Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
File:                     ukBDlux3brxmOzeQT1O_by22l94.mft (raw, json)
Hash identifier:          S8Yd7TfrYxk+XHiYZ5J8MhMfNGRFPpuEZ9ZYJnPkqDw=
Subject key identifier:   35:2B:C0:B2:11:95:06:A9:21:22:95:F2:84:8E:9B:A6:61:F8:71:DD
Authority key identifier: BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE
Certificate issuer:       /CN=ba404396ec776ebc663b37904f53bf6f2db697de
Certificate serial:       019CAD59530012A431CC103CFBF0F32B676A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
Manifest number:          1758
Signing time:             Mon 02 Mar 2026 07:00:38 +0000
Manifest this update:     Mon 02 Mar 2026 07:00:38 +0000
Manifest next update:     Tue 03 Mar 2026 07:00:38 +0000
Files and hashes:         1: tS44mZmIyFMs473UjL5U854eiII.roa (hash: KoRk1peqIoiZFVFsXXW3hidWdEm/mtcGGSeO03SIlM8=)
                          2: ukBDlux3brxmOzeQT1O_by22l94.crl (hash: D0id0D8aW8iSVkm6w06G06qL5xF/1toSe3yQdJrwQrU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 07:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:59:53:00:12:a4:31:cc:10:3c:fb:f0:f3:2b:67:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba404396ec776ebc663b37904f53bf6f2db697de
        Validity
            Not Before: Mar  2 07:00:38 2026 GMT
            Not After : Mar  3 07:00:38 2026 GMT
        Subject: CN=352bc0b2119506a9212295f2848e9ba661f871dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:db:3c:59:09:8e:ab:4d:32:52:1e:f1:67:28:
                    bc:2c:13:a1:0a:46:95:cc:60:e4:c9:34:e7:c2:90:
                    38:0c:dc:10:b8:52:e3:04:5b:4d:8c:1e:ea:68:99:
                    0d:54:3d:47:77:f3:96:05:cb:ae:ef:d3:3e:ce:b2:
                    5f:0a:c1:cb:14:7b:61:03:a9:4b:ee:78:6e:14:a0:
                    29:14:ac:cc:5b:00:88:08:75:79:9c:4a:6a:52:9a:
                    a2:86:f7:e5:73:4f:19:ab:bd:fa:91:7c:f2:b7:20:
                    75:97:52:25:57:ad:f0:b1:92:40:42:b8:12:21:ac:
                    6d:72:aa:55:21:5d:d0:b7:ce:27:91:ce:b0:5a:84:
                    6c:57:57:86:61:28:4b:23:f6:c3:49:6f:1b:db:1b:
                    44:8b:84:d4:6a:26:e5:ca:6a:37:99:c3:77:6b:80:
                    84:f8:0d:6a:ac:4c:b8:90:b6:57:47:86:20:93:d3:
                    cb:1b:33:10:9a:69:b1:b0:02:f0:cd:92:f1:6e:6c:
                    96:fa:94:f1:2a:dc:7a:b4:71:e8:7a:52:6f:72:2f:
                    76:8c:00:4e:e4:7c:58:a7:0f:86:71:8e:f7:43:f8:
                    f5:a3:8f:e8:22:be:5b:83:73:31:c1:0f:1c:53:5f:
                    89:84:f1:48:b3:d7:f1:6a:81:64:ba:bf:30:43:a1:
                    2a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:2B:C0:B2:11:95:06:A9:21:22:95:F2:84:8E:9B:A6:61:F8:71:DD
