Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
File:                     UdoAZhIua6KU0rdHk41Gx06Z-IA.mft (raw, json)
Hash identifier:          wB/jiMfJh3/4dxb8okzu/VOOtpV8kfEP3C7xS8ADDkQ=
Subject key identifier:   A8:3D:5B:08:0F:7D:FD:3B:3F:40:FD:64:7C:56:ED:F0:7F:F6:AA:3D
Authority key identifier: 51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80
Certificate issuer:       /CN=51da0066122e6ba294d2b747938d46c74e99f880
Certificate serial:       019D284E0C929E66E370C379173D00CE00A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
Manifest number:          08D4
Signing time:             Thu 26 Mar 2026 04:01:36 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:36 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:36 +0000
Files and hashes:         1: UdoAZhIua6KU0rdHk41Gx06Z-IA.crl (hash: SkrR474TgIaD1jekSOfRic7ez+aiTibrlFBxHGm3K+o=)
                          2: bBMlqfhZbgU4RFc29xzMS28J5Yc.roa (hash: wmFqb2uW30KLYhFd4JkMsA8poWqQ5oZsDAIy44oWkC4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:0c:92:9e:66:e3:70:c3:79:17:3d:00:ce:00:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51da0066122e6ba294d2b747938d46c74e99f880
        Validity
            Not Before: Mar 26 04:01:36 2026 GMT
            Not After : Mar 27 04:01:36 2026 GMT
        Subject: CN=a83d5b080f7dfd3b3f40fd647c56edf07ff6aa3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9a:c9:92:c6:06:e3:0e:e5:38:fd:ff:a8:a1:
                    37:1d:49:ab:90:54:61:6f:5b:71:c4:f2:73:a5:29:
                    91:44:b2:d1:92:3e:10:7e:2f:9f:b2:1f:ba:2d:bc:
                    ff:7b:3e:34:f2:9d:03:99:4d:5c:2f:22:3a:c4:fa:
                    df:e6:3c:ff:3d:ac:a1:3c:ef:e9:af:b7:a0:1f:33:
                    a0:80:3b:9f:a3:8c:3d:70:3c:33:f2:7f:e4:52:6b:
                    7f:6e:3e:cf:25:b6:0c:22:32:b2:07:9a:70:8f:e2:
                    d3:f4:c6:90:00:5a:75:14:99:cf:2f:ac:10:b1:75:
                    0a:a4:56:8a:9a:b9:f7:60:c0:2f:85:d0:08:eb:91:
                    4c:4e:d9:dd:80:48:f9:04:5b:f5:a2:ba:73:e7:9a:
                    7a:f9:e7:e1:8c:bd:c1:92:05:78:8e:18:b1:ff:c8:
                    5b:5e:83:f1:b4:46:7c:e9:3f:23:bd:9b:89:e6:e4:
                    da:63:13:8e:55:3b:6a:6c:a0:30:c5:3a:a4:6f:51:
                    28:b0:5d:6f:6f:79:3d:d2:80:04:14:23:f3:e1:ad:
                    9c:97:1f:23:24:16:12:3f:67:52:3e:4b:0a:46:3b:
                    7d:55:61:0b:6b:72:e0:b6:56:aa:61:60:fb:ac:93:
                    53:81:9f:ef:76:98:fc:41:09:63:09:ba:f7:7e:f3:
                    70:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:3D:5B:08:0F:7D:FD:3B:3F:40:FD:64:7C:56:ED:F0:7F:F6:AA:3D
            X509v3 Authority Key Identifier:
