Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
File:                     UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft (raw, json)
Hash identifier:          YUYY0voh4hYYAx01Hqn+P1aCahFM/jrc597HLm2ir80=
Subject key identifier:   B8:50:71:9C:DA:94:06:5E:33:7D:CC:AB:D5:24:D7:E1:FA:BA:51:15
Authority key identifier: 50:10:39:75:6C:CF:31:F6:4A:88:34:43:E1:F1:73:28:34:D2:B8:B2
Certificate issuer:       /CN=501039756ccf31f64a883443e1f1732834d2b8b2
Certificate serial:       019CABD96B232B8DA1C4451E4CD276CAA82E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
Manifest number:          0BAA
Signing time:             Mon 02 Mar 2026 00:01:18 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:18 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:18 +0000
Files and hashes:         1: UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl (hash: ON0n4G+wsEVvBgcJe925vcxCRgqh7pSlKvtHZpz7INc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:6b:23:2b:8d:a1:c4:45:1e:4c:d2:76:ca:a8:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501039756ccf31f64a883443e1f1732834d2b8b2
        Validity
            Not Before: Mar  2 00:01:18 2026 GMT
            Not After : Mar  3 00:01:18 2026 GMT
        Subject: CN=b850719cda94065e337dccabd524d7e1faba5115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fd:24:43:51:05:a7:b8:24:c3:8a:b6:46:23:
                    6e:73:45:ed:54:99:dc:89:0a:a1:17:6f:7c:7a:2c:
                    a5:a9:93:13:af:d6:00:cf:af:3d:9e:f5:ce:f7:20:
                    10:0c:27:fa:07:92:75:e4:bd:8a:30:3b:f8:92:74:
                    55:c5:33:3f:06:a0:20:dc:1a:5e:e3:e8:22:64:d4:
                    47:49:51:cb:9b:3f:99:70:e8:d0:fb:08:c3:92:b1:
                    be:e8:f2:22:de:cc:fe:a3:ec:37:b3:f3:57:b3:83:
                    2e:d0:4a:4b:98:3a:76:bb:e3:15:cc:64:50:0f:71:
                    79:07:46:c0:b2:ed:fb:dc:2e:a8:f4:b7:60:f5:38:
                    2f:82:e9:de:83:65:9c:bf:f3:6e:40:7e:c1:e0:64:
                    95:10:7d:5c:46:7e:d9:75:b6:67:7d:e9:cc:38:f9:
                    59:cb:96:dd:8b:e4:a5:0d:db:3d:f8:51:cf:bb:45:
                    f7:5c:fc:f8:ab:e6:0e:b3:a8:b5:76:a3:14:b7:c0:
                    21:03:5f:d5:44:85:56:63:ac:6f:e2:1b:b9:84:38:
                    d4:bf:8e:be:02:77:90:e5:d4:dc:36:48:66:2f:ac:
                    74:6b:27:af:a0:92:f2:e1:e6:20:f1:53:82:d4:31:
                    35:f6:ea:0a:e1:b9:3e:7e:4f:18:7b:b5:89:61:e2:
                    6a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:50:71:9C:DA:94:06:5E:33:7D:CC:AB:D5:24:D7:E1:FA:BA:51:15
            X509v3 Authority Key Identifier:
                keyid:50:10:39:75:6C:CF:31:F6:4A:88:34:43:E1:F1:73:28:34:D2:B8:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:1f:43:1b:e3:68:42:96:5b:7f:8d:2c:52:53:3c:f9:b9:05:
         4a:dc:1b:2a:ba:e4:c6:f6:e2:ba:e2:6f:59:94:54:5a:9f:b2:
         7b:48:87:3d:22:7e:44:e4:91:5d:20:24:08:a9:c9:8f:c0:e5:
         03:a7:99:c0:c5:af:f6:32:48:2c:29:99:74:ec:2f:7d:76:1d:
         07:f9:95:18:0f:f5:b6:bd:7f:93:da:6f:60:dd:f9:f8:16:aa:
         90:93:69:51:f7:d0:6d:10:95:a6:d0:0f:de:a7:49:7f:0f:35:
         ba:00:0a:54:db:4c:8b:86:0e:8e:fc:cd:02:0c:b3:7d:94:fb:
         93:6b:de:43:0f:7f:bd:e3:48:fd:f9:fb:3c:c5:4c:fb:b0:5e:
         c5:b8:da:60:c3:9b:f4:11:5f:62:eb:ea:ff:3a:3d:e3:89:a8:
         31:df:33:47:7e:4c:44:b2:05:b9:ae:5d:30:8f:73:3f:bd:2d:
         f8:69:88:2a:cf:ef:3e:0e:c7:1f:8d:58:cb:53:a2:21:01:c8:
         3b:1c:e0:71:50:2f:e9:54:1c:8b:b6:90:b5:f6:0d:42:35:7d:
         70:5c:67:40:50:4f:5d:10:cd:3e:d8:ff:0d:f4:94:f9:02:d4:
         1e:5f:d4:94:9e:a0:15:61:50:1e:3f:75:5c:85:42:17:9f:f7:
         aa:5e:7e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:14 2026 by rpki-client