            X509v3 Authority Key Identifier:
                keyid:BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:92:47:a2:bb:10:81:80:fe:1d:21:3c:dc:7a:8a:2c:cf:bb:
         8b:9e:b7:ec:99:1d:9c:4d:66:05:e7:66:f7:93:24:e7:b7:e3:
         cd:f0:92:46:21:e0:ec:fe:f0:16:a6:63:9a:d2:02:5e:a1:0d:
         89:74:4c:0b:7b:65:3a:95:b7:0d:97:a3:c7:32:87:01:7f:f8:
         0a:13:85:7b:1b:73:54:55:69:8a:02:5e:5b:eb:11:41:49:53:
         a1:9c:3b:01:a4:04:3a:09:ec:45:21:3d:73:df:56:14:40:40:
         1b:66:b3:d7:58:23:a8:e3:47:43:b0:16:bd:f9:93:80:0a:8e:
         8b:d4:9c:ff:71:38:61:7e:80:c4:11:f4:56:ca:de:b8:e3:86:
         36:d1:0a:40:ea:5a:b0:06:56:e7:6e:62:e5:62:ac:9a:f1:06:
         89:ef:5f:95:b0:c8:09:26:7e:b2:72:70:29:83:5f:2b:40:59:
         9e:81:75:df:26:bf:9a:34:65:14:ef:0c:e8:cf:a0:4a:c4:9c:
         86:9f:ee:da:09:82:f0:21:10:8f:92:25:71:c8:f8:bc:96:e5:
         88:69:e6:7c:ed:17:31:6e:fc:b1:f4:83:f5:b7:ad:be:2e:15:
         89:73:4f:98:f0:4d:68:7e:d1:45:02:a6:08:ec:73:80:9a:b1:
         35:3e:ec:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWVMAEqQxzBA8+/DzK2dqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNDA0Mzk2ZWM3NzZlYmM2NjNiMzc5MDRmNTNiZjZmMmRi
Njk3ZGUwHhcNMjYwMzAyMDcwMDM4WhcNMjYwMzAzMDcwMDM4WjAzMTEwLwYDVQQD
EygzNTJiYzBiMjExOTUwNmE5MjEyMjk1ZjI4NDhlOWJhNjYxZjg3MWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9s8WQmOq00yUh7xZyi8LBOhCkaV
zGDkyTTnwpA4DNwQuFLjBFtNjB7qaJkNVD1Hd/OWBcuu79M+zrJfCsHLFHthA6lL
7nhuFKApFKzMWwCICHV5nEpqUpqihvflc08Zq736kXzytyB1l1IlV63wsZJAQrgS
IaxtcqpVIV3Qt84nkc6wWoRsV1eGYShLI/bDSW8b2xtEi4TUaiblymo3mcN3a4CE
+A1qrEy4kLZXR4Ygk9PLGzMQmmmxsALwzZLxbmyW+pTxKtx6tHHoelJvci92jABO
5HxYpw+GcY73Q/j1o4/oIr5bg3MxwQ8cU1+JhPFIs9fxaoFkur8wQ6Eq9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUrwLIRlQapISKV8oSOm6Zh+HHdMB8GA1UdIwQY
MBaAFLpAQ5bsd268Zjs3kE9Tv28ttpfeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWtCRGx1eDNicnhtT3plUVQxT19ieTIybDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9mNDVmNjAtZjRlZS00MmFkLWI2YWIt
NzM1YTM5OWYwMTAyLzEvdWtCRGx1eDNicnhtT3plUVQxT19ieTIybDk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9mNDVmNjAtZjRlZS00MmFkLWI2YWItNzM1YTM5OWYwMTAy
LzEvdWtCRGx1eDNicnhtT3plUVQxT19ieTIybDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ5JHorsQ
gYD+HSE83HqKLM+7i5637JkdnE1mBedm95Mk57fjzfCSRiHg7P7wFqZjmtICXqEN
iXRMC3tlOpW3DZejxzKHAX/4ChOFextzVFVpigJeW+sRQUlToZw7AaQEOgnsRSE9
c99WFEBAG2az11gjqONHQ7AWvfmTgAqOi9Sc/3E4YX6AxBH0VsreuOOGNtEKQOpa
sAZW525i5WKsmvEGie9flbDICSZ+snJwKYNfK0BZnoF13ya/mjRlFO8M6M+gSsSc
hp/u2gmC8CEQj5Ilccj4vJbliGnmfO0XMW78sfSD9betvi4ViXNPmPBNaH7RRQKm
COxzgJqxNT7sOg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:15:09 2026 by rpki-client