Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/ULtMeBpbOT_wf7QF5SgXn1q4dyY.mft
File:                     ULtMeBpbOT_wf7QF5SgXn1q4dyY.mft (raw, json)
Hash identifier:          DR1KaxrotRri9aF95RaQVRdfIa711GARpbMFmFD7T80=
Subject key identifier:   D7:62:D7:3C:43:70:04:94:B2:06:F5:6B:6C:4A:9F:F7:A3:3D:FF:B3
Authority key identifier: 50:BB:4C:78:1A:5B:39:3F:F0:7F:B4:05:E5:28:17:9F:5A:B8:77:26
Certificate issuer:       /CN=50bb4c781a5b393ff07fb405e528179f5ab87726
Certificate serial:       019D2772709EEE49A751BAEE01BF3E95C8CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ULtMeBpbOT_wf7QF5SgXn1q4dyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/ULtMeBpbOT_wf7QF5SgXn1q4dyY.mft
Manifest number:          181A
Signing time:             Thu 26 Mar 2026 00:01:44 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:44 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:44 +0000
Files and hashes:         1: ULtMeBpbOT_wf7QF5SgXn1q4dyY.crl (hash: VqJgcTgmDMmNZST+0s2D1nemd7Ok1Rpe1FOeDPVhYA8=)
                          2: vFI2x1fy3xps2xAf3f_h_9yy-Tg.roa (hash: TtgylUr0tbdZiUoUKT4r/viS1heMVtVcTRSM+MrqZkU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/ULtMeBpbOT_wf7QF5SgXn1q4dyY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/ULtMeBpbOT_wf7QF5SgXn1q4dyY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ULtMeBpbOT_wf7QF5SgXn1q4dyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:70:9e:ee:49:a7:51:ba:ee:01:bf:3e:95:c8:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50bb4c781a5b393ff07fb405e528179f5ab87726
        Validity
            Not Before: Mar 26 00:01:44 2026 GMT
            Not After : Mar 27 00:01:44 2026 GMT
        Subject: CN=d762d73c43700494b206f56b6c4a9ff7a33dffb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:db:26:00:ad:1e:3b:cd:8a:b4:eb:47:07:2d:
                    ff:b2:25:ee:13:be:5d:c9:a9:58:e8:9e:f0:5e:16:
                    8e:c5:12:18:71:22:bc:ae:9b:48:ec:1a:2c:b8:c8:
                    2e:fe:ad:9f:d9:6d:91:a4:5e:0a:fc:12:b0:85:51:
                    b1:df:84:2b:30:5e:a2:9a:41:23:00:8e:35:9e:3f:
                    40:5e:a1:a4:01:4d:83:15:45:55:df:3c:ae:54:60:
                    06:79:a1:94:71:ed:73:7f:83:58:b6:0f:a8:dc:bf:
                    50:6f:a3:a9:41:e7:e4:0c:be:6f:77:a5:4f:dd:43:
                    1d:41:19:65:ef:0c:f7:a2:08:52:66:8a:0b:09:d2:
                    e8:87:23:8d:34:2d:b5:32:74:f0:62:b1:1d:27:cf:
                    11:5a:d7:7f:b5:99:2b:1a:98:79:32:21:fe:b8:1a:
                    35:c9:02:00:5b:37:b2:85:f6:fe:4a:a5:ed:9c:fb:
                    1c:09:a8:c8:63:16:98:74:08:bd:86:0e:d4:d4:a8:
                    c9:3b:6e:41:e6:7d:24:78:f8:55:b5:4f:01:81:30:
                    0b:7f:c9:13:4b:f8:f8:e1:1a:71:98:3a:30:f2:9b:
                    1a:f8:4d:b9:bb:88:6b:f6:fd:0a:4e:30:94:68:4e:
                    2a:22:da:a7:77:12:70:02:65:31:f1:1e:28:ff:a2:
                    31:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:62:D7:3C:43:70:04:94:B2:06:F5:6B:6C:4A:9F:F7:A3:3D:FF:B3
