Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.mft
File:                     uBcWKHfan0Awu8uf6KwUPmqyhxs.mft (raw, json)
Hash identifier:          TxMjnwiidoRWt1I9rQnxn4+YF84NjP8wHjSUj3d2iR8=
Subject key identifier:   94:23:D4:73:26:CD:DB:17:9E:1D:E8:17:4E:6A:07:98:96:5C:31:F1
Authority key identifier: B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B
Certificate issuer:       /CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b
Certificate serial:       019D26CCC7E43DFC3947C04CDB9657079435
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.mft
Manifest number:          1711
Signing time:             Wed 25 Mar 2026 21:00:47 +0000
Manifest this update:     Wed 25 Mar 2026 21:00:47 +0000
Manifest next update:     Thu 26 Mar 2026 21:00:47 +0000
Files and hashes:         1: 2WXoZsn32fgVX8aqYMrc08d9fY8.roa (hash: bkwPNVH2ORQnIRn5LBtVmwQryOqVX18kB3tiu7t2/40=)
                          2: D48UgkokE1vhCTwhPkqZ0LLoocA.roa (hash: fMJLF+vFo9vEbRLFDDkPD4SnqGkEa/lJe6CpbUSG9eQ=)
                          3: PEnbwEnEOUP5a1qMbrFIPU4NOkU.roa (hash: CnUSPKXJdJobJ8CN6jHtjZLTtAxSZjk1/h8PvReUstg=)
                          4: sDmZmF3fo3gdZLDEv2WCfsdt6Z8.roa (hash: EiTHbukI/Tpn+Gtw5R4ZOGfo0HNyDTx7rIEuV9YoQNo=)
                          5: uBcWKHfan0Awu8uf6KwUPmqyhxs.crl (hash: 3SKdTkpF5/+3wDizgU954VtqPfWV8MoekVne8VcnvHw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cc:c7:e4:3d:fc:39:47:c0:4c:db:96:57:07:94:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b
        Validity
            Not Before: Mar 25 21:00:47 2026 GMT
            Not After : Mar 26 21:00:47 2026 GMT
        Subject: CN=9423d47326cddb179e1de8174e6a0798965c31f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c0:cd:62:6b:a0:5c:53:90:fc:b5:49:d1:dc:
                    89:bd:a7:f2:41:c3:4b:6e:27:ea:7c:46:e5:85:1f:
                    5f:23:f8:89:ea:31:4f:c7:b0:b3:9c:05:a2:e4:c5:
                    54:7d:91:ea:c2:7e:0c:21:95:f0:82:da:3f:c9:43:
                    28:4d:9c:5e:83:1f:54:60:cf:62:2e:c1:f0:bf:aa:
                    e6:74:14:21:22:2e:81:24:e7:71:8c:66:e9:5d:5c:
                    2c:6a:c2:5c:25:be:de:17:a2:0e:79:ba:3c:a8:38:
                    47:07:da:b4:d7:c2:6e:d8:2b:94:47:9e:85:49:e9:
                    29:89:ea:01:ca:c3:2f:88:08:a3:87:ab:0c:34:6d:
                    44:d0:a5:eb:76:f0:a1:1e:d0:a5:13:55:44:6c:50:
                    50:5f:5e:e7:32:3d:82:20:33:0c:f5:4c:94:a9:5b:
                    7c:5f:dd:8b:e6:98:f4:89:2f:2d:54:a7:15:9c:ec:
                    69:a4:2d:4e:45:81:5a:c6:9b:e6:c1:ea:36:1c:70:
                    78:5e:a1:e8:23:d8:cb:7f:96:7f:fa:87:39:e2:da:
                    b7:31:dd:45:5e:b1:e5:03:cc:bd:5c:12:82:5e:45:
                    a0:0d:63:eb:44:c3:f8:3f:d4:fc:b3:35:14:88:6c:
                    ba:44:47:05:86:2b:18:63:d0:53:22:e0:5a:bf:76:
                    65:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:23:D4:73:26:CD:DB:17:9E:1D:E8:17:4E:6A:07:98:96:5C:31:F1
            X509v3 Authority Key Identifier:
                keyid:B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:b8:ef:47:73:ac:11:db:a1:24:94:e0:5b:c5:0b:ce:ae:5f:
         08:96:31:c1:76:b8:8d:37:60:0e:de:23:39:52:6e:86:ee:42:
         f3:16:27:e7:76:47:96:8a:50:ea:c1:21:29:c2:0c:9a:10:9f:
         91:78:81:7f:5a:06:3d:c5:79:09:5e:87:a7:c7:c7:d3:19:d4:
         f7:8a:7c:20:69:0f:06:7f:b9:99:03:dd:b6:e4:97:18:1a:4f:
         e7:f7:ba:ca:4f:4c:9b:e8:b8:3e:68:23:76:84:db:04:03:df:
         67:48:22:f0:49:65:8d:cd:5c:9c:e3:fa:cc:1c:66:fd:41:59:
         22:cb:41:79:9e:5d:26:15:45:65:9e:18:c4:c3:f3:aa:f4:a2:
         43:ae:cc:6e:1f:e8:eb:bf:6e:ae:bd:85:10:ff:be:81:6c:1b:
         7b:75:d2:e1:0b:14:ba:f3:16:c2:2a:e9:db:5a:2e:d4:a4:5e:
         11:4b:6e:d5:b3:76:b2:89:f8:c2:62:61:66:2c:cd:8b:cf:3b:
         dd:20:83:1f:49:30:d6:92:15:6a:f9:92:56:35:0a:03:35:b1:
         8d:52:a7:6b:4a:a2:77:b3:96:8f:9a:9b:53:89:c0:22:11:e2:
         3a:32:6a:dd:8b:f9:2b:f2:f5:77:6d:48:5f:76:2b:89:69:6b:
         38:fe:c4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:32:19 2026 by rpki-client