Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
File:                     uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft (raw, json)
Hash identifier:          yqSl5VYqfqAB1Dhb+DfteGr+j1aA5YUcZXPMjmYPDB4=
Subject key identifier:   E8:B0:DA:FB:CA:DB:87:22:2E:AA:5C:19:44:CB:91:F1:3F:1B:E1:50
Authority key identifier: B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6
Certificate issuer:       /CN=b945674f01fec565971c950f3512165c43ffdfb6
Certificate serial:       019D2816A298101F83F4051DC278DEFF8C77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
Manifest number:          0916
Signing time:             Thu 26 Mar 2026 03:01:05 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:05 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:05 +0000
Files and hashes:         1: FxpOpLtK88tsOun050YE0ZfdIDo.roa (hash: +btXumZU2TUmANl1EByq4FAyXjWIcRex9I8hhT7VPvA=)
                          2: uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl (hash: kacnCF2S68Ezh6+JqCQCYxoXDqCeoM34O5CpYwJAZyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:a2:98:10:1f:83:f4:05:1d:c2:78:de:ff:8c:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b945674f01fec565971c950f3512165c43ffdfb6
        Validity
            Not Before: Mar 26 03:01:05 2026 GMT
            Not After : Mar 27 03:01:05 2026 GMT
        Subject: CN=e8b0dafbcadb87222eaa5c1944cb91f13f1be150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f6:3f:82:6b:88:2c:3e:23:dd:a7:22:52:86:
                    dd:41:80:3c:1d:0a:99:5e:74:28:54:bf:ae:36:6f:
                    72:01:a9:ea:26:4f:8f:06:5a:20:d2:d8:32:6f:12:
                    8a:5e:ee:8b:f0:3b:9d:d8:ab:e2:43:e6:0d:fa:c5:
                    9b:7c:8e:fd:3e:ce:82:e4:37:89:95:a2:ef:5d:ad:
                    01:24:9a:1a:09:b5:35:e4:e2:7e:44:92:87:df:7d:
                    73:f3:40:03:41:6f:9c:d1:a3:b8:df:78:87:d0:d4:
                    dc:5a:f9:12:c2:7a:a6:1a:e1:74:4c:7d:48:10:b7:
                    4d:37:f4:8a:14:dd:11:29:49:af:b3:67:b8:e0:8e:
                    71:01:dd:bd:47:05:98:2e:0c:fd:d8:14:70:4c:9b:
                    79:d8:61:e1:5d:a1:e2:b9:7d:22:c0:cd:a7:ec:83:
                    2b:46:33:39:02:11:fb:eb:d1:e1:5f:64:24:15:ea:
                    26:6c:03:c0:bd:05:1b:d4:2f:49:0c:59:21:cd:b1:
                    39:8a:1d:37:86:e3:ca:69:d6:58:9f:19:ad:ac:aa:
                    5d:ce:39:cd:65:1b:c8:13:ec:9f:9f:20:ba:28:b0:
                    d6:3e:8e:d1:ae:26:a1:db:cd:dc:c8:4b:81:66:80:
                    18:eb:fd:2d:83:af:7a:e2:99:c4:7e:7d:c3:96:38:
                    8d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B0:DA:FB:CA:DB:87:22:2E:AA:5C:19:44:CB:91:F1:3F:1B:E1:50
            X509v3 Authority Key Identifier:
                keyid:B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:1b:79:0e:ba:8d:07:0a:48:8f:26:26:22:85:a2:d3:8a:52:
         64:ec:14:3a:3b:04:ad:91:41:88:29:f6:45:a7:6f:cd:bc:f5:
         75:18:28:e0:66:b3:ed:9c:14:28:f6:a3:c6:a6:6c:59:2b:7e:
         d5:bd:de:59:45:0d:cb:59:13:0e:2c:44:f4:6e:b9:c7:3a:57:
         ad:c1:5e:07:98:51:a8:61:a2:c3:fe:2c:b2:76:a4:7b:4e:98:
         2b:9f:8b:e7:ab:57:b2:46:2d:ee:d3:76:5a:68:80:2f:fe:37:
         3d:1a:a2:9c:35:00:ee:ef:0c:fa:3c:db:b9:49:85:51:0a:75:
         69:4e:b0:67:53:82:cf:28:ca:47:f9:b7:64:b6:ae:70:39:a4:
         76:f8:cd:76:40:2a:33:38:cf:04:7e:f0:83:f3:b1:51:29:9c:
         42:18:7d:ac:dd:5c:42:33:f5:4b:8e:b4:11:82:0e:78:87:4b:
         f8:28:5c:2f:32:c3:15:00:b0:86:87:9f:d7:c3:ae:6f:85:5f:
         98:61:18:4d:43:70:75:83:6f:2b:28:cd:a4:e6:68:c5:c7:14:
         0b:e0:04:32:b2:48:c4:17:34:7a:6b:ae:39:87:45:cb:ee:91:
         ef:30:74:b0:a9:b5:2b:29:db:68:c5:d9:64:39:7c:e6:bd:8c:
         8f:66:24:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:40 2026 by rpki-client