Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft
File:                     uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft (raw, json)
Hash identifier:          70qng6oxCV2eBhXLgdlolMY+htfZJCEOWhQRpWP7O8c=
Subject key identifier:   7E:63:46:D5:D0:71:61:3A:11:CB:4F:35:B5:51:21:62:48:08:76:7F
Authority key identifier: BA:FD:79:B6:DD:85:29:0F:EF:61:69:A4:4E:42:61:07:D2:74:65:1A
Certificate issuer:       /CN=bafd79b6dd85290fef6169a44e426107d274651a
Certificate serial:       019D273AF50873B324B4D387638B3E986EC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft
Manifest number:          0777
Signing time:             Wed 25 Mar 2026 23:01:08 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:08 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:08 +0000
Files and hashes:         1: 4zHjTJievMCXjs1MUKZY0zgnlZk.roa (hash: jFjIAWns9tkVOTNAS5iBg9kuu8j0fEnt1irbpmfUxy4=)
                          2: QRfdDVkt_h3uZi2qFgrq9ytk9NM.roa (hash: kVt/mkZ/E59+3oUc66185qlzg7hwnqUaLl1xxhgP/VQ=)
                          3: uv15tt2FKQ_vYWmkTkJhB9J0ZRo.crl (hash: tskn9kXZW0LUHmiFG1YUH59mtipjDd6aSX+WMD3EG3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:f5:08:73:b3:24:b4:d3:87:63:8b:3e:98:6e:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bafd79b6dd85290fef6169a44e426107d274651a
        Validity
            Not Before: Mar 25 23:01:08 2026 GMT
            Not After : Mar 26 23:01:08 2026 GMT
        Subject: CN=7e6346d5d071613a11cb4f35b55121624808767f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8c:1d:67:43:4f:62:25:dd:fe:28:bc:cd:7d:
                    f7:df:36:4c:d3:df:bd:86:48:4d:be:08:66:d6:d9:
                    8a:07:c6:86:a0:9c:36:ef:7f:f0:20:fe:c6:62:2d:
                    0d:bc:82:1c:63:9c:94:8f:3a:06:e8:51:38:23:ac:
                    f8:fe:e8:11:57:2f:65:3f:1a:58:99:84:f6:95:cd:
                    f8:9b:c3:66:01:e1:aa:30:8d:41:24:b7:62:9d:d0:
                    09:ef:76:4e:d2:09:2b:b1:a8:36:11:94:ff:39:2f:
                    52:a0:c1:e9:dc:35:10:d7:d2:dd:f1:76:22:e8:2e:
                    05:49:bc:e1:86:ff:02:6e:1f:74:37:d9:c2:86:65:
                    f2:ee:18:86:e1:a5:3b:5d:fe:e3:4a:11:39:ff:64:
                    39:d1:b1:71:98:cb:33:f3:dc:9c:fa:0f:07:cd:14:
                    5d:a2:17:31:bb:8f:b7:c7:e3:ca:31:eb:01:e2:66:
                    e2:61:18:9e:10:75:32:12:e6:5b:43:7c:56:3a:8e:
                    3c:84:c0:57:df:87:cd:c5:eb:97:cd:c3:5e:b3:09:
                    47:fb:5d:42:e2:62:d9:33:ef:d7:93:b0:b9:b5:07:
                    6b:ad:ba:04:e6:cf:58:43:21:c8:7c:93:84:e6:f2:
                    56:b4:b7:5a:86:28:e6:73:86:56:df:a7:26:15:01:
                    42:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:63:46:D5:D0:71:61:3A:11:CB:4F:35:B5:51:21:62:48:08:76:7F
