Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft
File:                     uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft (raw, json)
Hash identifier:          9r+gTIZ//BO1kEbc4ok6FRfgswEnix2sBs0TdSRUOLI=
Subject key identifier:   C3:1B:1D:11:5F:61:72:17:2D:B4:49:F5:A8:50:AF:4F:ED:B1:06:71
Authority key identifier: B9:46:19:87:D0:00:D8:E6:18:85:4C:E4:E3:FF:81:9F:F8:F4:D2:44
Certificate issuer:       /CN=b9461987d000d8e618854ce4e3ff819ff8f4d244
Certificate serial:       019D333E69D79C78EABEB628C4475269C059
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft
Manifest number:          07E9
Signing time:             Sat 28 Mar 2026 07:00:21 +0000
Manifest this update:     Sat 28 Mar 2026 07:00:21 +0000
Manifest next update:     Sun 29 Mar 2026 07:00:21 +0000
Files and hashes:         1: 8ckA-TW7EdXihYdZdkqiS3M4HTc.roa (hash: e4A0NWF+aH4l7eHRDWs3d41SyQFvOrkVOSjq2z6q+xo=)
                          2: uUYZh9AA2OYYhUzk4_-Bn_j00kQ.crl (hash: XkidXR/TG3Kam+38XOMsVz87dBSNdGpjQM1260psPxY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 07:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:33:3e:69:d7:9c:78:ea:be:b6:28:c4:47:52:69:c0:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9461987d000d8e618854ce4e3ff819ff8f4d244
        Validity
            Not Before: Mar 28 07:00:21 2026 GMT
            Not After : Mar 29 07:00:21 2026 GMT
        Subject: CN=c31b1d115f6172172db449f5a850af4fedb10671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:45:56:15:85:ce:fa:68:3d:a7:ef:58:fe:df:
                    a0:8b:c7:80:5f:ee:8a:45:9d:b6:97:5f:da:a9:5b:
                    49:29:12:bd:cb:e6:98:f5:43:b9:ca:ad:44:4b:cb:
                    44:de:f6:89:ed:90:6b:4e:d3:33:3c:a0:16:77:16:
                    56:05:d1:10:e4:3d:73:2f:21:3d:53:d5:c4:eb:06:
                    ad:0c:16:bf:bf:4b:b4:0f:2d:a2:d6:8d:93:2a:02:
                    24:d6:a0:93:79:61:cf:1a:57:12:e0:8c:ea:0b:1a:
                    af:8b:1f:60:b4:8e:82:87:ba:81:3d:52:9d:c2:4e:
                    e0:b7:50:d8:39:15:53:2d:cd:b6:0a:55:23:d8:ef:
                    98:d4:0f:c7:af:35:6d:a2:94:ee:8c:d0:89:df:1d:
                    58:19:f9:ba:e1:43:d6:ab:39:13:59:d9:05:30:e2:
                    de:11:87:30:61:ad:f8:2d:40:28:24:29:2b:30:a0:
                    8d:80:72:64:70:d9:f7:58:fc:1e:83:af:a0:cf:8d:
                    d4:4b:32:63:3b:df:fe:2d:30:a6:53:30:0f:b3:15:
                    bb:8f:60:2e:10:4a:9b:fc:2c:b6:9a:44:7a:41:73:
                    04:1a:ff:f7:38:cc:a2:ff:d1:6d:bf:82:f1:5f:b1:
                    c0:17:1d:b4:29:a7:74:34:91:81:d0:30:fa:1c:d4:
                    2e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:1B:1D:11:5F:61:72:17:2D:B4:49:F5:A8:50:AF:4F:ED:B1:06:71
            X509v3 Authority Key Identifier:
