Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a08afc-fa18-4038-b072-0b1cdb35bf90/1/uQs3yxdghhgU8CzzVJfuVlMwZEw.mft
File:                     uQs3yxdghhgU8CzzVJfuVlMwZEw.mft (raw, json)
Hash identifier:          9c/YmGUNwNoFXc7W7ldc1JRQ44B0b9RZl5KvEgILKu0=
Subject key identifier:   74:98:B3:EF:39:C7:FD:C6:1A:7F:B9:12:52:E1:A7:2F:20:62:6B:32
Authority key identifier: B9:0B:37:CB:17:60:86:18:14:F0:2C:F3:54:97:EE:56:53:30:64:4C
Certificate issuer:       /CN=b90b37cb1760861814f02cf35497ee565330644c
Certificate serial:       019D26CCB8C3C356241C685C8B9AFCCBF5AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uQs3yxdghhgU8CzzVJfuVlMwZEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a08afc-fa18-4038-b072-0b1cdb35bf90/1/uQs3yxdghhgU8CzzVJfuVlMwZEw.mft
Manifest number:          015A
Signing time:             Wed 25 Mar 2026 21:00:43 +0000
Manifest this update:     Wed 25 Mar 2026 21:00:43 +0000
Manifest next update:     Thu 26 Mar 2026 21:00:43 +0000
Files and hashes:         1: uQs3yxdghhgU8CzzVJfuVlMwZEw.crl (hash: 20DMsiQiaIrwruWABStoO3veI3Ku/QCusviU7jDPhGo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/a08afc-fa18-4038-b072-0b1cdb35bf90/1/uQs3yxdghhgU8CzzVJfuVlMwZEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/a08afc-fa18-4038-b072-0b1cdb35bf90/1/uQs3yxdghhgU8CzzVJfuVlMwZEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uQs3yxdghhgU8CzzVJfuVlMwZEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cc:b8:c3:c3:56:24:1c:68:5c:8b:9a:fc:cb:f5:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b90b37cb1760861814f02cf35497ee565330644c
        Validity
            Not Before: Mar 25 21:00:43 2026 GMT
            Not After : Mar 26 21:00:43 2026 GMT
        Subject: CN=7498b3ef39c7fdc61a7fb91252e1a72f20626b32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c0:0a:5e:e3:4e:75:f7:24:e9:78:d5:c4:92:
                    80:34:2a:27:06:2d:3c:b6:4b:0e:7b:03:b2:4d:5e:
                    85:99:5c:73:cd:e1:1c:dc:3d:c2:86:14:28:54:c9:
                    91:1c:b9:40:d5:fa:91:e1:ca:68:c7:fe:85:3f:d6:
                    09:cf:c7:62:9b:c6:47:62:36:0e:40:99:c0:55:91:
                    99:b3:92:86:90:9e:1e:65:b9:e6:5b:d9:4c:3c:4b:
                    81:fd:02:e0:2f:3d:42:d2:cd:1e:c9:80:3f:fa:0c:
                    73:7a:59:23:75:c6:bb:55:67:6c:ca:64:b3:3d:ab:
                    33:6f:49:c2:cd:0f:a4:3e:1f:34:c6:d1:e5:54:7e:
                    92:66:a1:52:de:8d:09:f8:24:6c:e1:59:30:41:da:
                    96:6e:f1:ad:31:f3:af:49:d7:e2:6d:e2:c3:1c:34:
                    6c:39:f8:40:a7:64:2c:09:a5:f2:11:d6:54:41:a8:
                    48:f5:48:e9:55:0d:d9:ad:e0:05:32:7b:4e:40:27:
                    2b:22:41:72:93:15:19:c7:a5:41:7c:08:c5:64:fb:
                    2e:65:bb:9f:f5:fd:f9:ff:73:06:df:30:fa:a9:58:
                    82:07:cb:35:db:8e:d4:0a:8f:62:e4:a2:d4:72:bf:
                    97:9d:49:0a:9b:a1:42:23:23:a5:11:f1:c5:af:8a:
                    57:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:98:B3:EF:39:C7:FD:C6:1A:7F:B9:12:52:E1:A7:2F:20:62:6B:32
            X509v3 Authority Key Identifier:
                keyid:B9:0B:37:CB:17:60:86:18:14:F0:2C:F3:54:97:EE:56:53:30:64:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQs3yxdghhgU8CzzVJfuVlMwZEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a08afc-fa18-4038-b072-0b1cdb35bf90/1/uQs3yxdghhgU8CzzVJfuVlMwZEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a08afc-fa18-4038-b072-0b1cdb35bf90/1/uQs3yxdghhgU8CzzVJfuVlMwZEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:3f:4c:35:a8:b9:a7:9e:87:e2:a9:30:4f:d3:43:9a:e7:2f:
         72:bc:5f:a1:63:cb:2f:1d:13:92:f2:b2:1a:81:88:d4:2d:89:
         61:ac:fc:96:ec:4f:41:54:cd:a9:4e:8f:f5:e6:b8:c4:11:9c:
         88:5e:fe:5c:cb:96:0b:d9:47:62:08:a5:4b:23:5b:88:03:68:
         33:1d:bd:27:d9:4b:7b:d2:4c:e5:49:f6:af:92:a1:ab:a6:79:
         c5:ab:37:26:f1:c2:56:ce:aa:c4:77:f8:1c:00:b1:e1:74:9f:
         fc:31:a6:e4:62:88:ea:49:fa:aa:90:7b:92:40:e1:b3:1e:fd:
         f2:23:e4:19:d3:55:2b:a4:75:45:6c:17:a2:a4:6a:98:d5:b3:
         dc:cc:bc:87:c4:c0:4e:d0:91:26:a5:47:07:2d:56:81:37:bd:
         1d:c5:12:cc:67:87:51:76:4b:1a:47:5b:45:b4:72:85:1a:d5:
         cc:bb:20:fb:4b:b6:a0:8b:35:73:63:f6:62:48:0e:5a:f9:bb:
         55:c9:01:7b:5f:3e:99:0a:7d:53:cd:6a:12:27:a7:35:59:5b:
         93:75:69:56:1f:e9:e6:33:f4:f9:a0:a3:da:99:0a:45:80:00:
         79:5f:ad:5a:99:f6:84:d8:23:00:e7:3a:5e:3d:2f:aa:4a:a1:
         02:1c:87:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:05:08 2026 by rpki-client