            X509v3 Authority Key Identifier:
                keyid:BA:FD:79:B6:DD:85:29:0F:EF:61:69:A4:4E:42:61:07:D2:74:65:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:9a:13:c6:36:7a:94:85:d3:63:28:69:d6:97:b3:34:91:b4:
         f6:2d:82:67:49:02:be:bb:a0:ae:5d:27:e6:c7:ab:82:37:fd:
         a7:1b:73:0b:48:15:ca:e9:c8:66:48:96:6e:7b:f7:24:10:b7:
         cd:df:90:a8:a3:10:a1:6e:c8:ab:a2:43:d9:b8:6e:95:58:c3:
         37:12:f5:80:c5:e6:18:4e:c3:02:cc:92:34:00:9e:12:28:da:
         2b:b2:36:c4:d3:09:92:79:75:1c:24:43:0e:90:bb:d0:45:48:
         96:c8:c3:a8:16:e3:97:0f:09:cf:b7:09:bb:dd:20:02:f4:c8:
         66:6a:12:04:58:e7:ae:d5:f2:5b:55:87:c8:b3:37:8b:69:ea:
         65:3f:77:b1:e4:c8:dd:88:70:df:31:26:68:92:d8:54:a5:20:
         31:f1:9b:e5:c3:7d:d0:7f:db:dd:63:c9:3f:64:c9:41:94:1e:
         2d:3e:e3:6e:36:f2:7e:e5:eb:92:4a:63:ff:6e:6e:0d:1d:de:
         96:c6:9f:ec:31:dd:6a:15:52:e9:4c:01:31:0a:04:a7:9d:87:
         d6:dd:cb:83:26:08:6a:ab:2b:78:ab:80:c9:ae:d0:dd:83:b2:
         14:3b:76:09:65:d9:db:ed:8a:fb:e7:8a:28:1b:48:c8:f8:da:
         34:ae:6b:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOvUIc7MktNOHY4s+mG7BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhZmQ3OWI2ZGQ4NTI5MGZlZjYxNjlhNDRlNDI2MTA3ZDI3
NDY1MWEwHhcNMjYwMzI1MjMwMTA4WhcNMjYwMzI2MjMwMTA4WjAzMTEwLwYDVQQD
Eyg3ZTYzNDZkNWQwNzE2MTNhMTFjYjRmMzViNTUxMjE2MjQ4MDg3NjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4wdZ0NPYiXd/ii8zX333zZM09+9
hkhNvghm1tmKB8aGoJw273/wIP7GYi0NvIIcY5yUjzoG6FE4I6z4/ugRVy9lPxpY
mYT2lc34m8NmAeGqMI1BJLdindAJ73ZO0gkrsag2EZT/OS9SoMHp3DUQ19Ld8XYi
6C4FSbzhhv8Cbh90N9nChmXy7hiG4aU7Xf7jShE5/2Q50bFxmMsz89yc+g8HzRRd
ohcxu4+3x+PKMesB4mbiYRieEHUyEuZbQ3xWOo48hMBX34fNxeuXzcNeswlH+11C
4mLZM+/Xk7C5tQdrrboE5s9YQyHIfJOE5vJWtLdahijmc4ZW36cmFQFCgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5jRtXQcWE6EctPNbVRIWJICHZ/MB8GA1UdIwQY
MBaAFLr9ebbdhSkP72FppE5CYQfSdGUaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXYxNXR0MkZLUV92WVdta1RrSmhCOUowWlJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8xNjlhMjEtZjNjMS00M2I5LWFkZTUt
ODY5NmE5NjA0NGYyLzEvdXYxNXR0MkZLUV92WVdta1RrSmhCOUowWlJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8xNjlhMjEtZjNjMS00M2I5LWFkZTUtODY5NmE5NjA0NGYy
LzEvdXYxNXR0MkZLUV92WVdta1RrSmhCOUowWlJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhZoTxjZ6
lIXTYyhp1pezNJG09i2CZ0kCvrugrl0n5sergjf9pxtzC0gVyunIZkiWbnv3JBC3
zd+QqKMQoW7Iq6JD2bhulVjDNxL1gMXmGE7DAsySNACeEijaK7I2xNMJknl1HCRD
DpC70EVIlsjDqBbjlw8Jz7cJu90gAvTIZmoSBFjnrtXyW1WHyLM3i2nqZT93seTI
3Yhw3zEmaJLYVKUgMfGb5cN90H/b3WPJP2TJQZQeLT7jbjbyfuXrkkpj/25uDR3e
lsaf7DHdahVS6UwBMQoEp52H1t3LgyYIaqsreKuAya7Q3YOyFDt2CWXZ2+2K++eK
KBtIyPjaNK5rfQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:33 2026 by rpki-client