Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.mft
File:                     uzYogf_jYlMUAGCLYyi7Et-hYIE.mft (raw, json)
Hash identifier:          eEWvf5wChAbIgn9UnXKCseOOwNoL8X2J530eWBPROaY=
Subject key identifier:   B0:D2:38:BE:22:CB:01:C5:90:E7:7D:8B:6C:E2:34:94:12:24:21:51
Authority key identifier: BB:36:28:81:FF:E3:62:53:14:00:60:8B:63:28:BB:12:DF:A1:60:81
Certificate issuer:       /CN=bb362881ffe362531400608b6328bb12dfa16081
Certificate serial:       019D98F47F75E5D333326212DA6F40A4437B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uzYogf_jYlMUAGCLYyi7Et-hYIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.mft
Manifest number:          0FC6
Signing time:             Fri 17 Apr 2026 01:00:53 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:53 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:53 +0000
Files and hashes:         1: uzYogf_jYlMUAGCLYyi7Et-hYIE.crl (hash: xkn5Oh5o45hwZ8+JN64mgyKn/UehY4rzfdOn5s9RQsA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uzYogf_jYlMUAGCLYyi7Et-hYIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:7f:75:e5:d3:33:32:62:12:da:6f:40:a4:43:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb362881ffe362531400608b6328bb12dfa16081
        Validity
            Not Before: Apr 17 01:00:53 2026 GMT
            Not After : Apr 18 01:00:53 2026 GMT
        Subject: CN=b0d238be22cb01c590e77d8b6ce2349412242151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d6:0c:0a:60:39:14:81:6f:c3:04:65:0f:38:
                    b7:7b:79:e1:a8:56:27:28:4c:7c:51:a5:9b:58:ca:
                    74:c0:ab:54:66:15:27:80:fb:5d:3f:fe:38:33:ae:
                    3a:bc:07:e2:aa:36:e2:a4:ef:fa:ea:af:88:50:4f:
                    21:c7:2c:18:2a:50:f9:ea:c7:1d:ec:84:53:d5:29:
                    63:dd:e3:4b:26:ad:32:f1:33:dc:aa:6c:11:e6:5e:
                    e2:76:0a:16:81:9d:63:28:34:fd:6c:38:e4:41:0f:
                    39:0c:a5:f1:c5:1f:2e:ce:48:45:9f:82:9a:ad:0c:
                    30:46:7d:db:50:11:5e:71:0f:18:5a:aa:af:42:97:
                    b4:be:c9:37:0b:7b:8c:fa:b7:ea:79:c9:df:09:0e:
                    5e:b8:f3:b2:65:13:53:5a:f6:ba:32:74:4d:1a:72:
                    49:67:fe:d9:ae:14:ea:f9:64:9a:67:76:4b:11:10:
                    0b:ce:e5:37:b8:1b:ba:ea:75:16:fe:8d:7f:34:78:
                    4d:3b:48:80:ec:b3:0c:21:83:f0:6d:a5:dc:34:0c:
                    92:50:12:40:71:7e:8b:cd:83:23:c8:d6:44:10:72:
                    21:20:d8:63:4b:3e:f8:e2:35:ad:08:41:6c:af:58:
                    9a:27:cb:fb:08:a6:97:6d:7a:cc:c3:77:b7:6d:8c:
                    b7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D2:38:BE:22:CB:01:C5:90:E7:7D:8B:6C:E2:34:94:12:24:21:51
            X509v3 Authority Key Identifier:
                keyid:BB:36:28:81:FF:E3:62:53:14:00:60:8B:63:28:BB:12:DF:A1:60:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uzYogf_jYlMUAGCLYyi7Et-hYIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d4683e-15bf-428b-89b3-6d87d465b9e1/1/uzYogf_jYlMUAGCLYyi7Et-hYIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:b0:d0:12:af:20:1e:21:35:8f:28:57:6f:bb:a1:90:0f:0e:
         e3:f1:1b:51:3d:b5:c0:92:5b:2b:4b:f9:51:06:26:1b:6e:db:
         b1:7f:d3:9e:e2:e8:26:77:51:fd:64:ef:41:ea:c3:7c:dd:5b:
         6a:e4:12:fb:93:1c:12:09:64:b0:77:0e:80:b7:af:fd:c7:91:
         aa:17:65:86:5c:c8:28:76:14:e5:7a:9a:0a:0d:cd:ef:6e:dc:
         cb:67:dc:1a:3a:59:76:95:ad:0b:09:2c:46:db:d7:52:62:4c:
         1d:89:66:1c:01:33:42:1b:cd:2b:b4:6f:90:66:04:23:c0:cd:
         b7:ba:b4:24:3a:f9:e0:b2:24:4b:cb:43:0c:1e:fc:a1:2b:d8:
         62:fd:04:54:39:da:52:62:83:92:8b:cb:ca:23:49:05:0c:11:
         36:a3:4c:01:0b:fb:7e:ef:d1:f8:6c:95:b1:bb:d0:ae:6f:a3:
         7a:4a:f3:d9:d4:3e:c0:d3:21:bc:24:fb:a3:b2:ea:68:06:e8:
         f5:af:e6:d2:ec:8d:2c:b3:f6:f0:12:8f:5a:59:e2:01:71:74:
         72:b7:b5:ff:c0:9f:65:ce:d6:ba:8c:2f:69:2e:14:a2:4e:25:
         40:c1:bc:40:e6:ed:56:f8:94:d3:77:a1:dd:22:5a:3d:d2:af:
         82:46:50:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:02:25 2026 by rpki-client