                keyid:51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:81:66:5a:e0:3c:f8:1f:de:42:01:95:5f:fe:dd:6a:4c:ac:
         18:f4:ea:e6:40:ac:c6:05:a0:26:b5:9f:37:d3:ab:e3:e9:5c:
         e7:da:d5:16:11:c8:6a:d2:d5:e7:1d:4f:06:87:dd:3d:f2:69:
         46:92:99:e0:fe:3f:af:1d:40:eb:61:ed:ad:98:21:78:97:a2:
         7d:89:a3:e7:1b:1d:f2:0b:eb:5a:55:c5:b3:9c:4d:0c:1c:b1:
         e1:5f:34:b4:53:b6:82:b4:8c:0e:06:96:ce:93:72:ef:e0:05:
         34:ca:9d:56:60:33:fd:9c:a8:9c:f1:bf:f5:93:73:3f:fb:7c:
         1c:87:d5:8f:f9:86:fa:2a:f1:c7:74:88:e8:7f:61:dc:06:61:
         41:03:1b:25:94:5b:71:e2:4f:c3:51:93:87:8e:57:8d:f0:a3:
         54:5f:74:ee:85:18:6f:5d:93:c6:68:7f:43:9b:d4:5e:ce:69:
         6a:01:41:e0:41:bf:33:ed:28:a5:16:ed:c8:dd:27:97:74:b3:
         58:88:14:e7:cd:3b:d1:8a:fc:d1:f0:cd:5e:63:b6:db:28:16:
         d1:f7:9c:3e:0a:17:bf:ec:fd:fc:75:42:35:12:7d:41:e2:91:
         24:fb:10:36:c0:4e:dd:3a:ae:c7:81:9a:12:f4:87:0b:84:4f:
         e1:bc:fd:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTgySnmbjcMN5Fz0AzgCjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZGEwMDY2MTIyZTZiYTI5NGQyYjc0NzkzOGQ0NmM3NGU5
OWY4ODAwHhcNMjYwMzI2MDQwMTM2WhcNMjYwMzI3MDQwMTM2WjAzMTEwLwYDVQQD
EyhhODNkNWIwODBmN2RmZDNiM2Y0MGZkNjQ3YzU2ZWRmMDdmZjZhYTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JrJksYG4w7lOP3/qKE3HUmrkFRh
b1txxPJzpSmRRLLRkj4Qfi+fsh+6Lbz/ez408p0DmU1cLyI6xPrf5jz/PayhPO/p
r7egHzOggDufo4w9cDwz8n/kUmt/bj7PJbYMIjKyB5pwj+LT9MaQAFp1FJnPL6wQ
sXUKpFaKmrn3YMAvhdAI65FMTtndgEj5BFv1orpz55p6+efhjL3BkgV4jhix/8hb
XoPxtEZ86T8jvZuJ5uTaYxOOVTtqbKAwxTqkb1EosF1vb3k90oAEFCPz4a2clx8j
JBYSP2dSPksKRjt9VWELa3LgtlaqYWD7rJNTgZ/vdpj8QQljCbr3fvNwUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKg9WwgPff07P0D9ZHxW7fB/9qo9MB8GA1UdIwQY
MBaAFFHaAGYSLmuilNK3R5ONRsdOmfiAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWRvQVpoSXVhNktVMHJkSGs0MUd4MDZaLUlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mNjRlYjQtMjZjYy00MDU2LTg1M2It
YmU0OGI3OTI1NDc4LzEvVWRvQVpoSXVhNktVMHJkSGs0MUd4MDZaLUlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9mNjRlYjQtMjZjYy00MDU2LTg1M2ItYmU0OGI3OTI1NDc4
LzEvVWRvQVpoSXVhNktVMHJkSGs0MUd4MDZaLUlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiYFmWuA8
+B/eQgGVX/7dakysGPTq5kCsxgWgJrWfN9Or4+lc59rVFhHIatLV5x1PBofdPfJp
RpKZ4P4/rx1A62HtrZgheJeifYmj5xsd8gvrWlXFs5xNDByx4V80tFO2grSMDgaW
zpNy7+AFNMqdVmAz/ZyonPG/9ZNzP/t8HIfVj/mG+irxx3SI6H9h3AZhQQMbJZRb
ceJPw1GTh45XjfCjVF907oUYb12Txmh/Q5vUXs5pagFB4EG/M+0opRbtyN0nl3Sz
WIgU58070Yr80fDNXmO22ygW0fecPgoXv+z9/HVCNRJ9QeKRJPsQNsBO3Tqux4Ga
EvSHC4RP4bz9tQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:27 2026 by rpki-client