Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.mft
File:                     uFK2pNRayK4a7VTG9ayO1v88Hdc.mft (raw, json)
Hash identifier:          x+PTFMANOc9eXHGJv63BwqXhPcPQ3gkPPaZovIsOwJk=
Subject key identifier:   9D:77:54:4B:4F:9F:53:FE:7A:D5:FB:C5:2F:FC:E4:C4:3D:4A:9D:99
Authority key identifier: B8:52:B6:A4:D4:5A:C8:AE:1A:ED:54:C6:F5:AC:8E:D6:FF:3C:1D:D7
Certificate issuer:       /CN=b852b6a4d45ac8ae1aed54c6f5ac8ed6ff3c1dd7
Certificate serial:       019CAB6B33D81A669ED0C50D4C4E5F9D033A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uFK2pNRayK4a7VTG9ayO1v88Hdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.mft
Manifest number:          0DDA
Signing time:             Sun 01 Mar 2026 22:00:55 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:55 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:55 +0000
Files and hashes:         1: uFK2pNRayK4a7VTG9ayO1v88Hdc.crl (hash: FAU3VStS/r8ND69LyeHk8UHVzoV+c9McWurTaOwKR2I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uFK2pNRayK4a7VTG9ayO1v88Hdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 22:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:33:d8:1a:66:9e:d0:c5:0d:4c:4e:5f:9d:03:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b852b6a4d45ac8ae1aed54c6f5ac8ed6ff3c1dd7
        Validity
            Not Before: Mar  1 22:00:55 2026 GMT
            Not After : Mar  2 22:00:55 2026 GMT
        Subject: CN=9d77544b4f9f53fe7ad5fbc52ffce4c43d4a9d99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2e:eb:4a:7f:d3:84:32:c2:84:18:6e:d3:b0:
                    0b:8e:26:65:3f:2c:02:97:3e:3e:ab:52:46:14:f5:
                    ca:70:a4:33:50:71:57:c2:f8:1a:f6:0f:39:5c:6b:
                    71:57:a5:22:3b:5d:de:a5:69:e3:6d:bc:5c:16:ef:
                    e7:f3:1a:60:22:34:a8:84:3f:e9:90:a3:88:60:ae:
                    bf:54:bb:6d:e8:f9:78:e4:db:9c:0c:01:ae:e4:ee:
                    cf:d1:10:bf:68:d5:76:ca:c1:29:70:36:0f:50:43:
                    18:91:fb:5e:54:7f:47:57:aa:95:98:6c:a4:1d:14:
                    1c:63:c6:6f:53:ed:fc:dc:a2:d3:d2:73:88:e7:3f:
                    ca:82:ac:34:cb:5b:5a:67:7b:6d:ea:1f:b8:78:e6:
                    44:60:3a:5b:f6:7d:2f:5e:a7:1b:f8:b3:cc:10:0f:
                    83:a6:87:52:3b:80:92:4c:3e:a9:f4:96:b4:e5:01:
                    5d:f0:03:44:54:8e:ed:c9:3d:99:41:73:c6:8e:ad:
                    30:ac:cb:1d:d1:0b:4d:a6:e9:f1:ba:d9:50:71:a8:
                    9b:cc:69:8c:6c:08:6a:ce:3f:5e:35:1b:b6:5e:9e:
                    59:e0:28:32:4a:14:ef:8a:59:d9:9c:c6:d7:11:0c:
                    f1:7d:b6:9c:99:33:bb:8c:03:52:a0:0b:aa:70:e5:
                    62:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:77:54:4B:4F:9F:53:FE:7A:D5:FB:C5:2F:FC:E4:C4:3D:4A:9D:99
            X509v3 Authority Key Identifier:
