Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/76a60e-0d81-4c41-b889-91fc0f51ea07/1/UUtNPv-4vQsTNu68uCe3fhKeD28.mft
File:                     UUtNPv-4vQsTNu68uCe3fhKeD28.mft (raw, json)
Hash identifier:          cjGng3siNiwm1jusq7KNSkyNpC8KlcvxBXvk55UPrVE=
Subject key identifier:   F7:EB:99:4B:50:B5:72:3E:3B:7D:31:4B:EB:C8:12:28:DC:2E:4D:7E
Authority key identifier: 51:4B:4D:3E:FF:B8:BD:0B:13:36:EE:BC:B8:27:B7:7E:12:9E:0F:6F
Certificate issuer:       /CN=514b4d3effb8bd0b1336eebcb827b77e129e0f6f
Certificate serial:       019D2A0514CE0647785E5CE7650E1BB2EC5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UUtNPv-4vQsTNu68uCe3fhKeD28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/76a60e-0d81-4c41-b889-91fc0f51ea07/1/UUtNPv-4vQsTNu68uCe3fhKeD28.mft
Manifest number:          0CF3
Signing time:             Thu 26 Mar 2026 12:01:09 +0000
Manifest this update:     Thu 26 Mar 2026 12:01:09 +0000
Manifest next update:     Fri 27 Mar 2026 12:01:09 +0000
Files and hashes:         1: 88IBES04CJMy8ut9-pHqGVblGQQ.roa (hash: wSsbduzl8FZcCDsINaKD6IvnpNPorPIXHXw50JrVjrM=)
                          2: UUtNPv-4vQsTNu68uCe3fhKeD28.crl (hash: JdtwNdrTDoICqljJfniwWRrrqLYHI87dv6L3gvHSgNE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/76a60e-0d81-4c41-b889-91fc0f51ea07/1/UUtNPv-4vQsTNu68uCe3fhKeD28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/76a60e-0d81-4c41-b889-91fc0f51ea07/1/UUtNPv-4vQsTNu68uCe3fhKeD28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UUtNPv-4vQsTNu68uCe3fhKeD28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:05:14:ce:06:47:78:5e:5c:e7:65:0e:1b:b2:ec:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=514b4d3effb8bd0b1336eebcb827b77e129e0f6f
        Validity
            Not Before: Mar 26 12:01:09 2026 GMT
            Not After : Mar 27 12:01:09 2026 GMT
        Subject: CN=f7eb994b50b5723e3b7d314bebc81228dc2e4d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:05:e8:8f:11:59:0d:0a:f5:bf:e6:63:ea:35:
                    9b:8c:2d:48:9e:2d:29:dd:1d:33:55:ee:bb:e4:b8:
                    d8:52:df:87:cf:97:2e:7d:61:55:25:93:47:18:93:
                    5a:f2:70:e1:bb:74:02:c9:d3:d5:56:61:5d:d6:60:
                    9d:7e:db:97:75:2d:bc:f1:f8:33:42:1f:bb:10:cf:
                    5c:21:d3:e9:24:f7:54:ba:f6:e6:48:97:c6:b7:70:
                    6e:af:8b:c0:c1:af:d1:29:8a:df:8e:8b:7c:9a:a0:
                    2d:6e:00:18:be:aa:16:90:67:f4:33:ec:3e:b8:51:
                    fe:67:71:05:ad:48:f6:13:42:aa:c3:fe:df:ee:be:
                    fc:96:5f:06:cd:34:f6:87:52:f7:be:57:4a:8d:1b:
                    94:fb:11:3c:41:78:59:33:e9:3b:28:88:34:8c:a1:
                    38:ea:7f:15:83:9c:ed:27:e7:3e:2b:d8:8c:29:40:
                    bd:be:35:d1:f5:58:d5:b0:95:c8:6c:e7:92:88:9c:
                    64:c7:41:05:61:17:ce:32:50:9f:ec:d6:86:64:86:
                    cd:b4:cb:22:92:1c:72:13:11:e7:c0:4f:cf:44:9c:
                    29:d0:05:33:02:d3:67:76:85:73:be:7f:28:26:96:
                    ef:8c:55:74:6c:8e:a8:8e:1b:15:8f:5e:ac:02:59:
                    7a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:EB:99:4B:50:B5:72:3E:3B:7D:31:4B:EB:C8:12:28:DC:2E:4D:7E
            X509v3 Authority Key Identifier:
                keyid:51:4B:4D:3E:FF:B8:BD:0B:13:36:EE:BC:B8:27:B7:7E:12:9E:0F:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUtNPv-4vQsTNu68uCe3fhKeD28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/76a60e-0d81-4c41-b889-91fc0f51ea07/1/UUtNPv-4vQsTNu68uCe3fhKeD28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/76a60e-0d81-4c41-b889-91fc0f51ea07/1/UUtNPv-4vQsTNu68uCe3fhKeD28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:d0:88:27:ab:3f:0e:31:3d:00:70:99:4a:bb:87:5d:51:4e:
         89:7e:cb:6e:24:b9:84:80:a9:8f:6a:32:bd:2f:74:be:4f:89:
         f6:70:c1:4e:d2:f4:5b:33:f8:7f:d1:0d:de:2a:9b:96:c6:1a:
         25:ec:a1:0a:09:24:36:2f:d9:23:f0:b7:9d:b4:ac:f4:1a:dd:
         22:1a:8f:ec:7d:60:65:48:29:81:d4:e4:5f:88:9d:40:68:0d:
         e2:f1:79:f8:5f:03:f1:c8:33:24:28:dd:8a:fd:ab:79:de:05:
         db:0e:af:37:89:a3:34:13:0c:cd:59:8b:9c:43:19:6f:0e:77:
         24:11:5d:ee:38:e0:17:92:3f:92:38:24:34:5c:11:c1:3b:19:
         97:f8:8f:ec:d7:f3:10:db:90:cc:de:33:5f:81:5d:34:7f:d5:
         d9:d0:ce:10:82:cb:5a:ff:0e:af:f5:82:a7:d9:96:a9:28:4f:
         b7:e1:83:fb:65:f2:59:de:21:b4:6f:55:ce:4d:8d:2e:11:9d:
         bc:59:7e:fc:ed:ea:0c:15:cb:fd:53:03:4c:15:d3:60:a7:1e:
         1b:59:44:10:0b:9f:fd:11:a0:48:64:c9:04:1d:27:5f:22:66:
         57:2d:d2:d9:a9:d7:c2:85:dc:0a:a0:9d:ac:9b:1e:e8:bf:a6:
         1f:da:ed:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:10 2026 by rpki-client