Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
File:                     UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft (raw, json)
Hash identifier:          S+HX94apoAc5yqU8mzuoCAhmp4dmGXwD6G+Eq+FUSAw=
Subject key identifier:   26:88:D0:BA:1E:B0:7C:6A:11:88:DE:D8:30:69:64:23:25:D2:D1:65
Authority key identifier: 51:B2:CF:74:9A:F6:96:70:78:C0:4B:D0:C7:0B:51:41:F4:E5:A6:0A
Certificate issuer:       /CN=51b2cf749af6967078c04bd0c70b5141f4e5a60a
Certificate serial:       019CA9B35BD3C68F6D2A2811CA77F5EAEC5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
Manifest number:          1846
Signing time:             Sun 01 Mar 2026 14:00:29 +0000
Manifest this update:     Sun 01 Mar 2026 14:00:29 +0000
Manifest next update:     Mon 02 Mar 2026 14:00:29 +0000
Files and hashes:         1: 1C87-YoMU3E-DWxYQ0HoaaKkai4.roa (hash: D7kY1Dcux9TiG7PKR2Pb7es9yDu4CucVa5I7EWiBNZU=)
                          2: UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl (hash: f9DKnCW24aqNzwCkBZQNhf5qIkJ7UWrWDzfhwMtpeUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:b3:5b:d3:c6:8f:6d:2a:28:11:ca:77:f5:ea:ec:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b2cf749af6967078c04bd0c70b5141f4e5a60a
        Validity
            Not Before: Mar  1 14:00:29 2026 GMT
            Not After : Mar  2 14:00:29 2026 GMT
        Subject: CN=2688d0ba1eb07c6a1188ded83069642325d2d165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b8:c6:36:a3:a3:9a:3c:f3:9d:5a:dd:06:ee:
                    a6:6f:e3:03:d6:9d:ac:80:7d:8b:25:de:c8:a1:7e:
                    4e:08:39:be:d3:86:49:55:cf:11:97:04:4f:53:5f:
                    eb:43:01:0b:bd:c4:0c:c4:b9:cd:d1:4f:02:f7:bd:
                    a0:ca:85:54:9b:42:89:6d:2b:5e:9d:23:7b:9d:bd:
                    8a:e9:ad:be:40:60:b9:74:1b:e0:43:02:62:ea:53:
                    f7:fc:c5:e5:d4:0e:3a:9a:c0:ab:e8:ab:92:dd:da:
                    31:ba:d5:f8:ca:d6:67:b6:cb:d3:d8:82:c6:07:98:
                    e5:e0:8b:8a:7a:dc:9f:9e:07:e0:a4:a9:72:4c:ff:
                    4e:1c:10:48:3b:1f:fb:8c:94:6d:41:64:b7:94:84:
                    37:80:5e:7c:24:81:01:22:e6:94:0a:65:db:7f:c8:
                    51:ba:a0:ec:47:8b:26:76:6d:7a:b9:e9:5f:5d:e5:
                    f1:ab:8a:86:c6:67:dc:18:96:ca:09:bb:d0:2f:7e:
                    51:78:bc:79:9c:0e:e8:8d:db:ea:42:07:cf:2c:73:
                    3a:77:bb:7d:8f:06:24:5f:14:66:a9:78:90:e1:ea:
                    b7:67:f7:2f:2b:e0:ca:53:4f:06:9e:64:0c:36:11:
                    f2:c6:b8:90:22:c2:f4:d6:b9:a8:0e:6d:38:6e:44:
                    85:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:88:D0:BA:1E:B0:7C:6A:11:88:DE:D8:30:69:64:23:25:D2:D1:65
            X509v3 Authority Key Identifier:
                keyid:51:B2:CF:74:9A:F6:96:70:78:C0:4B:D0:C7:0B:51:41:F4:E5:A6:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:0c:a6:2b:bc:ea:18:52:47:19:38:3e:a0:20:19:11:e5:cc:
         6d:3f:4d:8f:2f:23:3c:ed:97:d1:78:c7:d7:6d:dc:6a:ae:0a:
         a3:3d:00:64:74:77:eb:55:80:a3:0e:52:47:6f:12:c6:e4:c1:
         2d:df:f7:63:5d:66:b7:23:a0:41:5d:af:3c:be:96:8b:0a:eb:
         c5:66:80:9e:09:2d:2a:60:3a:ab:82:f4:4e:dd:06:b6:e1:75:
         93:93:a5:0d:00:47:06:47:e8:9a:93:ec:bc:53:90:1e:b9:47:
         05:e7:7c:01:c0:5e:f7:53:aa:b1:0b:1d:60:9c:cc:e8:6e:59:
         38:8c:22:5c:b1:d8:5e:aa:89:d0:39:1f:0b:62:fa:f7:1c:fa:
         fc:51:4a:17:e8:58:34:ac:99:b4:f0:73:4b:c7:0b:e2:61:bb:
         57:b6:ad:10:47:eb:4b:21:55:5a:ea:21:b1:14:01:05:85:b7:
         99:af:e1:e9:4e:75:da:97:36:10:0d:1d:95:08:10:e0:e1:8e:
         57:50:d1:c8:c6:d0:04:f1:42:33:42:5a:97:f7:9c:45:eb:f4:
         3b:9f:da:0e:f6:92:6f:4b:cc:6a:cf:c6:dd:2c:b5:d8:af:31:
         8d:8a:ac:a4:42:f5:32:ba:af:a3:5f:8a:64:ae:d0:f4:06:32:
         bd:34:e0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:44:16 2026 by rpki-client