Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft
File:                     uUZ8BbpC7h85pkpT4dA0Azbl48M.mft (raw, json)
Hash identifier:          FH3FRJ4kFBQBAcnW61eJ2L6B/PrBU7scJd7GANKM4gM=
Subject key identifier:   E4:51:BE:EB:D7:95:25:ED:D6:6E:F6:C3:85:ED:4D:63:73:72:09:2B
Authority key identifier: B9:46:7C:05:BA:42:EE:1F:39:A6:4A:53:E1:D0:34:03:36:E5:E3:C3
Certificate issuer:       /CN=b9467c05ba42ee1f39a64a53e1d0340336e5e3c3
Certificate serial:       019D265FE85B7598CF018590AAD197C80C9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUZ8BbpC7h85pkpT4dA0Azbl48M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft
Manifest number:          1883
Signing time:             Wed 25 Mar 2026 19:01:52 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:52 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:52 +0000
Files and hashes:         1: uUZ8BbpC7h85pkpT4dA0Azbl48M.crl (hash: 0nAA939CE+GGFy+lPUfU1FraQFdLRVvkxOSUsZ3Uz+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUZ8BbpC7h85pkpT4dA0Azbl48M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:e8:5b:75:98:cf:01:85:90:aa:d1:97:c8:0c:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9467c05ba42ee1f39a64a53e1d0340336e5e3c3
        Validity
            Not Before: Mar 25 19:01:52 2026 GMT
            Not After : Mar 26 19:01:52 2026 GMT
        Subject: CN=e451beebd79525edd66ef6c385ed4d637372092b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:94:83:8c:7d:3d:7f:bc:e0:cb:d8:e0:43:dc:
                    39:b1:52:60:9a:35:98:4d:9a:8c:65:4a:5e:61:5a:
                    44:be:22:6e:67:49:aa:80:1e:47:89:90:64:7e:ee:
                    7e:38:5f:a8:0d:c0:d9:cd:ee:7c:52:94:93:e2:a6:
                    8d:a9:75:5d:5c:c1:d9:05:9d:b9:fb:9c:76:aa:34:
                    c0:c6:40:a7:b1:92:ff:4a:aa:0b:03:d8:fc:76:85:
                    2a:9f:4d:df:eb:e1:0c:4f:08:5c:21:57:55:83:a9:
                    a5:e3:d9:13:48:a3:80:9b:54:3f:ba:27:67:db:e3:
                    50:8b:97:56:49:9f:6e:8e:a5:8e:7d:25:bf:b0:a6:
                    94:b1:4c:49:4e:9e:16:bf:10:28:e3:ce:d4:99:c8:
                    1d:ad:35:b7:b0:2a:84:e4:78:62:37:47:a5:ff:7d:
                    b6:c0:1f:e2:85:b3:4e:27:15:de:93:75:55:79:b5:
                    6c:a5:82:da:11:3e:20:8c:5b:85:2d:bc:49:44:e6:
                    ac:92:b3:92:af:98:1c:a8:e8:9b:4b:c0:07:38:35:
                    0d:13:e6:62:86:e7:1f:d2:c9:e7:d0:2c:9c:d6:16:
                    6d:ba:c9:58:f4:9b:13:b0:e6:52:da:da:38:30:a5:
                    fb:ae:56:f6:f5:5c:9e:ec:63:de:bf:21:9f:db:b8:
                    01:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:51:BE:EB:D7:95:25:ED:D6:6E:F6:C3:85:ED:4D:63:73:72:09:2B
            X509v3 Authority Key Identifier:
