4d:14:31:27:d5:3f:8e:d0:
                    d9:70:b6:b8:07:cc:c7:e0:a7:87:26:6a:5f:69:c0:
                    25:b3:4e:80:05:bf:da:f4:4b:b2:3d:94:12:76:db:
                    f5:84:7c:82:98:75:27:5b:18:a0:bb:72:b5:e5:48:
                    40:47:67:33:39:7c:6c:c8:3e:c3:20:9d:12:f0:6b:
                    ae:93:86:22:1f:dc:97:97:1c:4a:9b:51:24:93:ce:
                    cd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:3E:42:5D:86:65:5A:5B:22:AC:D8:73:4A:85:CD:33:98:E4:4C:15
            X509v3 Authority Key Identifier:
                keyid:D2:E4:CF:E7:F4:7F:52:46:45:45:AD:BB:0B:BC:4D:33:47:8A:AE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:98:9c:86:f8:10:5e:f8:4d:0b:e8:e6:cc:e0:c4:b7:a8:74:
         2a:ac:be:1b:03:20:ed:a9:80:41:b3:0d:41:4c:94:35:12:47:
         5f:ca:dd:8a:1f:65:23:df:70:0e:77:1f:41:e3:8b:42:06:2f:
         8f:f0:42:93:a0:1c:e9:d1:63:d8:c7:c3:63:f4:ba:70:30:dd:
         58:e6:a4:32:44:fb:1f:62:38:f8:fd:34:50:5e:2c:a9:a7:b4:
         d4:0c:47:2d:b2:51:16:47:22:07:d4:a0:46:fd:da:1d:5f:bd:
         0b:29:9b:61:19:1e:28:a2:d1:1e:22:6b:f6:1f:6c:53:b4:2b:
         05:15:f8:4e:94:7a:8a:a4:92:3d:48:1e:a8:50:8a:3d:d1:c9:
         6b:e5:4e:22:54:e1:9f:ac:b5:c8:0a:b9:47:50:4f:95:5f:92:
         53:ad:88:81:da:e9:be:3e:a4:61:b1:e5:e4:e4:8c:1f:a0:53:
         39:1d:2f:61:d2:a7:3a:d4:66:5b:1f:bb:21:5e:40:ef:d6:1c:
         94:b1:23:7a:1f:0c:5d:78:5e:cf:0d:31:f8:fe:17:a5:4d:00:
         bd:bf:61:93:04:f6:a1:57:6b:c6:ea:75:de:3a:ab:68:4e:6c:
         1a:eb:43:fd:c4:95:8d:a2:dc:fe:87:98:d8:7b:b3:0e:75:a7:
         d2:f5:64:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:37 2026 by rpki-client