Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft
File:                     UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft (raw, json)
Hash identifier:          FAmu6CZ40XjZF5qLRLTv6VCwM+yNlH1nJWNXbHETQCU=
Subject key identifier:   1F:4C:D4:CE:76:FC:27:FB:8E:BE:60:B6:F1:B9:F7:50:1B:97:5C:68
Authority key identifier: 53:08:41:E8:2A:A4:6D:99:59:FC:78:11:B2:57:95:C5:6C:D5:06:08
Certificate issuer:       /CN=530841e82aa46d9959fc7811b25795c56cd50608
Certificate serial:       019CAE6C52BB78799A276981C3DBE81E75A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft
Manifest number:          182B
Signing time:             Mon 02 Mar 2026 12:01:00 +0000
Manifest this update:     Mon 02 Mar 2026 12:01:00 +0000
Manifest next update:     Tue 03 Mar 2026 12:01:00 +0000
Files and hashes:         1: UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl (hash: BG6uf+O8hB6rA0R0AGzOW/ETZTEA/C0X/LErqQtsL4k=)
                          2: V-wJc1_T9ZdDaXQ8Bjgp6ZwH7Ko.roa (hash: 5Q51/s2uhZseLvK62BKwJY/vcbWTvSMuqDjEqNx+KWI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:6c:52:bb:78:79:9a:27:69:81:c3:db:e8:1e:75:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530841e82aa46d9959fc7811b25795c56cd50608
        Validity
            Not Before: Mar  2 12:01:00 2026 GMT
            Not After : Mar  3 12:01:00 2026 GMT
        Subject: CN=1f4cd4ce76fc27fb8ebe60b6f1b9f7501b975c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c6:e9:3e:93:c8:20:e1:7b:22:78:45:5b:75:
                    83:61:84:04:b1:c0:98:f4:28:4a:be:b0:d6:ff:01:
                    7c:ff:e9:f8:f7:87:36:b6:7a:32:5f:e7:cf:12:8a:
                    49:68:42:43:ab:03:54:92:63:a3:95:93:91:33:79:
                    a1:44:ee:48:7b:0a:b0:3e:5a:f4:57:06:d8:dd:7f:
                    85:ad:d2:d8:55:1e:aa:0b:07:ae:23:c2:c6:dd:21:
                    f9:1e:0b:7b:df:74:9c:03:46:e1:f0:0a:1a:39:be:
                    5e:5f:2f:e3:ad:a3:24:9f:fb:7d:04:7a:d2:fc:db:
                    e0:02:de:ef:6e:2a:f4:dd:70:05:45:ee:e0:50:95:
                    08:0e:d7:14:db:fb:c8:7d:9f:8d:c1:d0:02:b4:eb:
                    9b:a4:c8:3c:ac:77:1a:04:17:4f:60:43:bb:31:aa:
                    83:8b:5d:42:c0:40:12:25:31:2a:8b:42:4d:60:f5:
                    8f:2c:62:74:05:09:f1:1b:b1:af:57:23:8e:78:76:
                    d0:f4:ae:17:ab:45:4f:46:f8:c9:96:4d:a1:05:a6:
                    2e:d6:8a:52:9c:5e:03:72:d1:1a:03:91:0a:58:b7:
                    d8:52:50:20:ad:e6:f6:6a:ed:6f:6c:44:52:d2:44:
                    38:19:ec:59:c6:25:a4:98:79:73:bc:b9:70:66:4c:
                    25:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4C:D4:CE:76:FC:27:FB:8E:BE:60:B6:F1:B9:F7:50:1B:97:5C:68
            X509v3 Authority Key Identifier:
                keyid:53:08:41:E8:2A:A4:6D:99:59:FC:78:11:B2:57:95:C5:6C:D5:06:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:1d:85:31:43:e5:77:1c:6a:7c:f1:41:fb:97:ee:db:5b:a8:
         33:25:b9:38:67:fb:19:02:c3:d1:67:a9:b5:e6:3f:21:60:c1:
         77:cd:ec:6d:4c:98:d1:bd:30:83:cb:ce:c6:6b:fa:c6:e6:53:
         e0:76:e4:76:ff:f2:9d:74:46:2d:87:96:16:10:e0:9f:6b:47:
         4b:7a:64:44:83:40:b4:55:a2:ef:42:58:94:09:47:93:52:e1:
         13:67:e0:d1:af:a0:39:8d:8a:67:ed:8d:45:6d:ba:08:36:f4:
         10:14:39:73:2e:f5:30:7c:76:3d:83:30:c5:5b:4d:9d:1e:99:
         e6:48:2c:a1:d6:36:c8:b6:49:af:fa:23:90:33:88:88:46:e1:
         be:32:08:f8:9e:07:19:14:24:5f:11:2d:a3:6c:37:1c:c5:fa:
         9a:0d:e6:04:c2:96:e8:30:5e:15:9b:98:7c:be:95:3f:68:4f:
         b1:eb:eb:2c:a8:40:e4:08:12:c2:b6:26:64:75:d2:de:0d:f4:
         54:8a:6e:c0:6e:a7:54:0c:a5:47:de:ff:d3:51:ab:4a:a9:0e:
         91:1f:a8:a8:2a:e3:33:af:9a:fb:ea:87:f9:49:bf:c5:45:d0:
         e6:8c:ac:74:19:0e:ba:dd:df:02:1c:ac:74:ea:c3:4a:ca:76:
         bf:6b:0b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:55:47 2026 by rpki-client