Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.mft
File:                     uMnnsYl6-wCPOx34vwT5tWdwPeQ.mft (raw, json)
Hash identifier:          /0EJWHRanAOnfv/OjkvQkGrBUDanLcyKxdEgzwUJbe8=
Subject key identifier:   B1:4D:6E:53:F7:0F:96:16:DE:57:4D:71:C0:99:E2:A7:BD:91:57:FD
Authority key identifier: B8:C9:E7:B1:89:7A:FB:00:8F:3B:1D:F8:BF:04:F9:B5:67:70:3D:E4
Certificate issuer:       /CN=b8c9e7b1897afb008f3b1df8bf04f9b567703de4
Certificate serial:       019CAAFD473CDBBFFD4294D501104459EEE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMnnsYl6-wCPOx34vwT5tWdwPeQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.mft
Manifest number:          17D7
Signing time:             Sun 01 Mar 2026 20:00:51 +0000
Manifest this update:     Sun 01 Mar 2026 20:00:51 +0000
Manifest next update:     Mon 02 Mar 2026 20:00:51 +0000
Files and hashes:         1: 5qhVPI1i7bgsBqCDOR_pBDzMDds.roa (hash: hsXI0HXZI7WGFauILyyNN6KaKFpRLSAYg6OSGX8LjyY=)
                          2: uMnnsYl6-wCPOx34vwT5tWdwPeQ.crl (hash: AthGDT9QW+tvTXKBsJ/NU8i5iyJdtiZBTwsY2rAbdHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uMnnsYl6-wCPOx34vwT5tWdwPeQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:47:3c:db:bf:fd:42:94:d5:01:10:44:59:ee:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8c9e7b1897afb008f3b1df8bf04f9b567703de4
        Validity
            Not Before: Mar  1 20:00:51 2026 GMT
            Not After : Mar  2 20:00:51 2026 GMT
        Subject: CN=b14d6e53f70f9616de574d71c099e2a7bd9157fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f3:bd:b1:09:ca:9e:b0:41:71:2a:61:11:b1:
                    ce:6e:2d:1a:a7:40:05:f2:10:c2:2b:43:8c:c7:9e:
                    e2:a3:6e:be:dd:b6:0e:fd:e0:be:93:b3:40:a9:21:
                    1e:f9:65:71:e9:a0:7e:67:a0:fb:ae:36:16:d5:0f:
                    a1:85:13:e2:29:fe:b2:7e:3c:c1:f4:b8:6c:dd:79:
                    f6:81:c7:14:53:39:56:2a:9f:c6:18:bd:4f:e8:b3:
                    43:a2:fc:c4:e3:7b:5f:29:ec:cb:85:b8:57:83:72:
                    bc:0b:45:13:dd:81:14:b1:f8:30:99:72:61:56:b7:
                    12:16:d4:cb:ff:ce:29:8f:ea:85:d4:f7:cc:31:fd:
                    ee:7d:70:0b:0a:37:4b:a9:a4:95:5c:8b:a8:03:9d:
                    83:db:c7:fd:88:14:dc:08:e5:ab:1c:6a:8f:50:b1:
                    a3:cd:7f:41:e2:bc:0c:a4:8b:9f:68:25:5e:c9:e6:
                    1d:cd:aa:3a:22:21:56:cf:62:0a:47:b2:88:80:3a:
                    1c:63:a9:05:65:f7:b6:66:60:59:b3:0e:1f:83:2c:
                    a5:04:b8:31:a7:32:8f:bc:b7:1f:49:28:4f:3c:48:
                    f9:cc:63:92:cb:89:2c:d3:6d:81:82:f3:b9:1d:a0:
                    47:76:3a:9e:66:1b:6a:d8:fd:71:b8:81:41:1d:1a:
                    ef:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4D:6E:53:F7:0F:96:16:DE:57:4D:71:C0:99:E2:A7:BD:91:57:FD
            X509v3 Authority Key Identifier:
                keyid:B8:C9:E7:B1:89:7A:FB:00:8F:3B:1D:F8:BF:04:F9:B5:67:70:3D:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMnnsYl6-wCPOx34vwT5tWdwPeQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:5b:9b:41:14:9d:5d:a9:c5:54:a9:c6:70:6e:a3:70:b5:15:
         5a:48:d0:a5:d0:5f:e3:6e:19:94:9c:f3:e8:1b:6f:f9:00:3e:
         5b:55:2b:30:77:a2:f2:18:8f:87:e1:05:3b:b0:c5:ef:47:15:
         cd:4d:f5:b5:c2:4a:94:c1:ab:d7:b4:87:6b:3d:54:42:b1:38:
         89:63:85:c9:5f:1c:6e:01:45:54:77:b2:06:46:b4:7b:28:40:
         3c:68:97:30:92:da:96:ca:7c:ac:f3:03:94:99:52:1b:d0:d6:
         3d:53:06:89:f0:3a:81:be:1f:79:9e:35:72:0f:d4:cc:53:e8:
         2a:8b:a8:b6:05:05:ed:ec:28:29:66:cb:9d:2a:1a:0f:6e:49:
         08:c0:0c:36:b6:79:57:3e:fa:32:0d:29:1b:fb:b8:1d:eb:53:
         90:59:9b:f4:dd:13:48:f0:13:e6:6a:62:d0:de:31:fb:19:90:
         80:18:03:9d:fb:31:5c:c3:2d:43:3d:57:03:6f:cf:08:18:42:
         13:9c:18:c0:7d:5e:f9:99:76:40:1c:92:0b:ca:9d:be:60:65:
         8e:20:ce:64:53:29:23:e3:b0:fb:68:aa:1c:09:3c:b9:ca:2e:
         13:66:f5:9a:52:8c:0b:3f:b0:69:65:b4:a8:70:80:7d:f3:53:
         b7:c9:ae:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:12:00 2026 by rpki-client