                keyid:B9:46:7C:05:BA:42:EE:1F:39:A6:4A:53:E1:D0:34:03:36:E5:E3:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUZ8BbpC7h85pkpT4dA0Azbl48M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:61:44:25:39:aa:e9:5a:50:86:7c:8b:84:a0:f1:99:56:82:
         d8:48:0c:6d:48:d5:21:95:bf:82:e4:f8:52:31:da:c4:6e:45:
         ea:a2:b3:f2:41:4f:fb:82:8d:ed:65:d4:a2:a5:31:75:a6:70:
         24:67:72:6d:5c:81:c3:ef:53:3c:66:5c:de:10:1b:92:09:90:
         04:a1:83:6b:1c:96:4d:83:74:d4:91:89:47:79:a0:39:6e:b8:
         63:1c:38:ef:f8:55:52:11:5c:ef:2b:18:db:e6:a1:0b:aa:e8:
         5f:ef:cd:5f:64:7a:be:e4:46:a8:a3:9b:c6:10:bd:62:31:1f:
         2a:e0:d3:e1:7a:64:33:ad:0c:48:fe:f1:c6:37:cc:76:34:78:
         25:7c:8d:b6:de:48:2d:1e:0f:c7:c1:c3:b3:0d:10:22:90:b8:
         5c:6a:a7:47:86:20:a7:30:76:b8:eb:95:e3:f2:32:7a:8b:b0:
         68:9d:c7:07:66:61:6f:d8:8a:f1:60:36:98:70:6b:89:3d:38:
         58:1f:b0:7b:62:fc:65:97:72:0e:69:7e:9c:60:b0:eb:15:89:
         30:48:7a:a3:05:f5:d7:91:69:e2:80:47:00:94:5e:6a:41:51:
         a4:45:b4:8a:e5:c4:89:6e:35:3c:9a:1f:b0:20:b3:e7:a3:d8:
         a6:40:ce:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX+hbdZjPAYWQqtGXyAyeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NDY3YzA1YmE0MmVlMWYzOWE2NGE1M2UxZDAzNDAzMzZl
NWUzYzMwHhcNMjYwMzI1MTkwMTUyWhcNMjYwMzI2MTkwMTUyWjAzMTEwLwYDVQQD
EyhlNDUxYmVlYmQ3OTUyNWVkZDY2ZWY2YzM4NWVkNGQ2MzczNzIwOTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJSDjH09f7zgy9jgQ9w5sVJgmjWY
TZqMZUpeYVpEviJuZ0mqgB5HiZBkfu5+OF+oDcDZze58UpST4qaNqXVdXMHZBZ25
+5x2qjTAxkCnsZL/SqoLA9j8doUqn03f6+EMTwhcIVdVg6ml49kTSKOAm1Q/uidn
2+NQi5dWSZ9ujqWOfSW/sKaUsUxJTp4WvxAo487UmcgdrTW3sCqE5HhiN0el/322
wB/ihbNOJxXek3VVebVspYLaET4gjFuFLbxJROaskrOSr5gcqOibS8AHODUNE+Zi
hucf0snn0Cyc1hZtuslY9JsTsOZS2to4MKX7rlb29Vye7GPevyGf27gBYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORRvuvXlSXt1m72w4XtTWNzcgkrMB8GA1UdIwQY
MBaAFLlGfAW6Qu4fOaZKU+HQNAM25ePDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVVaOEJicEM3aDg1cGtwVDRkQTBBemJsNDhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82NTJjODgtYWJlNi00Nzk0LWI3YWUt
MzliZjc1MWUzMTBkLzEvdVVaOEJicEM3aDg1cGtwVDRkQTBBemJsNDhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC82NTJjODgtYWJlNi00Nzk0LWI3YWUtMzliZjc1MWUzMTBk
LzEvdVVaOEJicEM3aDg1cGtwVDRkQTBBemJsNDhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGFEJTmq
6VpQhnyLhKDxmVaC2EgMbUjVIZW/guT4UjHaxG5F6qKz8kFP+4KN7WXUoqUxdaZw
JGdybVyBw+9TPGZc3hAbkgmQBKGDaxyWTYN01JGJR3mgOW64Yxw47/hVUhFc7ysY
2+ahC6roX+/NX2R6vuRGqKObxhC9YjEfKuDT4XpkM60MSP7xxjfMdjR4JXyNtt5I
LR4Px8HDsw0QIpC4XGqnR4YgpzB2uOuV4/IyeouwaJ3HB2Zhb9iK8WA2mHBriT04
WB+we2L8ZZdyDml+nGCw6xWJMEh6owX115Fp4oBHAJReakFRpEW0iuXEiW41PJof
sCCz56PYpkDOkg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:35 2026 by rpki-client