Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft
File:                     i_UbRkYUeZl2V31e96gHjqgMF0M.mft (raw, json)
Hash identifier:          mdZmJcXUNDW7trH1+QWdeRjyEscdDnApzYcfQT+XGuU=
Subject key identifier:   32:93:23:53:2C:91:22:A9:48:83:61:AE:7A:F4:0B:2C:1B:75:AF:09
Authority key identifier: 8B:F5:1B:46:46:14:79:99:76:57:7D:5E:F7:A8:07:8E:A8:0C:17:43
Certificate issuer:       /CN=8bf51b464614799976577d5ef7a8078ea80c1743
Certificate serial:       019D29970A50440D921A8E592C51B33A95F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft
Manifest number:          0774
Signing time:             Thu 26 Mar 2026 10:00:57 +0000
Manifest this update:     Thu 26 Mar 2026 10:00:57 +0000
Manifest next update:     Fri 27 Mar 2026 10:00:57 +0000
Files and hashes:         1: i_UbRkYUeZl2V31e96gHjqgMF0M.crl (hash: H0K+rvoHUh5HHZztG4oI1gPdGBU85OjtWsnlLRQu1zw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:97:0a:50:44:0d:92:1a:8e:59:2c:51:b3:3a:95:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bf51b464614799976577d5ef7a8078ea80c1743
        Validity
            Not Before: Mar 26 10:00:57 2026 GMT
            Not After : Mar 27 10:00:57 2026 GMT
        Subject: CN=329323532c9122a9488361ae7af40b2c1b75af09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:64:3c:65:0c:18:c5:76:29:21:99:24:ea:6a:
                    dc:48:2f:cb:ba:98:27:25:48:27:61:b9:73:51:73:
                    28:6c:96:9f:34:e6:07:8e:7e:62:00:56:70:f1:51:
                    82:bd:a1:c6:2c:a2:9d:63:a8:56:79:40:84:a7:41:
                    eb:5a:26:e3:f6:f2:ef:9a:0e:dd:44:d7:f3:10:51:
                    84:37:4e:cb:63:57:8f:2d:98:5f:b3:d3:da:ba:d5:
                    1a:a6:73:8b:8b:f3:5e:74:9d:29:b5:b4:4d:25:32:
                    6f:f3:4b:e7:30:73:5f:17:ec:30:b5:e8:3c:59:42:
                    b2:28:9d:3c:a3:69:b8:76:21:2f:38:68:37:0a:2b:
                    54:43:18:03:6c:93:b7:83:b2:3e:b6:26:77:e3:5b:
                    c9:8c:1a:6b:de:35:23:24:87:02:06:04:c6:d9:18:
                    40:ff:84:1a:62:59:57:ed:2f:94:75:d4:a6:95:ab:
                    a6:94:38:69:e4:97:28:94:96:c2:44:15:97:94:f1:
                    04:f1:19:5d:42:ce:f6:de:82:0c:cd:90:0b:ad:2c:
                    3e:f6:fb:b9:ea:c8:1e:01:78:a6:c5:6c:0a:8e:68:
                    6c:b6:95:a8:28:31:33:ee:0b:0a:88:05:8d:8c:68:
                    7d:03:63:29:8e:6d:b8:4c:af:95:b7:4f:f2:53:db:
                    94:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:93:23:53:2C:91:22:A9:48:83:61:AE:7A:F4:0B:2C:1B:75:AF:09
            X509v3 Authority Key Identifier:
