Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/uEDbhrmLXLMnCkjPf6AjyHrKucU.mft
File:                     uEDbhrmLXLMnCkjPf6AjyHrKucU.mft (raw, json)
Hash identifier:          oMwOoaxDXmX+4/AhBbpqtEYkX2iKhZgl9honK/3EN6M=
Subject key identifier:   B7:D6:E3:CB:AD:43:4D:01:41:03:07:07:59:2F:08:B5:B5:BD:FC:8E
Authority key identifier: B8:40:DB:86:B9:8B:5C:B3:27:0A:48:CF:7F:A0:23:C8:7A:CA:B9:C5
Certificate issuer:       /CN=b840db86b98b5cb3270a48cf7fa023c87acab9c5
Certificate serial:       019D2704CF568F1901DE71D37B85EAED7717
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uEDbhrmLXLMnCkjPf6AjyHrKucU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/uEDbhrmLXLMnCkjPf6AjyHrKucU.mft
Manifest number:          081E
Signing time:             Wed 25 Mar 2026 22:01:59 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:59 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:59 +0000
Files and hashes:         1: 2baORnCmpGNOwW4MrOGBHcB_A3o.roa (hash: 4c7N8lX48QcCXmd9kRAsTEkI6RiyveF89rAIHp8ni6A=)
                          2: uEDbhrmLXLMnCkjPf6AjyHrKucU.crl (hash: lA6ZfuLGg4K8xJcB8Yg+1lNJwM5RjPFrfrBHLzt/ZWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/uEDbhrmLXLMnCkjPf6AjyHrKucU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/uEDbhrmLXLMnCkjPf6AjyHrKucU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uEDbhrmLXLMnCkjPf6AjyHrKucU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:cf:56:8f:19:01:de:71:d3:7b:85:ea:ed:77:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b840db86b98b5cb3270a48cf7fa023c87acab9c5
        Validity
            Not Before: Mar 25 22:01:59 2026 GMT
            Not After : Mar 26 22:01:59 2026 GMT
        Subject: CN=b7d6e3cbad434d0141030707592f08b5b5bdfc8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f2:01:2e:44:f6:2b:c0:c4:5a:e1:36:a0:d0:
                    35:76:6b:07:3a:94:ca:12:a7:42:c5:75:d9:fd:5a:
                    bf:49:5a:22:14:80:c2:19:61:f2:3e:0b:11:10:9a:
                    27:ec:47:a6:cf:5d:7a:46:7f:62:8a:32:62:06:8d:
                    2d:7b:43:c3:d6:e5:26:7a:67:cd:98:d2:6c:5d:b3:
                    34:4b:47:a8:d4:62:4b:68:88:8e:75:4d:8a:70:89:
                    be:66:8f:f8:2e:c1:d9:6e:ee:c0:c9:2c:2a:19:19:
                    d7:88:72:fd:28:90:d7:82:09:56:ab:6a:2e:ce:7e:
                    dc:c1:d8:5c:dd:5b:10:70:99:ae:55:ea:52:e5:9c:
                    94:28:83:c7:3b:6e:f4:0f:3b:1a:db:a1:e6:10:c6:
                    95:63:0c:d8:55:d9:82:46:b9:66:ea:1c:7c:fc:39:
                    91:21:65:dc:cf:b3:93:2c:cb:5e:fc:21:4d:34:a6:
                    a1:dd:8d:57:2c:04:8e:55:24:3c:cb:24:36:7c:0f:
                    04:23:1d:34:ae:e6:8f:e1:02:ec:58:48:73:df:26:
                    5e:49:1c:b9:04:c4:04:14:c7:64:54:1b:ce:a9:4f:
                    05:a9:a1:f2:e9:47:b7:69:fe:12:d7:56:61:c2:95:
                    52:74:df:68:00:bc:e1:b1:e5:0d:4b:76:da:c1:f8:
                    cb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D6:E3:CB:AD:43:4D:01:41:03:07:07:59:2F:08:B5:B5:BD:FC:8E
            X509v3 Authority Key Identifier:
                keyid:B8:40:DB:86:B9:8B:5C:B3:27:0A:48:CF:7F:A0:23:C8:7A:CA:B9:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEDbhrmLXLMnCkjPf6AjyHrKucU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/uEDbhrmLXLMnCkjPf6AjyHrKucU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/uEDbhrmLXLMnCkjPf6AjyHrKucU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:28:2d:8d:66:cb:af:98:29:d4:37:9c:3a:0d:d9:fe:74:51:
         fd:e9:34:b5:71:5a:1f:2f:18:9d:a7:98:9d:55:80:8d:68:b9:
         08:8f:da:21:f2:f9:d5:b9:84:5a:e5:64:80:11:e0:37:fe:52:
         44:d4:8c:a1:bd:e1:1f:2d:aa:ca:a1:cd:3f:eb:2f:67:19:21:
         b6:6b:e7:1b:65:62:6f:74:19:64:a7:7c:ea:be:1b:26:0b:20:
         d0:21:06:81:a7:19:be:14:c5:eb:61:e4:67:71:cf:96:d2:a0:
         a6:9c:dc:fb:1c:81:f2:a3:ae:38:ca:7c:21:94:84:1c:99:fc:
         33:70:40:09:34:2a:3c:36:d2:df:1a:55:8d:4a:bb:11:ce:d9:
         5a:75:75:6c:ed:5c:5c:20:8e:08:ee:79:0d:cb:9b:25:84:27:
         5d:20:c2:e2:29:91:96:ff:b3:dd:47:8f:f5:bb:09:fb:a6:60:
         c4:1d:be:76:d2:a7:19:37:9d:20:96:6e:24:8e:01:df:59:49:
         dc:94:3f:b3:bf:a2:58:2e:00:97:97:9b:67:a3:5b:dd:26:55:
         7d:60:05:fb:32:27:d2:6e:f8:7c:34:11:32:78:73:0e:fe:c9:
         f4:c1:42:b7:ec:ff:40:30:c5:78:48:bd:4e:5d:72:d1:0d:73:
         22:d6:cd:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:54 2026 by rpki-client