Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft
File:                     uO0-vNIVX5oXihA62rSP2osidaU.mft (raw, json)
Hash identifier:          8BhxNKpEo1SNY6ogGPNLEQhhPo2ZyQ6ta/WGs3iV2zc=
Subject key identifier:   37:DD:5C:7D:B3:D5:3E:F3:0A:00:EB:49:C2:CC:DF:14:16:76:00:7E
Authority key identifier: B8:ED:3E:BC:D2:15:5F:9A:17:8A:10:3A:DA:B4:8F:DA:8B:22:75:A5
Certificate issuer:       /CN=b8ed3ebcd2155f9a178a103adab48fda8b2275a5
Certificate serial:       019D284DC1A1CD3A29ED2841B10267ADED2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft
Manifest number:          13EE
Signing time:             Thu 26 Mar 2026 04:01:17 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:17 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:17 +0000
Files and hashes:         1: 1-fsHYTIUTFY0216Qbk8IXnoEcp8.roa (hash: bfgMgiAWnH7b52b8mMjuMw9kDEycqTEWeJ8kbQp2a6c=)
                          2: WIAk63chBCdGYiGDL4jJVIzgpHA.roa (hash: e3taT/GSCbu7IKCePzef39V4CQeoRg7zNm3KotlMe7A=)
                          3: Z4cd67t_oTbTTOY62m-SDIBMEfk.roa (hash: /PTXJtjmPJ7VKf+Ddpyha9KTCciauyGlpPXGyj6aw+Y=)
                          4: uO0-vNIVX5oXihA62rSP2osidaU.crl (hash: e1jh3ew1mUVzAENhe3dxTUbSghqHPkszvMlCC2XT+KI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:c1:a1:cd:3a:29:ed:28:41:b1:02:67:ad:ed:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8ed3ebcd2155f9a178a103adab48fda8b2275a5
        Validity
            Not Before: Mar 26 04:01:17 2026 GMT
            Not After : Mar 27 04:01:17 2026 GMT
        Subject: CN=37dd5c7db3d53ef30a00eb49c2ccdf141676007e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:80:35:66:49:d7:6a:6e:a4:14:d9:1c:b7:dc:
                    5d:55:59:d3:db:e5:4c:63:82:1a:4d:93:d3:17:dc:
                    6d:79:a6:6e:51:0d:86:91:c7:a3:d6:ab:d0:c0:d9:
                    75:50:28:ff:e9:1e:31:a5:37:3b:b1:b8:1e:80:87:
                    46:8c:c9:fd:62:67:d0:38:64:84:f9:e3:f3:25:7d:
                    16:58:f3:4f:ce:9e:1e:b0:b7:13:2e:8e:62:97:46:
                    98:9d:bb:9b:80:bb:6b:2c:97:03:6d:a1:70:13:9a:
                    e1:09:c4:ee:13:62:e9:7d:bc:e8:69:7b:54:7f:87:
                    af:fc:7e:df:30:bd:75:cf:b9:79:c4:8e:cc:9a:2b:
                    c1:07:d0:41:1a:4d:0a:73:21:6a:31:49:14:5c:d2:
                    09:98:67:3c:d0:02:ae:83:88:3d:4c:db:b4:55:9b:
                    6b:8a:2c:07:5a:01:59:a6:9e:13:8c:c4:a3:83:b3:
                    bd:fb:a5:8b:fa:2d:34:5e:60:23:4e:73:81:ad:8f:
                    fc:7d:f7:f3:ce:46:7b:25:8c:37:9a:29:ed:ce:e8:
                    4e:48:b3:63:fa:d8:0a:13:39:53:57:ad:e3:3e:43:
                    4d:f4:e1:4c:6b:8f:5a:84:c8:99:ba:02:b5:03:79:
                    4b:38:40:f8:17:28:13:3e:e5:04:a4:36:36:d7:08:
                    98:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:DD:5C:7D:B3:D5:3E:F3:0A:00:EB:49:C2:CC:DF:14:16:76:00:7E
            X509v3 Authority Key Identifier:
                keyid:B8:ED:3E:BC:D2:15:5F:9A:17:8A:10:3A:DA:B4:8F:DA:8B:22:75:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:7e:cc:99:04:be:f4:bb:c1:38:b9:f9:a6:1b:d3:4b:75:3c:
         ac:75:db:4d:77:14:1b:5b:42:8a:bc:f7:8e:75:26:26:de:60:
         23:39:d5:9a:36:fa:4e:4c:80:f7:84:33:1e:a0:fb:a4:16:e4:
         5a:93:28:36:a8:6c:8b:cf:81:bd:04:63:b8:26:fd:00:0b:dd:
         a6:10:71:3d:d3:ee:4e:ec:67:c1:77:10:75:70:f0:6c:b3:2b:
         b6:cf:ef:7e:85:f4:0e:0d:d3:b3:fc:db:fa:e2:79:8d:14:9c:
         0b:dd:77:a7:18:af:5b:f0:3b:af:15:5e:32:b9:02:74:af:3d:
         fd:f8:58:ef:ad:ba:0a:f9:9b:af:a9:e4:23:d5:91:f0:c0:bd:
         01:45:25:44:0f:cd:ec:ed:ed:58:42:5d:c0:98:81:a1:0b:de:
         95:78:a0:61:61:e2:7b:0b:99:60:ac:32:ce:63:93:18:80:45:
         ad:da:b7:f2:f0:c4:c5:e6:77:78:4e:8c:87:9c:e6:23:b7:e7:
         f2:3b:38:9d:02:67:65:0f:e8:be:bf:bb:ec:6a:ae:e1:73:28:
         d5:01:8d:9e:39:80:13:59:a2:d6:79:e9:4b:39:09:14:cf:5b:
         0f:60:93:3f:1b:14:3e:d0:4e:2c:49:05:a0:fa:7c:ee:00:42:
         2c:3b:3c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:14:14 2026 by rpki-client