Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.mft
File:                     uIog4vueEVBGObZ8_sCv6z8wZpA.mft (raw, json)
Hash identifier:          QOH8au388YchUsySG1KZ3v88IJEshdqEqNSruNXxU00=
Subject key identifier:   66:C3:73:1C:87:70:40:68:9A:56:EF:A2:BE:79:12:55:EA:78:09:D5
Authority key identifier: B8:8A:20:E2:FB:9E:11:50:46:39:B6:7C:FE:C0:AF:EB:3F:30:66:90
Certificate issuer:       /CN=b88a20e2fb9e11504639b67cfec0afeb3f306690
Certificate serial:       019D270462B16E8C9E07738B9625CDBD75F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uIog4vueEVBGObZ8_sCv6z8wZpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.mft
Manifest number:          1883
Signing time:             Wed 25 Mar 2026 22:01:31 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:31 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:31 +0000
Files and hashes:         1: uIog4vueEVBGObZ8_sCv6z8wZpA.crl (hash: Cr6ApdyjhuPXmZlXl9IlYFi6wmhztVrNdQcYAF9gGNw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uIog4vueEVBGObZ8_sCv6z8wZpA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:62:b1:6e:8c:9e:07:73:8b:96:25:cd:bd:75:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b88a20e2fb9e11504639b67cfec0afeb3f306690
        Validity
            Not Before: Mar 25 22:01:31 2026 GMT
            Not After : Mar 26 22:01:31 2026 GMT
        Subject: CN=66c3731c877040689a56efa2be791255ea7809d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:70:4a:ea:ff:ab:af:6d:df:2a:86:b1:58:5b:
                    26:2a:40:53:7f:32:7e:d8:63:21:e9:a2:82:12:c4:
                    67:72:84:49:f5:10:ba:07:41:1e:64:81:3a:c5:55:
                    d8:a5:c1:5c:9c:b4:7c:e3:60:7f:64:f0:29:f0:5e:
                    0d:f0:8b:4e:66:fd:6c:c4:58:3b:33:9a:43:30:90:
                    8a:5f:60:b8:a2:38:f4:a0:5d:e4:60:9a:36:ce:a7:
                    63:0d:8a:7a:ea:f8:91:b6:08:22:e4:9c:51:f0:af:
                    75:23:51:91:23:9d:82:bd:5b:52:25:c5:ee:1f:fa:
                    5b:ac:df:9f:3e:72:86:9a:d2:02:f9:40:03:52:d1:
                    ca:84:b7:92:2a:d8:f3:19:a7:a8:a3:04:5d:4f:0c:
                    30:11:09:d3:8d:98:3f:49:9e:7b:8e:f7:4e:03:7a:
                    2b:79:ea:d4:8c:c5:3a:be:6a:a0:c1:e0:0b:8a:fa:
                    6b:bc:f3:a9:18:1b:6d:5b:06:ba:5b:92:ff:06:35:
                    51:ec:e8:ce:bf:a8:7f:d7:92:0b:86:e9:64:94:f7:
                    59:f2:0a:86:e5:1d:2b:b1:36:5d:37:a9:75:20:3d:
                    98:39:cf:a2:84:d1:ac:b3:fb:86:87:5f:ab:f1:3e:
                    53:b4:99:fe:73:69:a3:b3:97:c7:5d:21:4c:96:1a:
                    96:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C3:73:1C:87:70:40:68:9A:56:EF:A2:BE:79:12:55:EA:78:09:D5
            X509v3 Authority Key Identifier:
