Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
File:                     uksi0igKF9DVTGhsm0M_C1tYAk8.mft (raw, json)
Hash identifier:          KHI43VLdoiitrS6T2c47jd6l5YbpXdFDIFWPbAv/0CE=
Subject key identifier:   ED:24:A6:A9:CB:B6:03:C6:09:68:B6:D6:6D:C7:92:C5:69:03:01:33
Authority key identifier: BA:4B:22:D2:28:0A:17:D0:D5:4C:68:6C:9B:43:3F:0B:5B:58:02:4F
Certificate issuer:       /CN=ba4b22d2280a17d0d54c686c9b433f0b5b58024f
Certificate serial:       019D284DFB48A29853CE1B6A9CAEECA0F4CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
Manifest number:          176E
Signing time:             Thu 26 Mar 2026 04:01:32 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:32 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:32 +0000
Files and hashes:         1: uksi0igKF9DVTGhsm0M_C1tYAk8.crl (hash: X9LuttKN5xtlBWCkAtL8uLWZxcrbGsrtw7rgXJC0BFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:fb:48:a2:98:53:ce:1b:6a:9c:ae:ec:a0:f4:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba4b22d2280a17d0d54c686c9b433f0b5b58024f
        Validity
            Not Before: Mar 26 04:01:32 2026 GMT
            Not After : Mar 27 04:01:32 2026 GMT
        Subject: CN=ed24a6a9cbb603c60968b6d66dc792c569030133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b6:4c:c0:9f:cd:1b:c0:dd:77:4b:cc:dd:96:
                    45:4c:88:e8:d0:c7:c4:5d:ae:9c:97:4f:22:8f:43:
                    dc:74:26:f4:5b:fd:77:36:48:72:dd:6f:6d:83:2b:
                    12:94:4f:51:28:fe:a1:fd:ab:d7:01:04:2d:e8:3b:
                    ba:ec:03:8b:e7:40:ba:f5:94:99:f9:68:69:83:eb:
                    8e:f2:4a:d9:fd:8c:28:45:e7:2b:d0:f3:43:06:e8:
                    25:81:22:78:13:4e:0e:68:32:83:05:fc:11:21:90:
                    7c:b1:28:b1:c6:b3:a4:d5:f3:41:1d:72:9c:05:65:
                    9a:02:9d:75:66:0d:34:1f:58:9d:f3:ca:e1:97:a0:
                    76:fa:83:30:eb:13:c2:1e:97:3e:c8:7e:1b:7f:8b:
                    3d:4e:be:7d:bf:bc:86:e0:6a:12:81:9a:23:b6:8d:
                    06:78:19:72:d1:e3:68:5c:06:a2:ee:80:ff:3e:1a:
                    19:4a:70:c6:de:b9:5b:de:e6:c4:84:01:03:4b:41:
                    44:b5:34:50:09:de:88:03:f9:c9:8d:54:31:ba:67:
                    f5:0a:71:81:eb:15:1a:86:22:9f:eb:18:8b:5d:bd:
                    01:d1:66:b3:4d:99:e0:92:c1:7a:84:83:1c:5d:a2:
                    3a:e9:b3:af:5d:57:78:a8:09:1a:a1:58:78:81:d9:
                    b3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:24:A6:A9:CB:B6:03:C6:09:68:B6:D6:6D:C7:92:C5:69:03:01:33
            X509v3 Authority Key Identifier:
                keyid:BA:4B:22:D2:28:0A:17:D0:D5:4C:68:6C:9B:43:3F:0B:5B:58:02:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:c5:c3:75:a4:6d:11:06:ef:c7:7f:40:8a:9c:11:b5:88:23:
         13:82:72:6c:f8:07:95:72:0f:ba:ab:de:cc:8f:cf:7a:0f:2e:
         97:67:a4:3c:9d:6b:18:08:5e:46:98:2d:64:56:81:f9:50:fb:
         d7:22:b6:cb:b4:f1:af:ea:e6:33:a2:94:54:ef:15:f8:c3:39:
         03:8c:eb:67:1a:ec:a1:95:d3:15:88:2c:1e:fc:5e:b0:be:f0:
         e2:ec:d2:01:d0:97:84:84:64:c2:ef:3c:59:36:ad:46:53:cb:
         b6:e9:50:be:59:c1:13:db:62:83:a2:57:1b:37:d3:a9:02:c3:
         69:96:68:d9:ab:aa:a6:f5:b2:23:58:dd:4a:2c:49:78:6e:51:
         56:ce:f6:7b:81:7f:c0:b5:ff:78:c4:3d:e3:23:4e:98:5f:41:
         af:df:ac:d8:4f:2e:dc:2c:18:8a:18:1a:21:bd:07:23:c7:15:
         49:03:8e:cf:91:f7:56:97:06:6a:b2:7f:d2:fc:1a:fb:69:72:
         29:bd:62:9e:e2:f9:82:fd:34:f2:63:ca:79:aa:eb:c1:9e:84:
         e9:db:4a:9d:6a:d8:d6:b7:7d:23:9d:60:88:24:b6:7e:84:d8:
         f0:72:05:97:f9:90:16:2b:df:f4:ce:65:f9:3a:e1:b1:93:ab:
         6a:7b:5f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:45 2026 by rpki-client