Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.mft
File:                     UvbBEDFTJEhSvLPiO23ioWuqen8.mft (raw, json)
Hash identifier:          nCcYPYgjgBSF22YvQ8Dxd8PpHICNYiNSOIp+8WGM+hc=
Subject key identifier:   FE:E9:3E:D7:BA:81:E3:C3:C9:4D:00:37:4B:81:E9:AF:A4:CF:62:09
Authority key identifier: 52:F6:C1:10:31:53:24:48:52:BC:B3:E2:3B:6D:E2:A1:6B:AA:7A:7F
Certificate issuer:       /CN=52f6c1103153244852bcb3e23b6de2a16baa7a7f
Certificate serial:       019D2816DF1C8A0A051298C5DA5CCDE93E37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UvbBEDFTJEhSvLPiO23ioWuqen8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.mft
Manifest number:          12D3
Signing time:             Thu 26 Mar 2026 03:01:20 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:20 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:20 +0000
Files and hashes:         1: UvbBEDFTJEhSvLPiO23ioWuqen8.crl (hash: EwJSDQaLjsYpjSBy8ZFfGJLtVejLtLv7j78b+fiTxM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UvbBEDFTJEhSvLPiO23ioWuqen8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:df:1c:8a:0a:05:12:98:c5:da:5c:cd:e9:3e:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52f6c1103153244852bcb3e23b6de2a16baa7a7f
        Validity
            Not Before: Mar 26 03:01:20 2026 GMT
            Not After : Mar 27 03:01:20 2026 GMT
        Subject: CN=fee93ed7ba81e3c3c94d00374b81e9afa4cf6209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:83:fe:17:cb:c2:04:1b:29:b6:23:b3:3d:2a:
                    f4:4e:a5:c1:cb:98:c2:35:6f:db:85:20:4f:48:78:
                    d6:45:b4:4b:7e:2f:fc:27:0f:6f:d3:6c:4d:89:2a:
                    d2:46:10:b9:bd:dc:98:39:9c:60:df:c4:1f:f0:9c:
                    56:7b:96:1d:4b:81:ca:c0:05:ae:ca:d5:63:5f:5d:
                    18:a1:2f:33:4f:c3:c9:42:f6:f2:5d:e5:2a:38:f3:
                    b6:92:4f:c6:54:f2:e1:02:32:ac:b5:3c:87:26:f4:
                    c2:fa:09:c4:12:dd:2f:06:42:df:e3:de:c0:68:5f:
                    a8:3c:36:d4:64:62:75:8e:c8:cf:5c:5b:5c:dc:13:
                    b0:82:52:9a:61:c7:b0:59:ff:c3:c7:d5:a3:3b:b9:
                    39:59:be:21:63:3b:ca:8a:99:8d:18:27:72:ad:45:
                    c6:6a:04:9f:59:97:fc:84:11:3e:68:8e:e6:dc:e3:
                    ed:2e:92:35:eb:42:68:9d:50:1a:f8:1c:41:0e:59:
                    d8:ae:30:6a:0c:85:bb:a2:0a:9b:7a:6c:c4:58:de:
                    e2:bd:b0:0d:a1:7f:f5:6c:5d:27:ef:b2:49:82:39:
                    96:dc:e0:2b:3a:6e:4a:08:0d:57:8c:b4:60:c8:e4:
                    3d:ac:dd:84:2b:8f:d1:59:3d:6d:b6:76:a3:44:ee:
                    d6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E9:3E:D7:BA:81:E3:C3:C9:4D:00:37:4B:81:E9:AF:A4:CF:62:09
            X509v3 Authority Key Identifier:
                keyid:52:F6:C1:10:31:53:24:48:52:BC:B3:E2:3B:6D:E2:A1:6B:AA:7A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvbBEDFTJEhSvLPiO23ioWuqen8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:06:05:eb:28:61:8a:58:11:50:f5:eb:c5:d7:c3:03:35:fe:
         1a:f4:03:03:37:dc:2a:1e:30:40:bf:2c:c1:d2:e6:3e:31:b5:
         e3:e2:ba:13:ca:d3:37:d5:30:9b:68:df:ba:a1:ce:c2:99:3c:
         bd:a3:ac:54:ce:87:fa:e0:a4:91:e9:db:d3:5c:09:5f:e9:d3:
         80:2c:39:a3:27:8f:e6:31:f1:53:56:a4:3b:7e:4c:53:13:69:
         8a:a7:26:a7:b0:0a:bc:65:9d:2b:91:e5:96:2c:ea:1b:6f:19:
         59:15:7c:a5:dc:04:85:04:41:77:b1:8e:34:cc:21:cf:ea:6e:
         8e:9e:01:8f:6e:3a:89:90:22:be:ca:dc:18:22:72:5e:0a:96:
         e0:2a:f9:fc:53:84:39:c5:3b:a8:0e:53:7f:20:ac:a9:d3:98:
         4b:1b:5a:15:b4:5b:c2:41:7e:13:e0:a4:7b:44:eb:e1:ab:d0:
         da:3b:17:2b:75:17:66:ed:54:ca:de:2e:a8:cd:3c:e4:f7:12:
         12:47:2e:ec:56:06:b3:ba:0c:76:24:e4:15:68:fc:33:9e:7e:
         f3:f1:b3:87:da:60:3d:4d:d6:e0:b7:a5:b8:8f:45:fe:4c:55:
         21:d0:f3:28:ec:53:96:51:4a:64:a7:ab:e1:66:90:23:dd:01:
         70:da:1f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:10:47 2026 by rpki-client