                keyid:B8:8A:20:E2:FB:9E:11:50:46:39:B6:7C:FE:C0:AF:EB:3F:30:66:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uIog4vueEVBGObZ8_sCv6z8wZpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:62:1d:3d:f7:a2:86:61:3c:c2:1b:31:e9:1b:68:55:fd:14:
         2e:ed:7c:e1:ef:c8:99:01:f6:aa:c4:14:ca:71:d1:ce:82:5f:
         37:86:0e:c9:e6:dd:ae:10:9d:c0:e6:75:ff:54:e4:ec:d4:0b:
         03:ab:36:35:70:e5:71:83:28:ea:fe:89:fa:c6:bf:dd:87:2d:
         7b:e6:21:ae:21:dd:15:df:90:50:0d:30:10:10:d6:86:d8:c4:
         68:3d:7f:0b:d6:5d:3c:11:8b:bf:6b:d2:3a:43:5c:81:e1:57:
         f5:3b:27:64:68:ef:ad:91:0d:f8:b7:96:c9:f5:04:f7:1a:6a:
         d4:41:05:52:20:49:29:ea:ca:13:ee:54:53:7d:7a:9d:84:65:
         69:33:67:e3:5d:3f:a7:b8:fe:fb:9d:5a:e0:83:d2:a1:cc:4f:
         0b:58:5a:62:fd:94:cb:fe:6a:95:d7:1a:ad:f7:13:cb:b7:dd:
         11:f0:46:65:58:f5:48:15:15:95:e8:95:4e:35:5f:31:f6:e5:
         21:fc:82:8d:c1:42:2f:7f:fd:c2:65:6c:c2:a3:8d:29:1c:bf:
         cf:ed:ca:94:c1:ce:0e:c5:58:38:8c:66:cc:ce:d7:6f:fb:8b:
         50:f1:74:12:18:1b:14:39:f5:36:30:f8:91:fd:d1:05:1d:2d:
         24:58:6b:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBGKxboyeB3OLliXNvXX3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4OGEyMGUyZmI5ZTExNTA0NjM5YjY3Y2ZlYzBhZmViM2Yz
MDY2OTAwHhcNMjYwMzI1MjIwMTMxWhcNMjYwMzI2MjIwMTMxWjAzMTEwLwYDVQQD
Eyg2NmMzNzMxYzg3NzA0MDY4OWE1NmVmYTJiZTc5MTI1NWVhNzgwOWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nBK6v+rr23fKoaxWFsmKkBTfzJ+
2GMh6aKCEsRncoRJ9RC6B0EeZIE6xVXYpcFcnLR842B/ZPAp8F4N8ItOZv1sxFg7
M5pDMJCKX2C4ojj0oF3kYJo2zqdjDYp66viRtggi5JxR8K91I1GRI52CvVtSJcXu
H/pbrN+fPnKGmtIC+UADUtHKhLeSKtjzGaeoowRdTwwwEQnTjZg/SZ57jvdOA3or
eerUjMU6vmqgweALivprvPOpGBttWwa6W5L/BjVR7OjOv6h/15ILhulklPdZ8gqG
5R0rsTZdN6l1ID2YOc+ihNGss/uGh1+r8T5TtJn+c2mjs5fHXSFMlhqWMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbDcxyHcEBomlbvor55ElXqeAnVMB8GA1UdIwQY
MBaAFLiKIOL7nhFQRjm2fP7Ar+s/MGaQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUlvZzR2dWVFVkJHT2JaOF9zQ3Y2ejh3WnBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9hYmI2MmUtNGI3NS00NGMzLThmYjMt
MThjY2JjOTk1YmY4LzEvdUlvZzR2dWVFVkJHT2JaOF9zQ3Y2ejh3WnBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9hYmI2MmUtNGI3NS00NGMzLThmYjMtMThjY2JjOTk1YmY4
LzEvdUlvZzR2dWVFVkJHT2JaOF9zQ3Y2ejh3WnBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVGIdPfei
hmE8whsx6RtoVf0ULu184e/ImQH2qsQUynHRzoJfN4YOyebdrhCdwOZ1/1Tk7NQL
A6s2NXDlcYMo6v6J+sa/3Ycte+YhriHdFd+QUA0wEBDWhtjEaD1/C9ZdPBGLv2vS
OkNcgeFX9TsnZGjvrZEN+LeWyfUE9xpq1EEFUiBJKerKE+5UU316nYRlaTNn410/
p7j++51a4IPSocxPC1haYv2Uy/5qldcarfcTy7fdEfBGZVj1SBUVleiVTjVfMfbl
IfyCjcFCL3/9wmVswqONKRy/z+3KlMHODsVYOIxmzM7Xb/uLUPF0EhgbFDn1NjD4
kf3RBR0tJFhr0g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:26:30 2026 by rpki-client