Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
File:                     uiOwejwKyeMz9S6LXUGnaKPTkCU.mft (raw, json)
Hash identifier:          tgvwi3J8k9O5zB34LAlOQcG0scnH6ENCLLoauATgDnA=
Subject key identifier:   0F:3B:48:74:42:DA:96:75:19:46:56:F3:98:AA:5C:75:09:F9:3A:E9
Authority key identifier: BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25
Certificate issuer:       /CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025
Certificate serial:       019CAEA36AB544B9A71887B8140D8BDF33E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
Manifest number:          07FA
Signing time:             Mon 02 Mar 2026 13:01:11 +0000
Manifest this update:     Mon 02 Mar 2026 13:01:11 +0000
Manifest next update:     Tue 03 Mar 2026 13:01:11 +0000
Files and hashes:         1: cYSlOixvw1IRH_A6U1PmGBfOnLc.roa (hash: ObOoQktNn2mk1CLRsAqDNu4BrgB8VABVPaTI7wXzkNQ=)
                          2: cfljug29MBdwZ2IRskxqcwdwGN0.roa (hash: RSO1UVd7bjnpUDUf4c2ob5lCf11GhEF8w59+h0O9Z8s=)
                          3: e-t5BEEANDkjz8TT0h8YEJKZz74.asa (hash: tAn9UqhREKeh/3lPzeJs+A/xlp0r6QrTew+hGnn6pAM=)
                          4: sPDYGaB0jdjNmv_RI00LaumXHZM.roa (hash: cR+r+JhOtPPtk4/8vr8rgMsCxMQVubUz6os2NddknO4=)
                          5: uiOwejwKyeMz9S6LXUGnaKPTkCU.crl (hash: 4wDdDMC1PojpXzLPO0KGUoIoGOEOnrDydq4R+Rv+ga0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 13:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:a3:6a:b5:44:b9:a7:18:87:b8:14:0d:8b:df:33:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025
        Validity
            Not Before: Mar  2 13:01:11 2026 GMT
            Not After : Mar  3 13:01:11 2026 GMT
        Subject: CN=0f3b487442da9675194656f398aa5c7509f93ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a0:94:1d:6d:b8:08:e1:29:df:99:d7:50:41:
                    c1:89:a7:36:8d:6a:50:2d:39:34:3f:75:2d:1b:94:
                    fc:9c:11:f2:2c:5a:3e:66:bf:67:ed:1f:a1:15:fe:
                    8d:91:85:05:b9:dc:52:24:1b:97:dd:5a:2e:d4:ec:
                    18:e5:dc:3f:3d:7b:da:f9:43:23:44:b9:31:df:5c:
                    00:2c:b3:76:5f:1d:e9:87:93:43:a8:31:da:f7:2e:
                    48:bb:0d:57:99:f8:71:21:f6:f6:90:94:fa:2d:07:
                    16:a6:fd:7d:9c:e5:19:4f:7a:a0:cb:91:05:cf:1e:
                    dd:07:e6:3c:c9:cd:55:45:0c:64:1b:0a:07:47:b3:
                    13:60:99:0c:5e:45:2f:ce:c7:63:f9:b6:41:45:9e:
                    ed:83:f6:89:9b:c9:46:7e:99:7e:09:32:86:90:3a:
                    76:f2:43:41:ee:66:95:75:20:40:b7:5e:ed:e0:8c:
                    ea:04:7c:10:d0:36:56:a8:c5:64:d2:bf:91:1e:15:
                    1d:d4:97:8e:3d:2d:30:ef:a4:6a:b6:06:9b:2e:ce:
                    d4:8b:bd:94:1f:90:d0:44:9b:d8:72:b7:2d:21:66:
                    a2:02:60:ee:60:9f:67:59:ab:77:ad:fe:c1:06:f3:
                    51:d4:67:bb:03:b1:8a:e6:1c:b2:b3:fc:13:ea:bc:
                    0e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:3B:48:74:42:DA:96:75:19:46:56:F3:98:AA:5C:75:09:F9:3A:E9
            X509v3 Authority Key Identifier:
                keyid:BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:8c:f3:ee:df:4c:d6:d5:06:54:40:b3:cc:d8:ec:ee:86:d1:
         2e:98:64:a7:b2:3e:67:ce:be:8c:de:af:9c:c8:16:ca:45:38:
         3a:4c:19:66:4f:61:26:fd:b7:fe:ef:17:03:29:5a:71:dc:8e:
         a6:ab:f8:7c:01:81:7a:e6:ac:51:18:e7:58:a1:07:c4:28:4c:
         80:61:3f:f0:aa:e4:be:cc:d7:2f:80:bd:6c:e6:93:d0:ce:a4:
         8c:4d:ff:05:5a:f9:07:34:0d:09:8e:fc:02:f4:8f:5c:e8:5f:
         47:d2:bf:02:8f:df:b2:84:3d:64:bd:11:fb:d3:7c:ce:fa:f0:
         da:c3:39:32:b0:f6:ae:5f:bc:1c:19:df:89:b9:da:ce:a2:bf:
         d8:53:6e:e1:b7:f1:ec:a8:72:17:b8:d0:4f:5a:4a:1e:3a:62:
         1b:9a:d6:25:00:cc:13:c1:ef:d9:13:b8:a3:22:92:8d:d7:6d:
         cb:94:ba:a6:d9:da:33:45:5f:1b:1e:97:6f:f6:df:6e:75:2d:
         cd:4e:f1:33:68:a1:82:be:66:91:22:3e:c5:b4:b9:a2:1d:e0:
         5d:7f:22:4c:d0:03:c3:dd:8d:c0:3b:82:f0:8d:94:1f:a3:70:
         af:a8:dc:0b:7e:6b:8c:29:21:fd:f9:fe:03:b5:bb:5f:81:77:
         9d:c1:c7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:52:54 2026 by rpki-client