                keyid:B8:52:B6:A4:D4:5A:C8:AE:1A:ED:54:C6:F5:AC:8E:D6:FF:3C:1D:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFK2pNRayK4a7VTG9ayO1v88Hdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:c2:f8:2b:1b:00:ad:fb:1d:8b:81:47:0b:f5:78:a1:5a:17:
         e9:dd:4c:51:62:13:11:d9:6d:d3:cc:c8:4c:36:68:f8:a3:19:
         fa:9d:ac:a7:bf:7f:f6:f4:1e:1a:f7:18:86:d7:89:d4:a0:78:
         74:3a:ff:32:28:9c:ee:75:f5:ce:45:92:2d:ed:3b:dc:ec:94:
         e1:3d:38:33:55:d3:f9:f3:54:c5:d6:89:f5:5b:cf:93:71:fa:
         f2:be:12:45:4a:81:09:85:9a:ab:a8:b1:7b:5a:0d:07:11:cb:
         d0:0d:bf:69:a6:b3:a9:8f:c4:90:1f:38:6c:5c:8d:86:1d:44:
         da:0e:74:ae:6d:42:aa:a7:52:8e:cf:cd:80:f4:5d:0e:62:a3:
         e0:f0:55:f5:b5:b4:96:0d:0b:32:b7:70:20:be:b6:bb:ca:74:
         e2:25:6a:79:d0:71:10:c5:e3:50:de:b8:71:2b:49:c0:b7:76:
         ee:dc:1b:61:0e:ae:d3:a4:25:df:cd:40:80:e9:f4:ed:b3:b8:
         4e:f2:94:ce:e0:dd:20:55:27:5d:98:44:15:72:19:a4:d2:21:
         ad:07:a4:20:df:c5:d2:3e:18:9f:e7:cd:ce:54:87:50:ac:1c:
         f0:08:e4:be:f8:09:8a:a2:2a:ce:41:29:a8:ed:62:6f:cb:13:
         c2:33:ad:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrazPYGmae0MUNTE5fnQM6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NTJiNmE0ZDQ1YWM4YWUxYWVkNTRjNmY1YWM4ZWQ2ZmYz
YzFkZDcwHhcNMjYwMzAxMjIwMDU1WhcNMjYwMzAyMjIwMDU1WjAzMTEwLwYDVQQD
Eyg5ZDc3NTQ0YjRmOWY1M2ZlN2FkNWZiYzUyZmZjZTRjNDNkNGE5ZDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzC7rSn/ThDLChBhu07ALjiZlPywC
lz4+q1JGFPXKcKQzUHFXwvga9g85XGtxV6UiO13epWnjbbxcFu/n8xpgIjSohD/p
kKOIYK6/VLtt6Pl45NucDAGu5O7P0RC/aNV2ysEpcDYPUEMYkfteVH9HV6qVmGyk
HRQcY8ZvU+383KLT0nOI5z/Kgqw0y1taZ3tt6h+4eOZEYDpb9n0vXqcb+LPMEA+D
podSO4CSTD6p9Ja05QFd8ANEVI7tyT2ZQXPGjq0wrMsd0QtNpunxutlQcaibzGmM
bAhqzj9eNRu2Xp5Z4CgyShTvilnZnMbXEQzxfbacmTO7jANSoAuqcOViIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ13VEtPn1P+etX7xS/85MQ9Sp2ZMB8GA1UdIwQY
MBaAFLhStqTUWsiuGu1UxvWsjtb/PB3XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUZLMnBOUmF5SzRhN1ZURzlheU8xdjg4SGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9lZTQ3OWYtZGQ0ZS00OTJmLWI2YTYt
M2M0NmNkNTgwNzg5LzEvdUZLMnBOUmF5SzRhN1ZURzlheU8xdjg4SGRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9lZTQ3OWYtZGQ0ZS00OTJmLWI2YTYtM2M0NmNkNTgwNzg5
LzEvdUZLMnBOUmF5SzRhN1ZURzlheU8xdjg4SGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArcL4KxsA
rfsdi4FHC/V4oVoX6d1MUWITEdlt08zITDZo+KMZ+p2sp79/9vQeGvcYhteJ1KB4
dDr/Miic7nX1zkWSLe073OyU4T04M1XT+fNUxdaJ9VvPk3H68r4SRUqBCYWaq6ix
e1oNBxHL0A2/aaazqY/EkB84bFyNhh1E2g50rm1CqqdSjs/NgPRdDmKj4PBV9bW0
lg0LMrdwIL62u8p04iVqedBxEMXjUN64cStJwLd27twbYQ6u06Ql381AgOn07bO4
TvKUzuDdIFUnXZhEFXIZpNIhrQekIN/F0j4Yn+fNzlSHUKwc8AjkvvgJiqIqzkEp
qO1ib8sTwjOtyw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:40 2026 by rpki-client