Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/9bc0bb-5dcc-47d7-941f-8aeb6bea3794/1/UEGb9-kaUoTZdT7m7Fj5JFrcbBo.mft
File:                     UEGb9-kaUoTZdT7m7Fj5JFrcbBo.mft (raw, json)
Hash identifier:          qqisMeVMgarUO4ZlDI3rV0QkmOPTucSjjXeIAGIPyZM=
Subject key identifier:   64:D1:63:38:87:BB:31:7A:F8:4E:3D:5A:9A:AC:93:DF:F9:14:81:FC
Authority key identifier: 50:41:9B:F7:E9:1A:52:84:D9:75:3E:E6:EC:58:F9:24:5A:DC:6C:1A
Certificate issuer:       /CN=50419bf7e91a5284d9753ee6ec58f9245adc6c1a
Certificate serial:       019D341A55480214649BA59282C3A086E601
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UEGb9-kaUoTZdT7m7Fj5JFrcbBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/9bc0bb-5dcc-47d7-941f-8aeb6bea3794/1/UEGb9-kaUoTZdT7m7Fj5JFrcbBo.mft
Manifest number:          17
Signing time:             Sat 28 Mar 2026 11:00:34 +0000
Manifest this update:     Sat 28 Mar 2026 11:00:34 +0000
Manifest next update:     Sun 29 Mar 2026 11:00:34 +0000
Files and hashes:         1: UEGb9-kaUoTZdT7m7Fj5JFrcbBo.crl (hash: 9METru5hGcdxYr6fDpF/eZt9znigUGaTy/wvLpPPVhk=)
                          2: oU2txaS5vqeLhMtArzDrFt6Zm_k.roa (hash: NWY7UpTwbh9+lgAmjrOULjUiB2zheOSSs88r/gMtSuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/9bc0bb-5dcc-47d7-941f-8aeb6bea3794/1/UEGb9-kaUoTZdT7m7Fj5JFrcbBo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/9bc0bb-5dcc-47d7-941f-8aeb6bea3794/1/UEGb9-kaUoTZdT7m7Fj5JFrcbBo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UEGb9-kaUoTZdT7m7Fj5JFrcbBo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:34:1a:55:48:02:14:64:9b:a5:92:82:c3:a0:86:e6:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50419bf7e91a5284d9753ee6ec58f9245adc6c1a
        Validity
            Not Before: Mar 28 11:00:34 2026 GMT
            Not After : Mar 29 11:00:34 2026 GMT
        Subject: CN=64d1633887bb317af84e3d5a9aac93dff91481fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:93:69:85:0b:28:4d:94:84:52:63:67:96:24:
                    e5:f2:2e:f6:6f:f3:3e:5b:d5:bc:45:43:37:48:4b:
                    fa:be:61:e8:5a:99:1e:81:bc:1a:ae:3d:8d:a4:89:
                    d4:ce:97:bc:5e:d0:e5:5b:5d:a2:91:1a:12:8e:6a:
                    d2:47:5c:7d:c1:65:1d:27:c6:9e:cb:d9:eb:5a:a3:
                    fb:c7:df:49:f4:48:c6:38:56:23:6b:a5:ef:e6:bd:
                    5f:7b:43:1d:a9:29:8a:01:b6:f1:fe:34:b8:47:95:
                    a3:81:5e:51:fd:74:7c:5c:84:72:6e:ba:5d:0e:f4:
                    9a:6d:8d:0a:5c:7a:d7:83:93:e7:d1:88:02:34:4f:
                    24:44:b2:11:78:6f:fa:0b:12:25:cd:21:01:5b:72:
                    4d:4c:e3:21:ca:7b:cb:6e:73:25:f1:e9:f9:53:cd:
                    07:0e:9a:2f:f9:c0:41:44:23:73:87:af:ea:28:ab:
                    78:e7:79:a9:3e:e9:0e:de:19:f7:b8:9b:7c:e8:fd:
                    c0:5e:84:62:c1:50:ce:ed:c0:41:25:62:eb:b1:dd:
                    1b:d1:a9:74:2d:94:1f:9f:58:43:ec:ee:69:91:b9:
                    c8:dc:f7:0f:94:c1:e0:d4:9e:53:32:ee:17:73:a2:
                    a9:67:b2:0b:71:f5:f8:a4:22:30:4b:e4:6c:6c:db:
                    33:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D1:63:38:87:BB:31:7A:F8:4E:3D:5A:9A:AC:93:DF:F9:14:81:FC
            X509v3 Authority Key Identifier:
                keyid:50:41:9B:F7:E9:1A:52:84:D9:75:3E:E6:EC:58:F9:24:5A:DC:6C:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEGb9-kaUoTZdT7m7Fj5JFrcbBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9bc0bb-5dcc-47d7-941f-8aeb6bea3794/1/UEGb9-kaUoTZdT7m7Fj5JFrcbBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9bc0bb-5dcc-47d7-941f-8aeb6bea3794/1/UEGb9-kaUoTZdT7m7Fj5JFrcbBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:b1:88:be:72:79:5f:61:a6:8a:15:4e:26:97:37:9b:2e:24:
         a8:37:57:d2:43:86:72:ec:c4:db:a1:ed:b6:12:13:39:b8:c0:
         24:d0:7a:71:89:1b:5c:80:bf:6a:06:66:48:d2:99:84:64:d2:
         2a:3d:3a:35:8d:98:24:28:11:4c:80:98:04:0a:49:f3:74:ab:
         df:1e:f1:e0:04:67:5a:51:5d:8a:22:95:a4:ad:81:e1:e7:df:
         6c:d6:7c:de:9a:cf:32:7f:9f:ca:ed:d6:47:f6:b7:bb:bb:4e:
         db:db:64:ed:c1:2b:25:ef:9f:43:12:7e:ba:45:29:08:ae:ea:
         ed:f8:07:45:4d:77:99:66:34:60:5c:5e:30:0b:4f:0f:f0:df:
         ef:ae:8c:8f:c2:bb:57:71:4e:9e:36:b1:79:32:48:0a:ea:06:
         ed:25:e6:c1:3c:e9:70:58:6f:bb:bc:00:17:40:77:fb:e2:9b:
         32:94:a5:71:46:2b:08:d3:16:cc:81:e5:57:41:08:05:3c:ee:
         47:68:86:ad:7d:12:d3:0e:8e:c0:e1:bd:8f:22:d0:22:62:f8:
         f3:dd:89:e0:4b:11:ab:97:5b:05:2a:01:dd:38:a6:b6:1c:6a:
         c8:3e:6b:65:71:3f:28:96:55:e7:07:00:c9:78:85:58:04:d1:
         93:9f:dd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 14:29:55 2026 by rpki-client