                keyid:8B:F5:1B:46:46:14:79:99:76:57:7D:5E:F7:A8:07:8E:A8:0C:17:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:af:bc:3c:1d:3b:d8:ba:3e:50:b8:a0:7d:6b:24:21:c9:df:
         1c:65:23:e1:73:c7:d2:30:6b:59:6b:32:5b:76:67:30:b8:84:
         85:42:5c:1c:5b:bb:fd:85:8b:40:88:fd:65:92:3c:f6:1a:65:
         db:11:65:41:31:de:7d:0c:ec:48:ad:60:92:24:dc:35:51:60:
         d5:97:53:e8:49:57:54:f7:bb:c7:6a:d5:94:2f:51:2e:10:76:
         66:1f:7d:95:1d:a1:a2:73:72:ef:02:97:00:4a:df:c2:1f:57:
         47:d5:19:b3:fa:ba:f4:98:8e:86:6b:b1:36:0b:97:50:8e:fa:
         32:23:be:61:be:b8:91:77:bc:90:95:3c:b6:31:44:9f:c9:7a:
         0f:ce:93:f5:64:96:83:53:55:b3:4f:d8:3c:42:9e:ca:ad:00:
         a8:d9:f7:a7:82:67:f9:8e:96:5a:c3:42:2c:04:d8:d1:e2:44:
         82:a5:3d:a0:59:b2:3d:a5:92:b0:f4:93:c9:19:f2:02:9d:32:
         39:fc:ec:d1:03:fa:2e:a6:66:53:9e:97:80:bd:38:3b:98:69:
         a7:eb:77:a2:c6:05:19:97:01:25:5c:53:b6:30:7e:2f:0f:06:
         e6:a0:20:29:0f:24:27:84:77:6d:5e:dc:26:f1:59:8a:87:04:
         27:c3:71:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0plwpQRA2SGo5ZLFGzOpXwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZjUxYjQ2NDYxNDc5OTk3NjU3N2Q1ZWY3YTgwNzhlYTgw
YzE3NDMwHhcNMjYwMzI2MTAwMDU3WhcNMjYwMzI3MTAwMDU3WjAzMTEwLwYDVQQD
EygzMjkzMjM1MzJjOTEyMmE5NDg4MzYxYWU3YWY0MGIyYzFiNzVhZjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWQ8ZQwYxXYpIZkk6mrcSC/Lupgn
JUgnYblzUXMobJafNOYHjn5iAFZw8VGCvaHGLKKdY6hWeUCEp0HrWibj9vLvmg7d
RNfzEFGEN07LY1ePLZhfs9PautUapnOLi/NedJ0ptbRNJTJv80vnMHNfF+wwteg8
WUKyKJ08o2m4diEvOGg3CitUQxgDbJO3g7I+tiZ341vJjBpr3jUjJIcCBgTG2RhA
/4QaYllX7S+UddSmlaumlDhp5JcolJbCRBWXlPEE8RldQs723oIMzZALrSw+9vu5
6sgeAXimxWwKjmhstpWoKDEz7gsKiAWNjGh9A2Mpjm24TK+Vt0/yU9uU4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKTI1MskSKpSINhrnr0Cywbda8JMB8GA1UdIwQY
MBaAFIv1G0ZGFHmZdld9XveoB46oDBdDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaV9VYlJrWVVlWmwyVjMxZTk2Z0hqcWdNRjBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hMzhkMWUtMmIwNS00OWFjLWI0ZWMt
ZDBkMzEzNTIwNDMxLzEvaV9VYlJrWVVlWmwyVjMxZTk2Z0hqcWdNRjBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9hMzhkMWUtMmIwNS00OWFjLWI0ZWMtZDBkMzEzNTIwNDMx
LzEvaV9VYlJrWVVlWmwyVjMxZTk2Z0hqcWdNRjBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoK+8PB07
2Lo+ULigfWskIcnfHGUj4XPH0jBrWWsyW3ZnMLiEhUJcHFu7/YWLQIj9ZZI89hpl
2xFlQTHefQzsSK1gkiTcNVFg1ZdT6ElXVPe7x2rVlC9RLhB2Zh99lR2honNy7wKX
AErfwh9XR9UZs/q69JiOhmuxNguXUI76MiO+Yb64kXe8kJU8tjFEn8l6D86T9WSW
g1NVs0/YPEKeyq0AqNn3p4Jn+Y6WWsNCLATY0eJEgqU9oFmyPaWSsPSTyRnyAp0y
Ofzs0QP6LqZmU56XgL04O5hpp+t3osYFGZcBJVxTtjB+Lw8G5qAgKQ8kJ4R3bV7c
JvFZiocEJ8NxIg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:39 2026 by rpki-client