Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft
File:                     uF6twuxwsw-kIl7X_NVzDwx7xhY.mft (raw, json)
Hash identifier:          i8DQHxnv/l8zuIea962RWfrtrvXC8BkSh3B+yChaemo=
Subject key identifier:   1D:96:BD:79:52:7B:36:12:AB:4E:7D:0F:08:C9:5F:1F:28:21:4D:13
Authority key identifier: B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16
Certificate issuer:       /CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616
Certificate serial:       019D25F19EB53561AEDF69DC5BFC9FA0EE42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft
Manifest number:          08D6
Signing time:             Wed 25 Mar 2026 17:01:24 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:24 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:24 +0000
Files and hashes:         1: 8pZUXvACu9QhvKuW-qMjjg-zMpg.roa (hash: 0/gavMRZtZdbhY3KH3ekU0vMqEL7/EvqYK9+J6uWS6E=)
                          2: G-toJfPo5_lPvfgOuGF2O7gK5MU.roa (hash: f/HsVZaK7DlKBZfvaInpx95ilwjwGX/MKV/SRXvYXG8=)
                          3: GSvze0OvgyB86_aIjXE_zYpEcJ8.roa (hash: i0T9AmgsVXvoJ7juXc0u6ILs8JxVxErhczJ27Ywnx4c=)
                          4: WEBxfBgljdO2-_OPHWGZu1V4u-E.roa (hash: nt1blU8jTILJsm/QWLFQx/HjDxyXCoII44gqy3P+yHo=)
                          5: daB6TCjb0g5mJAh5C9L7PP2C3bU.roa (hash: LCCpR6Wg5909zrCuVhiyOKBdbzncNfnlYiYr8mrOsJg=)
                          6: uF6twuxwsw-kIl7X_NVzDwx7xhY.crl (hash: CxeWYl5GPbouYQ4PU0pewknZqIp0uuvotKisahwsies=)
                          7: yvd72ao7oZeloqF7PcjwFXQOaKg.roa (hash: p8n/0jBEU3JxwNl8gzkR0TyAriDfbE7fJ2mPGP83LhU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:9e:b5:35:61:ae:df:69:dc:5b:fc:9f:a0:ee:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616
        Validity
            Not Before: Mar 25 17:01:24 2026 GMT
            Not After : Mar 26 17:01:24 2026 GMT
        Subject: CN=1d96bd79527b3612ab4e7d0f08c95f1f28214d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:47:2c:02:b9:06:ec:2c:1a:12:d8:fe:88:1e:
                    8f:22:5d:d1:ec:6e:5f:29:9f:10:85:e3:b4:85:fd:
                    bd:23:b2:b5:27:b0:10:e5:97:52:da:51:0a:c8:e6:
                    50:6e:b3:51:e0:63:b8:2b:3d:9a:3b:06:b0:9d:89:
                    ad:5d:c3:7e:17:a1:c8:0b:29:e8:cd:ab:6a:84:40:
                    15:54:43:0c:bb:17:7e:18:71:c0:64:06:5d:f7:6a:
                    b3:7b:ff:53:de:b7:ac:7c:52:01:fe:be:18:3f:36:
                    f2:61:5d:ca:4d:ec:40:21:30:2d:74:45:46:25:50:
                    f3:5f:d8:6d:9f:f1:3b:cb:bb:2e:35:f7:36:57:af:
                    f2:e3:82:b0:98:8b:72:f4:8b:ec:3d:ac:48:0c:99:
                    8a:c1:75:97:e3:cd:c3:a0:eb:49:da:bd:a5:45:ac:
                    df:93:9e:44:a1:fd:70:3b:13:7b:7f:75:9b:f9:01:
                    25:fb:e7:a8:2c:57:c9:85:52:d1:30:ea:ae:80:07:
                    44:16:27:78:57:74:27:91:9d:80:1b:03:14:d0:c7:
                    a3:d4:6e:48:eb:e7:89:d1:f3:6a:d0:6e:7e:1f:d6:
                    8e:e8:fd:0c:01:c1:6f:7e:43:7f:56:85:41:bd:b3:
                    5b:ab:6f:fa:a3:59:e7:97:d2:e1:16:66:0b:a1:86:
                    78:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:96:BD:79:52:7B:36:12:AB:4E:7D:0F:08:C9:5F:1F:28:21:4D:13
            X509v3 Authority Key Identifier:
                keyid:B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:79:5f:14:7f:c5:31:ea:05:8c:19:b9:8a:fc:83:26:e3:17:
         44:c1:97:96:63:4a:a7:f7:22:a3:50:fc:b7:1e:0c:3c:12:91:
         69:22:ae:6b:23:3e:f7:9b:76:d3:78:dc:02:45:3e:0e:21:d2:
         6d:a2:f3:a8:2d:90:19:bf:ff:d5:c5:65:0f:ef:59:a3:45:da:
         43:b9:8c:cb:96:6b:1e:97:21:58:52:05:a1:c2:fa:23:ca:4d:
         68:84:b7:b7:17:4d:2c:94:c3:a6:d6:85:c5:a9:a5:c3:76:4c:
         2f:09:f9:3e:c6:f3:bd:f5:39:f1:b0:d9:3d:9b:70:05:2f:93:
         ec:ab:89:cd:1a:a9:76:7e:54:a6:f2:e6:d7:34:0e:6c:15:6c:
         40:e5:f1:9b:b4:95:11:6a:6f:4c:e1:7a:b5:d1:2e:7f:b9:5d:
         51:8b:67:c9:bb:70:c3:26:e5:1a:b0:39:30:ab:6e:7a:21:a8:
         69:57:b5:ac:39:36:28:12:4c:ab:10:1f:e7:23:30:b9:7b:11:
         4d:9e:18:db:fa:cc:b9:08:08:aa:02:0a:6e:f5:38:c1:1e:bf:
         13:64:b3:a8:41:7b:22:47:db:00:36:5d:ea:a5:94:2e:20:cb:
         e9:af:36:92:a0:98:67:f5:77:47:a4:8c:30:97:f0:ea:58:e5:
         9d:8d:f2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:32 2026 by rpki-client