Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.mft
File:                     uCLebF2ewIbZ0gGrbaVr08_v8kM.mft (raw, json)
Hash identifier:          p5Ip/ZZdmx37FO05iZksFNoBJtr+dfyneGwObMOyH1E=
Subject key identifier:   EA:29:0B:D8:9C:EE:B1:1E:FF:45:60:AC:BE:A6:33:06:DF:B2:2C:6A
Authority key identifier: B8:22:DE:6C:5D:9E:C0:86:D9:D2:01:AB:6D:A5:6B:D3:CF:EF:F2:43
Certificate issuer:       /CN=b822de6c5d9ec086d9d201ab6da56bd3cfeff243
Certificate serial:       019D9D3EBE0A9613DB5BFC640C0023AFC7EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uCLebF2ewIbZ0gGrbaVr08_v8kM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.mft
Manifest number:          DB
Signing time:             Fri 17 Apr 2026 21:00:27 +0000
Manifest this update:     Fri 17 Apr 2026 21:00:27 +0000
Manifest next update:     Sat 18 Apr 2026 21:00:27 +0000
Files and hashes:         1: fJN7PYZX9Sr-HX_3erhR56oW5z4.roa (hash: 62V7rj0IiHO0OW2XHO1iINDHqaR8ItLLbYMYozGGFjw=)
                          2: uCLebF2ewIbZ0gGrbaVr08_v8kM.crl (hash: gC893yAefiIGtZRRy83+lzRL1amekVpCMor+BK3Klb8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uCLebF2ewIbZ0gGrbaVr08_v8kM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:3e:be:0a:96:13:db:5b:fc:64:0c:00:23:af:c7:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b822de6c5d9ec086d9d201ab6da56bd3cfeff243
        Validity
            Not Before: Apr 17 21:00:27 2026 GMT
            Not After : Apr 18 21:00:27 2026 GMT
        Subject: CN=ea290bd89ceeb11eff4560acbea63306dfb22c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c6:40:ec:2f:3b:50:d5:9d:b3:e0:07:7b:39:
                    55:22:b0:57:b6:4c:2d:5f:30:3c:4a:d9:86:88:1b:
                    c3:6a:03:da:1c:a9:7a:bb:b6:51:bf:63:48:f4:97:
                    1d:8c:ab:3e:49:48:61:34:c2:49:34:a9:c7:25:40:
                    b7:f9:07:89:9f:66:1b:1f:06:f8:fc:a0:5e:58:e7:
                    1c:44:51:ad:e1:95:62:b1:47:8c:4b:06:05:18:bd:
                    af:e4:e7:4b:a6:91:06:50:1b:26:8d:03:d1:e7:aa:
                    a7:8c:85:d5:e6:74:c7:59:3e:1f:d1:3a:a0:e9:56:
                    50:ab:83:9f:74:43:9d:5f:2c:f1:25:4a:96:5d:3d:
                    d8:34:00:bd:85:64:7d:0c:8a:82:b7:31:d4:97:77:
                    ce:a6:98:a3:8a:af:df:7e:63:7e:79:f4:0c:92:68:
                    c6:de:94:6e:26:6c:4d:20:12:71:9b:d2:1f:ee:2a:
                    c3:e5:c4:58:a5:54:08:6d:0b:d7:f4:0d:7e:97:73:
                    d5:1a:70:7c:83:9e:9f:14:0c:c2:d5:22:df:b7:86:
                    fc:de:7a:c0:8d:72:13:0b:ea:c1:80:3a:dc:5e:a8:
                    5e:b1:1d:ac:65:8e:bd:f0:55:ea:23:1e:ca:6d:f0:
                    25:3d:0f:60:cc:af:c8:6c:a1:43:ae:ae:d2:23:a3:
                    87:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:29:0B:D8:9C:EE:B1:1E:FF:45:60:AC:BE:A6:33:06:DF:B2:2C:6A
            X509v3 Authority Key Identifier:
                keyid:B8:22:DE:6C:5D:9E:C0:86:D9:D2:01:AB:6D:A5:6B:D3:CF:EF:F2:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCLebF2ewIbZ0gGrbaVr08_v8kM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:2b:4f:4a:a4:49:a2:d6:40:ef:b4:44:eb:eb:f6:67:11:55:
         d1:6f:93:59:c2:3c:b9:9c:c7:ef:d8:ca:1e:5d:71:55:e6:d6:
         64:c8:33:32:61:8e:c3:a7:94:4b:a6:6a:57:9f:4c:64:e3:7a:
         b0:85:98:9e:13:7d:d3:75:25:5f:fb:e4:ef:de:c7:58:66:56:
         a4:96:3a:86:9a:c5:d0:0f:b5:7a:d5:1e:30:98:ed:08:a8:c3:
         2d:d5:8c:dd:2e:13:fd:d2:0c:eb:e2:3a:e6:3d:97:88:8c:4e:
         41:47:a8:9b:1b:dd:e8:59:90:f4:c2:29:49:f8:59:58:8e:6a:
         c3:af:12:8e:b1:2a:f9:32:02:2f:27:3c:b1:8d:54:4a:44:09:
         7b:9d:62:62:a8:f9:48:61:fe:b4:96:b7:f7:13:b2:2d:9f:f6:
         a5:30:96:38:fd:ea:04:f4:ab:0e:cc:ea:83:3b:17:f9:9b:b9:
         3f:d6:7a:4b:b1:03:c8:1f:12:48:a3:f5:3e:64:84:19:da:d8:
         af:f7:ff:dd:4f:ed:66:3b:19:a0:5f:fe:88:d4:62:bb:2a:90:
         cf:d4:6a:fd:cf:1e:f7:c3:b4:d2:75:a5:28:e9:cc:48:7b:0b:
         21:cc:42:ae:c0:6c:e7:92:1f:65:da:20:49:71:71:4b:3e:96:
         4f:a5:3f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:17:05 2026 by rpki-client