Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft
File:                     UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft (raw, json)
Hash identifier:          Ab+QjyVWGq6yHW2v8WzfkE1IEOMR9k79sX0VqRL0wDc=
Subject key identifier:   75:E9:F6:9F:0F:40:B4:D3:33:F5:49:FE:62:5F:8F:FD:22:BE:A7:32
Authority key identifier: 50:09:7F:B5:8C:6F:6A:44:1D:8E:D7:50:00:77:3B:4D:09:85:67:46
Certificate issuer:       /CN=50097fb58c6f6a441d8ed75000773b4d09856746
Certificate serial:       019CAA8F86A08E1CE3C03CFF666D3797A194
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft
Manifest number:          0C67
Signing time:             Sun 01 Mar 2026 18:00:58 +0000
Manifest this update:     Sun 01 Mar 2026 18:00:58 +0000
Manifest next update:     Mon 02 Mar 2026 18:00:58 +0000
Files and hashes:         1: UAl_tYxvakQdjtdQAHc7TQmFZ0Y.crl (hash: NiiG2HzqY7kJmQu/fTy/t5k1hDlm8XMb5/5RY3S26kA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:8f:86:a0:8e:1c:e3:c0:3c:ff:66:6d:37:97:a1:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50097fb58c6f6a441d8ed75000773b4d09856746
        Validity
            Not Before: Mar  1 18:00:58 2026 GMT
            Not After : Mar  2 18:00:58 2026 GMT
        Subject: CN=75e9f69f0f40b4d333f549fe625f8ffd22bea732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:de:63:e9:36:3b:a4:a6:ae:55:31:2a:87:51:
                    a2:ee:b5:e7:c7:cb:23:13:10:ef:6c:29:1e:6f:cd:
                    60:c8:19:6e:ae:87:4c:fd:6e:5d:d5:d2:63:bd:07:
                    d8:a1:16:1e:c0:11:59:0f:d1:25:cd:30:ca:08:3f:
                    f3:28:65:00:05:a5:d1:81:3b:ba:86:6c:2a:f5:27:
                    32:e7:30:c0:cc:59:7c:e0:52:33:45:91:e4:46:dd:
                    06:ea:61:11:4c:e8:1f:30:86:7a:46:d6:9c:8e:0a:
                    62:4f:29:36:5b:8f:6f:78:5d:05:ef:f6:e8:ab:3b:
                    24:2f:ca:b5:0c:c0:23:f3:b5:65:71:b9:d5:ff:14:
                    b6:d2:b2:15:50:45:15:7c:0d:87:68:01:f0:7a:98:
                    47:04:34:99:51:30:9c:10:3f:58:a3:00:51:8b:95:
                    f9:9a:e5:09:5b:4f:37:17:b8:f6:3d:48:33:0b:0b:
                    f5:9e:16:96:22:43:69:26:27:d2:e5:03:fc:73:42:
                    75:e4:0e:5e:78:35:1c:14:f9:fe:bd:4b:cb:58:db:
                    b3:d5:a7:19:46:26:d7:0f:c4:5b:3b:d2:5d:36:85:
                    6d:0d:ce:a6:91:00:3e:ff:91:ee:06:bb:26:fb:3a:
                    7b:e5:7e:fd:48:f9:0a:1c:3f:a4:c3:06:0e:2d:cc:
                    d0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E9:F6:9F:0F:40:B4:D3:33:F5:49:FE:62:5F:8F:FD:22:BE:A7:32
            X509v3 Authority Key Identifier:
                keyid:50:09:7F:B5:8C:6F:6A:44:1D:8E:D7:50:00:77:3B:4D:09:85:67:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:ea:b2:68:23:a8:48:36:f3:35:d2:7d:9d:a4:00:da:1f:1e:
         94:68:d8:7b:25:2b:2d:e4:25:cd:f5:df:37:02:58:b2:db:63:
         f9:75:94:52:57:a6:03:ee:06:80:ea:3d:5a:e8:4f:03:5e:79:
         59:26:ae:5f:f8:cb:ec:04:ac:07:e0:cc:97:e9:dd:22:16:3f:
         92:91:bf:76:11:52:97:58:a1:bf:09:ec:63:c4:4e:2f:2e:97:
         10:24:9d:3a:c9:7f:cb:a6:d2:95:3b:be:a8:30:b0:dc:3e:1a:
         4d:54:c0:e4:a7:eb:66:2a:4c:2c:4c:98:88:f4:37:b8:e7:bc:
         a9:21:79:8c:c3:4e:fb:e6:61:99:04:8c:bf:eb:2d:fb:4f:8c:
         7e:05:47:c1:61:35:fb:07:8a:a8:77:8b:67:56:6f:b8:6c:2b:
         98:0d:04:f2:fb:0f:ef:73:24:b0:0f:2d:5f:fd:a2:3b:7b:89:
         4a:37:b3:f3:e4:1e:86:b7:18:20:30:93:25:14:9e:42:bf:d1:
         7e:9a:cf:01:64:4b:65:9a:07:76:e0:3d:fd:18:e9:99:d6:31:
         d9:81:ff:cd:83:7e:92:ad:30:ed:9c:5f:04:8a:f9:97:c5:58:
         87:92:96:e3:23:26:b5:d6:ea:e8:41:13:ed:3b:12:4e:65:b8:
         f0:be:1f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:55:31 2026 by rpki-client