Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
File:                     uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft (raw, json)
Hash identifier:          7nJ/FffJDdYh16+twx/Rtn7SmIDnqmTBv19ncoyOxGA=
Subject key identifier:   C5:B3:05:EB:25:5B:78:A1:3E:F6:DE:79:97:4D:4E:3C:06:79:47:E3
Authority key identifier: BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4
Certificate issuer:       /CN=ba8861e17ebed57950ff32c7b377fc430413dbe4
Certificate serial:       019CAA8F6D31588A302DDFAA0C7F7CAF89CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
Manifest number:          0F6E
Signing time:             Sun 01 Mar 2026 18:00:52 +0000
Manifest this update:     Sun 01 Mar 2026 18:00:52 +0000
Manifest next update:     Mon 02 Mar 2026 18:00:52 +0000
Files and hashes:         1: 3xkUgPDW1_nU5u-zQWPWFuXblOU.roa (hash: TwymWVxNW7YipwcwZomXLwsBqGn5JSf6tMGWjIIvIuA=)
                          2: biwapYjW-yR38S3KZARQ10moe30.roa (hash: 1QN2loKj68piSOW4bamGYfAlPoY1h07q4+Z8Ry6dkfo=)
                          3: isbgVHj3TmGYN0uwFkd2CdHyHMU.roa (hash: QwGaFwSh5hfuRjoHH0+UtDhSsDuuueUvGza6DS4Ifsg=)
                          4: uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl (hash: ppzJP22FczYZmhvnc0T0diWHIxMH2Da4XOd/DKDNmO8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:8f:6d:31:58:8a:30:2d:df:aa:0c:7f:7c:af:89:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba8861e17ebed57950ff32c7b377fc430413dbe4
        Validity
            Not Before: Mar  1 18:00:52 2026 GMT
            Not After : Mar  2 18:00:52 2026 GMT
        Subject: CN=c5b305eb255b78a13ef6de79974d4e3c067947e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:10:93:2b:d3:24:6d:f1:d4:52:a4:19:97:34:
                    5b:2f:78:39:67:29:a9:41:c0:72:f4:56:e4:d3:eb:
                    ad:94:42:15:cd:d4:87:ed:43:6c:0a:20:a7:0e:9b:
                    3e:da:1a:8e:28:d0:cc:f9:12:18:73:c5:8f:60:ce:
                    7e:ca:3d:89:19:28:8c:c0:7c:cb:30:58:4c:bb:b4:
                    84:2f:bf:f7:79:7f:d7:5f:4e:fc:5b:3f:8f:c2:f7:
                    b1:91:79:83:59:f1:d2:d5:d0:8f:bb:f2:a2:98:2b:
                    5e:b6:38:f7:8f:41:0d:f7:23:fb:f1:66:ea:f8:2d:
                    9d:9d:19:65:98:de:5e:a2:e0:1a:72:54:fb:f1:38:
                    6b:f5:8d:d7:5d:f2:3d:2b:55:d2:23:8b:b4:f6:07:
                    72:07:dd:b9:b6:ae:6b:e8:27:a8:ba:f4:49:38:29:
                    c6:f9:f1:0a:c4:c7:33:69:7e:da:b5:07:13:65:f0:
                    37:66:eb:6f:7a:28:a1:4a:bd:d5:7f:1e:0f:f7:9c:
                    e6:dd:15:bb:8b:f0:9a:0f:6f:d6:1c:f1:da:32:3c:
                    ed:ad:ff:a4:14:85:e7:b1:8f:2c:86:4b:bf:5a:17:
                    bf:cf:c7:2d:15:9a:c5:d8:bd:01:62:b1:97:e9:69:
                    ea:b8:96:04:fd:95:14:f3:56:1d:67:66:ca:be:8d:
                    36:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B3:05:EB:25:5B:78:A1:3E:F6:DE:79:97:4D:4E:3C:06:79:47:E3
            X509v3 Authority Key Identifier:
                keyid:BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:a5:1f:1e:8a:de:91:04:c4:59:c3:b0:84:63:aa:30:d0:e9:
         e2:a0:e0:db:ae:32:81:26:9a:b9:a0:c4:03:bd:78:d0:b1:f3:
         05:5b:f9:ac:fa:f2:59:ff:86:53:64:59:04:bb:7a:bf:60:fb:
         ff:b6:95:c1:72:17:25:79:c7:37:9a:1e:80:1c:ae:f8:5c:2b:
         c1:86:40:54:3d:88:f2:03:dc:71:60:99:cd:9a:f2:b1:90:dd:
         f0:6d:8d:d7:89:6d:80:98:42:d5:67:06:25:4b:f6:70:77:67:
         b8:4e:00:48:39:ea:32:50:3f:89:23:84:55:4a:5a:03:e5:09:
         9f:08:85:40:d9:3f:01:b2:01:be:e2:d8:a6:01:e1:71:25:5b:
         8c:15:31:84:ae:e9:b0:6c:ba:ce:db:ed:24:04:ba:7d:3d:a7:
         32:7e:58:13:19:6a:49:9f:16:81:5d:08:5f:25:09:41:db:ed:
         bf:0d:8a:4a:be:35:e4:cb:4a:0f:01:77:ca:ca:aa:98:5d:14:
         2e:38:ea:67:ae:fc:e4:05:62:97:65:2f:79:8c:67:c3:25:11:
         86:29:1f:a6:09:62:2c:88:6d:7d:8c:01:23:ab:97:ab:a4:7c:
         55:77:6d:5b:dd:14:86:70:78:3e:68:f5:21:1e:fd:5b:b1:64:
         48:5d:51:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:54 2026 by rpki-client