Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft
File:                     M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft (raw, json)
Hash identifier:          r9NYQ1tF2WK5/sRwvQrtyUR0pMepLp73mg5kOVSI//c=
Subject key identifier:   78:EF:2E:DD:03:F0:C2:7C:9F:5F:33:D9:65:7A:61:0D:34:7D:9F:82
Authority key identifier: 33:F5:0A:8D:E9:71:F8:54:7F:5B:56:C9:7C:36:C2:87:EF:54:BD:B8
Certificate issuer:       /CN=33f50a8de971f8547f5b56c97c36c287ef54bdb8
Certificate serial:       019CAB6B193DCA2742AFB25B209B300F3A5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft
Manifest number:          15D3
Signing time:             Sun 01 Mar 2026 22:00:48 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:48 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:48 +0000
Files and hashes:         1: M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl (hash: DVrwyiUI0PjPHZYB4Gc/jJt1CsBdtj/+TVEIDgrxBzc=)
                          2: Zy79mWZxVkZBlZ2rnp-zcouMF8Y.roa (hash: 3dKfDLWPx4SPhtrGmyl80Hv9zqYxVlUTJ6doGiqefpg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:19:3d:ca:27:42:af:b2:5b:20:9b:30:0f:3a:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33f50a8de971f8547f5b56c97c36c287ef54bdb8
        Validity
            Not Before: Mar  1 22:00:48 2026 GMT
            Not After : Mar  2 22:00:48 2026 GMT
        Subject: CN=78ef2edd03f0c27c9f5f33d9657a610d347d9f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7d:3d:c7:19:89:67:ed:b8:30:d0:3d:a9:6d:
                    5d:eb:b9:ca:bb:7e:e3:9a:d1:2b:69:00:e7:90:56:
                    40:bc:89:b6:a0:92:a0:15:3d:66:9f:97:52:e5:8d:
                    56:54:98:03:9a:58:20:f1:ff:85:9f:0f:4c:97:6a:
                    90:a8:4d:35:58:98:65:1a:25:21:0f:61:3e:a6:6f:
                    25:50:d5:7f:a3:97:c6:28:7b:d5:3d:fc:8e:04:48:
                    51:1b:c1:7b:72:5c:40:58:ca:e5:84:14:08:54:dd:
                    79:ec:d4:52:26:e4:ab:ee:7c:bc:ac:3a:7e:22:e2:
                    d7:90:0a:3b:9c:86:34:92:ba:fb:14:97:d0:50:eb:
                    96:f0:91:b5:66:9c:d5:a3:bc:1c:e0:ad:a7:91:a1:
                    6a:8e:8c:fc:d1:ae:88:3e:3a:16:0f:9a:e6:f2:1a:
                    5b:ce:56:67:db:51:af:d5:2c:c2:58:1c:24:a9:9f:
                    67:07:bf:f8:47:e5:ac:53:58:a7:ac:6f:21:95:3f:
                    34:70:b9:ae:85:73:d9:60:e6:60:c0:d1:35:eb:36:
                    11:9e:8c:15:4e:4b:42:20:28:bd:d3:b0:88:aa:27:
                    f2:91:c8:cd:d7:23:ee:53:d8:9e:04:de:3a:75:4e:
                    29:b1:54:b0:f3:c8:f8:cc:82:12:da:61:6f:db:43:
                    cf:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:EF:2E:DD:03:F0:C2:7C:9F:5F:33:D9:65:7A:61:0D:34:7D:9F:82
            X509v3 Authority Key Identifier:
                keyid:33:F5:0A:8D:E9:71:F8:54:7F:5B:56:C9:7C:36:C2:87:EF:54:BD:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:6d:f4:92:56:bd:29:49:6c:d1:41:a1:91:b6:7d:30:8e:58:
         e5:7b:48:8a:60:a3:07:c9:3a:83:76:b6:19:aa:da:04:78:73:
         e7:da:3f:55:ec:5b:54:76:b8:f5:0d:38:58:62:53:87:6f:8e:
         31:01:4f:77:7b:dc:70:9e:4c:c2:b2:00:5e:89:c4:8d:69:96:
         2a:a0:5c:33:c8:0c:18:14:22:f4:b6:b4:5c:92:ba:1c:c1:9f:
         c1:af:5f:54:cd:20:6d:fd:a5:c7:05:cc:9a:3b:79:ca:f3:cf:
         6f:f8:87:78:cf:87:3f:4e:af:f4:7d:c4:ca:d7:d8:fc:eb:fa:
         d8:42:1d:c0:6b:8a:01:d9:ed:91:da:de:c9:6f:ea:90:41:e5:
         20:7b:b3:94:be:25:27:c9:df:bf:e5:06:92:ee:e4:a2:62:36:
         81:ab:c8:42:19:9e:1e:e7:b0:2b:e2:a1:09:fc:45:8c:d1:6f:
         40:a8:0f:9c:1a:59:f4:e9:3f:d1:5b:5b:3c:d0:ef:be:b7:02:
         34:8f:59:bd:8f:c6:71:7b:db:fb:cc:08:63:15:98:25:03:42:
         f4:df:f9:d5:dd:63:73:60:82:80:62:1f:aa:a9:01:00:b3:58:
         e7:e4:89:18:c3:0e:72:9c:0d:0a:5c:10:f1:ef:cb:d4:f9:02:
         08:29:3c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:06 2026 by rpki-client