Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.mft
File:                     uaY9guJ4W32wBSjcVacGncUQpC8.mft (raw, json)
Hash identifier:          KQX0JvPI3Rw3wZHr+haTgetBiZry8MLs2csiXr5UUuk=
Subject key identifier:   72:77:53:2D:73:11:DB:13:87:C9:19:EF:84:85:0B:55:BD:57:2C:4B
Authority key identifier: B9:A6:3D:82:E2:78:5B:7D:B0:05:28:DC:55:A7:06:9D:C5:10:A4:2F
Certificate issuer:       /CN=b9a63d82e2785b7db00528dc55a7069dc510a42f
Certificate serial:       019D28BBE6ECF625F6B7535DB9E43573F48C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uaY9guJ4W32wBSjcVacGncUQpC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.mft
Manifest number:          0738
Signing time:             Thu 26 Mar 2026 06:01:35 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:35 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:35 +0000
Files and hashes:         1: uaY9guJ4W32wBSjcVacGncUQpC8.crl (hash: jog7kkr9W47KgWIJGmC5sNZQu91nJChTgrTwtzyAy7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uaY9guJ4W32wBSjcVacGncUQpC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 06:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:e6:ec:f6:25:f6:b7:53:5d:b9:e4:35:73:f4:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9a63d82e2785b7db00528dc55a7069dc510a42f
        Validity
            Not Before: Mar 26 06:01:35 2026 GMT
            Not After : Mar 27 06:01:35 2026 GMT
        Subject: CN=7277532d7311db1387c919ef84850b55bd572c4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2b:73:a5:4e:c5:3e:2f:58:4d:d8:e7:fc:d4:
                    b1:0b:54:0d:d0:e8:83:bf:e3:3c:2e:32:81:58:74:
                    92:c2:69:7f:3c:3f:5c:92:a0:e5:81:bb:ae:ed:4d:
                    2e:2a:bb:ed:9c:03:9e:d2:50:cc:78:df:e1:da:99:
                    eb:49:2b:db:a5:6c:7a:ee:c3:c8:60:f3:83:55:da:
                    2e:d8:34:77:a0:22:d6:a8:1d:93:4b:cc:e6:88:47:
                    cc:02:71:40:a1:24:b4:1f:e8:6d:d1:a0:a8:6e:8b:
                    b8:61:cf:39:35:83:7e:bf:3d:4c:92:db:60:a4:14:
                    08:27:49:03:49:2c:ed:2c:e1:ab:04:35:6b:12:eb:
                    e7:3e:e5:f6:fd:21:d9:e4:36:b3:6e:33:94:9a:c6:
                    2d:96:86:87:50:85:d9:f2:6f:0a:e0:8a:72:ab:eb:
                    2d:49:69:af:00:f7:56:d7:05:78:d6:8b:da:3d:bc:
                    52:11:bd:bf:bc:16:3c:b2:11:7a:c0:7e:0b:0e:be:
                    56:3d:9d:65:e0:e3:68:a4:6e:11:d3:cf:57:83:35:
                    ac:23:f5:76:ec:e2:62:86:8c:7c:63:5e:90:d8:14:
                    56:af:4f:fa:67:ac:7b:31:d8:f5:62:7b:fa:20:5f:
                    99:ed:21:b5:ef:45:7d:05:d9:b3:d5:e7:b4:a1:33:
                    ed:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:77:53:2D:73:11:DB:13:87:C9:19:EF:84:85:0B:55:BD:57:2C:4B
            X509v3 Authority Key Identifier:
                keyid:B9:A6:3D:82:E2:78:5B:7D:B0:05:28:DC:55:A7:06:9D:C5:10:A4:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaY9guJ4W32wBSjcVacGncUQpC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:69:4b:9f:f3:f3:11:54:8d:07:f9:09:87:f0:97:fc:b7:ed:
         2e:5f:a0:f0:a7:ed:64:a2:75:a3:93:f4:3c:78:09:be:ee:62:
         1b:54:81:4b:2a:da:49:4b:3b:b5:0b:4b:20:69:b5:7e:51:1c:
         19:63:88:37:91:6b:b8:93:5a:d5:86:50:37:d0:b4:b2:99:7e:
         d2:59:dc:ee:bf:b9:de:f7:b7:f6:7d:a2:b0:11:bf:35:a2:7c:
         cc:0e:08:c4:22:fa:5b:77:c4:ed:5a:62:86:63:9e:9a:51:17:
         17:72:ea:c9:cd:80:f5:3f:bc:a4:28:ee:34:42:70:18:c2:6c:
         27:fc:dc:d0:26:45:ed:92:44:95:47:3f:2a:d3:fe:f9:8c:e6:
         e9:c4:10:66:6f:d8:33:e8:f6:13:3a:fa:8b:ee:e1:b7:95:5a:
         4e:6d:24:32:81:7e:a8:73:a1:3c:a3:b9:28:58:04:e7:ce:78:
         42:b8:bd:06:d6:ef:ae:7b:84:1b:20:eb:81:b4:7c:26:89:b3:
         49:34:4f:f9:c2:a7:6a:3e:1a:df:37:eb:16:ed:5d:15:29:6e:
         0c:5c:54:9f:d7:cc:26:f4:ed:58:45:62:fe:aa:ef:7d:db:33:
         dd:8c:e3:13:52:17:20:e2:a0:d7:a1:61:ad:13:4a:00:69:d8:
         ed:9d:95:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:40:27 2026 by rpki-client