Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
File:                     uybM-gcX259Wqji4aSzl3PooJec.mft (raw, json)
Hash identifier:          N4jyBvPHXvq3alisxh+RJQyCWTq1dO0fy7lnP7B4DHE=
Subject key identifier:   6B:5F:56:95:03:AF:85:B0:1A:5B:ED:3C:DF:0D:03:BE:9F:85:54:B4
Authority key identifier: BB:26:CC:FA:07:17:DB:9F:56:AA:38:B8:69:2C:E5:DC:FA:28:25:E7
Certificate issuer:       /CN=bb26ccfa0717db9f56aa38b8692ce5dcfa2825e7
Certificate serial:       019D2AE0526B59A9EC7B741930C4BE5B8698
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
Manifest number:          0453
Signing time:             Thu 26 Mar 2026 16:00:37 +0000
Manifest this update:     Thu 26 Mar 2026 16:00:37 +0000
Manifest next update:     Fri 27 Mar 2026 16:00:37 +0000
Files and hashes:         1: dbi3fG9bxI9rA-J9Egga8cnvqoo.roa (hash: Ap8z6NPW0v1Uxh7C5vK9EjLc2QYMMSk2Hr7IGcY1KpQ=)
                          2: uybM-gcX259Wqji4aSzl3PooJec.crl (hash: FYXoQrvVE8nc74f89I7QVhntCGBbdAcctBl67gd47qs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:e0:52:6b:59:a9:ec:7b:74:19:30:c4:be:5b:86:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb26ccfa0717db9f56aa38b8692ce5dcfa2825e7
        Validity
            Not Before: Mar 26 16:00:37 2026 GMT
            Not After : Mar 27 16:00:37 2026 GMT
        Subject: CN=6b5f569503af85b01a5bed3cdf0d03be9f8554b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c3:92:63:6a:71:55:99:6d:0b:3d:17:90:e6:
                    2f:ab:a2:dc:b1:e1:8a:68:0f:a9:ec:a7:f3:13:2d:
                    09:6a:de:54:04:87:4e:f7:05:4e:44:58:4d:c4:23:
                    1a:91:0c:7f:07:88:b4:4b:c4:89:17:48:70:bc:0d:
                    22:29:c8:28:35:80:a6:07:c4:81:24:d3:ad:e3:82:
                    4b:96:85:fc:16:93:06:dd:f6:de:f0:d3:48:b7:49:
                    0e:7c:77:cb:ac:78:07:7e:6b:f8:64:5b:c0:71:bc:
                    07:f0:14:e9:55:f3:d7:96:89:b2:4b:e8:b9:65:57:
                    0d:1a:25:4b:9f:8b:35:09:ac:69:2a:5d:a4:3d:1d:
                    81:24:f6:40:17:81:9e:b2:a6:ec:b8:1b:87:97:54:
                    d8:a3:f4:94:09:8a:c2:25:4e:26:f0:8a:21:38:eb:
                    07:ae:9d:94:41:2e:6f:8f:98:f9:64:6b:d4:89:39:
                    5b:d6:54:3d:75:a9:d7:81:dd:e6:16:1e:f9:5a:e3:
                    9a:11:a9:14:0c:b3:06:0e:25:f2:0b:eb:a7:af:b7:
                    ea:eb:19:4d:30:66:5e:fd:9f:ab:91:50:37:7f:6d:
                    1b:f1:20:50:2f:8a:13:e0:d9:20:9f:f9:cc:79:ac:
                    2e:45:a6:12:1e:cd:9b:3b:b9:f1:c5:f5:7c:8f:16:
                    8c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5F:56:95:03:AF:85:B0:1A:5B:ED:3C:DF:0D:03:BE:9F:85:54:B4
            X509v3 Authority Key Identifier:
                keyid:BB:26:CC:FA:07:17:DB:9F:56:AA:38:B8:69:2C:E5:DC:FA:28:25:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:74:70:29:c0:af:72:b4:bf:96:7a:c4:39:07:d3:cf:94:02:
         75:2e:a4:b6:50:39:b9:5d:4c:9c:c1:8b:72:94:dd:43:d9:3b:
         5c:58:b1:33:88:88:d9:e2:ed:c2:6f:8e:e0:29:60:5d:31:7c:
         fb:31:17:d4:90:c7:32:23:d6:bf:c3:a7:2b:06:60:6e:a7:ae:
         15:11:7a:82:77:23:96:b3:6c:59:e9:48:da:6f:64:6f:3b:51:
         67:62:b3:c3:37:87:74:c3:9f:ba:69:15:77:0f:eb:56:a8:63:
         46:28:3b:6d:37:9a:31:fb:cf:8f:bb:67:8d:ad:34:7c:8c:d2:
         0a:09:50:da:58:3f:cc:1b:e0:24:86:12:8e:6e:b3:44:6a:3a:
         60:d4:d9:fc:01:0f:6e:e3:96:00:61:8b:37:d7:cc:4b:16:58:
         d3:34:e1:ae:ff:61:be:e2:8f:da:df:56:98:ee:72:03:ef:ae:
         74:b7:21:0a:6c:47:9d:ff:10:cb:ac:b7:f5:69:24:27:ff:d9:
         dd:76:27:87:34:f7:08:50:8b:cf:19:fb:25:8e:cb:5d:4d:0a:
         9d:96:79:2a:19:ac:2c:23:3c:1b:40:05:94:19:d7:3b:ab:c0:
         3c:f0:22:9b:2c:3a:b3:2f:72:48:c6:2d:11:34:f0:8d:f9:f0:
         af:0a:46:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:26:58 2026 by rpki-client