            X509v3 Authority Key Identifier:
                keyid:50:BB:4C:78:1A:5B:39:3F:F0:7F:B4:05:E5:28:17:9F:5A:B8:77:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULtMeBpbOT_wf7QF5SgXn1q4dyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/ULtMeBpbOT_wf7QF5SgXn1q4dyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/ULtMeBpbOT_wf7QF5SgXn1q4dyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:92:a7:84:58:44:f9:77:f3:8c:29:4c:f9:61:f7:4e:07:23:
         2f:ca:87:ea:05:4a:b4:46:c2:3b:84:94:a2:f5:5f:8c:3e:6d:
         3d:76:a7:09:67:52:09:1b:04:66:3d:1c:48:e8:5d:9c:b9:2e:
         73:a2:9b:17:2f:ae:02:bc:a4:1b:db:2d:df:d5:ba:47:c3:af:
         cd:ad:4a:e0:ae:d1:87:4f:aa:2b:ef:1a:1d:49:01:50:ea:25:
         a9:2f:99:4f:a3:53:1d:bc:57:ee:38:16:79:3a:49:94:1b:e4:
         ff:97:25:a6:d9:bf:5d:bf:38:c5:56:78:46:78:b6:65:e8:f7:
         5e:5a:97:c5:cc:ca:2d:b5:b5:27:0e:9b:ea:51:71:ba:d2:c7:
         fc:09:cb:7c:15:d9:3e:9d:f4:5c:74:96:d9:87:59:35:e4:8e:
         41:70:3c:28:03:b2:a5:d2:55:34:20:2e:dd:37:b1:e6:88:7e:
         b7:0b:78:9a:a2:90:66:99:c3:59:76:0b:0d:73:ea:2f:c3:7b:
         2f:72:6b:a9:84:75:d5:06:ee:05:e9:1c:70:53:54:1c:89:bb:
         74:3f:43:47:67:a7:10:ee:b2:06:e4:2c:24:e8:55:9e:38:f6:
         c9:d2:ff:3f:fa:3a:6d:54:06:bc:17:4d:2a:37:3b:de:f9:22:
         d5:6e:44:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncnCe7kmnUbruAb8+lcjMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYmI0Yzc4MWE1YjM5M2ZmMDdmYjQwNWU1MjgxNzlmNWFi
ODc3MjYwHhcNMjYwMzI2MDAwMTQ0WhcNMjYwMzI3MDAwMTQ0WjAzMTEwLwYDVQQD
EyhkNzYyZDczYzQzNzAwNDk0YjIwNmY1NmI2YzRhOWZmN2EzM2RmZmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttsmAK0eO82KtOtHBy3/siXuE75d
yalY6J7wXhaOxRIYcSK8rptI7BosuMgu/q2f2W2RpF4K/BKwhVGx34QrMF6imkEj
AI41nj9AXqGkAU2DFUVV3zyuVGAGeaGUce1zf4NYtg+o3L9Qb6OpQefkDL5vd6VP
3UMdQRll7wz3oghSZooLCdLohyONNC21MnTwYrEdJ88RWtd/tZkrGph5MiH+uBo1
yQIAWzeyhfb+SqXtnPscCajIYxaYdAi9hg7U1KjJO25B5n0kePhVtU8BgTALf8kT
S/j44RpxmDow8psa+E25u4hr9v0KTjCUaE4qItqndxJwAmUx8R4o/6Ix5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdi1zxDcASUsgb1a2xKn/ejPf+zMB8GA1UdIwQY
MBaAFFC7THgaWzk/8H+0BeUoF59auHcmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUx0TWVCcGJPVF93ZjdRRjVTZ1huMXE0ZHlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8xYjEzOGUtMWUxOS00YzdkLThjYTQt
Yjg3ZjkxYzI5YjllLzEvVUx0TWVCcGJPVF93ZjdRRjVTZ1huMXE0ZHlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8xYjEzOGUtMWUxOS00YzdkLThjYTQtYjg3ZjkxYzI5Yjll
LzEvVUx0TWVCcGJPVF93ZjdRRjVTZ1huMXE0ZHlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACJKnhFhE
+XfzjClM+WH3TgcjL8qH6gVKtEbCO4SUovVfjD5tPXanCWdSCRsEZj0cSOhdnLku
c6KbFy+uArykG9st39W6R8Ovza1K4K7Rh0+qK+8aHUkBUOolqS+ZT6NTHbxX7jgW
eTpJlBvk/5clptm/Xb84xVZ4Rni2Zej3XlqXxczKLbW1Jw6b6lFxutLH/AnLfBXZ
Pp30XHSW2YdZNeSOQXA8KAOypdJVNCAu3Tex5oh+twt4mqKQZpnDWXYLDXPqL8N7
L3JrqYR11QbuBekccFNUHIm7dD9DR2enEO6yBuQsJOhVnjj2ydL/P/o6bVQGvBdN
Kjc73vki1W5EKA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:55:58 2026 by rpki-client