                keyid:B9:46:19:87:D0:00:D8:E6:18:85:4C:E4:E3:FF:81:9F:F8:F4:D2:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2ca7c4-15bb-4728-8c9b-ae1799a3d914/1/uUYZh9AA2OYYhUzk4_-Bn_j00kQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:64:52:dd:b8:df:74:8b:4c:72:d6:09:fa:7c:50:e2:e2:11:
         a0:0d:f4:b2:77:16:4b:97:b6:84:49:cb:70:7f:78:ce:ef:e9:
         ab:99:5c:82:94:bc:95:ce:2d:a7:1c:a7:15:a4:c5:e4:04:dd:
         37:eb:c8:0d:82:a4:e7:97:b2:d0:8c:2a:10:17:03:f6:71:ec:
         21:47:43:3c:b3:6e:25:e6:20:89:de:a5:4a:a0:a6:d6:b3:48:
         f1:b0:98:94:d8:c7:5d:b4:7f:2f:71:ac:76:96:86:18:9a:b3:
         f3:4d:7b:f7:85:6e:83:3e:b6:78:b1:04:a6:2b:ee:37:b5:72:
         3b:2a:e1:e0:cd:2d:ed:3d:b1:b7:4f:c4:69:f6:8e:52:75:d0:
         82:d4:be:68:5d:cb:48:7e:59:7c:0e:96:bf:7e:a7:f9:ee:bb:
         72:6d:d3:3a:60:d6:3e:5a:fb:2b:63:14:44:b1:18:30:ab:c7:
         97:7c:59:30:20:05:33:34:11:16:a3:04:8d:0a:ac:f3:c5:b7:
         46:cb:df:6c:0c:f3:58:13:65:e2:ef:ae:e3:ce:20:28:f2:d5:
         fb:a8:df:39:db:15:7a:fd:a9:26:68:bc:6c:69:32:95:a8:2a:
         b1:94:3f:2f:87:74:b9:4f:59:55:e3:e4:d6:c4:b1:5d:3d:df:
         36:a0:92:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zPmnXnHjqvrYoxEdSacBZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NDYxOTg3ZDAwMGQ4ZTYxODg1NGNlNGUzZmY4MTlmZjhm
NGQyNDQwHhcNMjYwMzI4MDcwMDIxWhcNMjYwMzI5MDcwMDIxWjAzMTEwLwYDVQQD
EyhjMzFiMWQxMTVmNjE3MjE3MmRiNDQ5ZjVhODUwYWY0ZmVkYjEwNjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUVWFYXO+mg9p+9Y/t+gi8eAX+6K
RZ22l1/aqVtJKRK9y+aY9UO5yq1ES8tE3vaJ7ZBrTtMzPKAWdxZWBdEQ5D1zLyE9
U9XE6watDBa/v0u0Dy2i1o2TKgIk1qCTeWHPGlcS4IzqCxqvix9gtI6Ch7qBPVKd
wk7gt1DYORVTLc22ClUj2O+Y1A/HrzVtopTujNCJ3x1YGfm64UPWqzkTWdkFMOLe
EYcwYa34LUAoJCkrMKCNgHJkcNn3WPweg6+gz43USzJjO9/+LTCmUzAPsxW7j2Au
EEqb/Cy2mkR6QXMEGv/3OMyi/9Ftv4LxX7HAFx20Kad0NJGB0DD6HNQuYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMMbHRFfYXIXLbRJ9ahQr0/tsQZxMB8GA1UdIwQY
MBaAFLlGGYfQANjmGIVM5OP/gZ/49NJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVVZWmg5QUEyT1lZaFV6azRfLUJuX2owMGtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8yY2E3YzQtMTViYi00NzI4LThjOWIt
YWUxNzk5YTNkOTE0LzEvdVVZWmg5QUEyT1lZaFV6azRfLUJuX2owMGtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8yY2E3YzQtMTViYi00NzI4LThjOWItYWUxNzk5YTNkOTE0
LzEvdVVZWmg5QUEyT1lZaFV6azRfLUJuX2owMGtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvmRS3bjf
dItMctYJ+nxQ4uIRoA30sncWS5e2hEnLcH94zu/pq5lcgpS8lc4tpxynFaTF5ATd
N+vIDYKk55ey0IwqEBcD9nHsIUdDPLNuJeYgid6lSqCm1rNI8bCYlNjHXbR/L3Gs
dpaGGJqz801794Vugz62eLEEpivuN7VyOyrh4M0t7T2xt0/EafaOUnXQgtS+aF3L
SH5ZfA6Wv36n+e67cm3TOmDWPlr7K2MURLEYMKvHl3xZMCAFMzQRFqMEjQqs88W3
RsvfbAzzWBNl4u+u484gKPLV+6jfOdsVev2pJmi8bGkylagqsZQ/L4d0uU9ZVePk
1sSxXT3fNqCSPQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:25 2026 by rpki-client