Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft
File:                     uO0-vNIVX5oXihA62rSP2osidaU.mft (raw, json)
Hash identifier:          Y88LiizWR1p/5Um2Tdl5pol6ByPUXHorfH/hjjcr2eE=
Subject key identifier:   6A:F4:B4:84:24:C0:50:89:A5:01:52:1E:7E:21:D5:69:48:6E:FA:4F
Authority key identifier: B8:ED:3E:BC:D2:15:5F:9A:17:8A:10:3A:DA:B4:8F:DA:8B:22:75:A5
Certificate issuer:       /CN=b8ed3ebcd2155f9a178a103adab48fda8b2275a5
Certificate serial:       019CACB56C068704D555291F20F17F02A6BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft
Manifest number:          13AE
Signing time:             Mon 02 Mar 2026 04:01:36 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:36 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:36 +0000
Files and hashes:         1: 1-fsHYTIUTFY0216Qbk8IXnoEcp8.roa (hash: bfgMgiAWnH7b52b8mMjuMw9kDEycqTEWeJ8kbQp2a6c=)
                          2: WIAk63chBCdGYiGDL4jJVIzgpHA.roa (hash: e3taT/GSCbu7IKCePzef39V4CQeoRg7zNm3KotlMe7A=)
                          3: Z4cd67t_oTbTTOY62m-SDIBMEfk.roa (hash: /PTXJtjmPJ7VKf+Ddpyha9KTCciauyGlpPXGyj6aw+Y=)
                          4: uO0-vNIVX5oXihA62rSP2osidaU.crl (hash: 2xMN6PxLgosKcLkPpBkjEZZFZhLq2myJ99Cf+e6DqHk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 04:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b5:6c:06:87:04:d5:55:29:1f:20:f1:7f:02:a6:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8ed3ebcd2155f9a178a103adab48fda8b2275a5
        Validity
            Not Before: Mar  2 04:01:36 2026 GMT
            Not After : Mar  3 04:01:36 2026 GMT
        Subject: CN=6af4b48424c05089a501521e7e21d569486efa4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b7:9a:be:08:e7:3a:b6:a0:31:bd:83:44:98:
                    96:42:58:0d:65:d5:18:63:c8:8b:59:15:ec:1b:1e:
                    5a:f9:72:bf:b2:18:91:b0:2c:38:54:52:7b:c5:9a:
                    4e:eb:45:4f:47:b8:73:07:ee:44:79:25:24:c0:55:
                    88:23:65:b8:1b:dd:42:2a:71:46:16:ee:55:a1:93:
                    7b:72:91:bc:ae:56:60:0d:e6:4c:c1:40:ea:2c:71:
                    f8:90:9f:8d:47:0e:66:9a:72:bf:f8:7c:1d:01:48:
                    e2:59:51:49:4f:54:c2:2b:91:93:f2:ed:7e:82:72:
                    59:4c:36:48:3a:1d:cb:49:63:fe:d0:6c:90:18:f8:
                    4a:26:b1:19:97:2e:fc:55:fd:d2:4b:2b:b8:a8:c9:
                    c4:cc:5b:52:3a:39:47:a1:91:11:a7:cf:9e:7a:af:
                    96:b0:13:70:b2:d5:55:a8:cc:7c:30:0b:25:f8:61:
                    64:d5:3d:90:d5:f3:68:ab:d1:df:53:68:f0:bc:61:
                    8d:c4:7c:74:ab:0c:79:15:ae:eb:f6:eb:73:65:10:
                    da:28:53:50:7a:36:84:31:9e:2c:7d:ee:f5:30:80:
                    90:5e:75:5d:1e:c6:26:05:8f:69:23:21:1f:30:99:
                    ef:50:0b:38:6f:a6:e0:42:0b:0f:b9:e4:e4:a3:a2:
                    d2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F4:B4:84:24:C0:50:89:A5:01:52:1E:7E:21:D5:69:48:6E:FA:4F
            X509v3 Authority Key Identifier:
                keyid:B8:ED:3E:BC:D2:15:5F:9A:17:8A:10:3A:DA:B4:8F:DA:8B:22:75:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:27:c3:ea:61:20:4a:36:56:62:45:34:2e:7e:16:a5:19:d2:
         c1:91:48:9b:7c:b4:c1:84:f6:06:07:26:e2:d7:7d:d8:04:ca:
         fc:16:55:a5:61:55:b1:72:dd:98:08:8e:22:de:10:d4:ae:cb:
         ea:fe:41:18:fb:00:2c:64:60:41:3a:62:b4:ac:b7:7f:18:8f:
         12:00:b9:4e:7b:f2:2f:13:2c:71:12:93:97:45:8e:4a:7d:bc:
         4a:9a:ce:34:95:77:1b:95:d2:16:00:f9:b1:77:fb:d9:27:48:
         ec:81:b4:5a:0e:23:f7:d6:b1:09:d6:75:4e:06:3f:24:5f:48:
         e9:0e:74:5b:51:09:02:27:93:54:ef:de:4c:0c:c1:38:50:77:
         4a:04:39:98:38:d7:65:63:67:31:f4:d2:b5:0a:c5:09:5a:d8:
         cc:af:6d:3a:d3:ab:72:a6:23:3d:e3:df:38:ca:2d:47:e8:63:
         2d:70:85:b9:43:e6:b3:0e:ee:15:8b:91:23:d1:74:fd:98:b8:
         9c:7c:f9:09:4d:5f:1c:e8:93:f5:33:c5:e5:6c:d1:1f:ff:c5:
         be:43:cb:35:9b:30:68:88:33:91:18:73:f9:2c:f4:a8:a6:a7:
         60:37:36:de:6d:bb:ad:04:95:d5:03:c3:85:cb:1d:ab:74:e4:
         43:cb:2b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:57 2026 by rpki-client