Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft
File:                     Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft (raw, json)
Hash identifier:          8CzWVgDOQScsOgIeLTl0QPnEp/3Chh0pj+cMke13cJs=
Subject key identifier:   BD:60:25:36:B4:B9:D2:4C:31:9A:16:38:2D:1E:DB:53:ED:3B:AB:5F
Authority key identifier: 52:EE:48:9F:36:DE:04:21:9C:D2:19:2E:04:A7:BD:B1:39:14:64:8F
Certificate issuer:       /CN=52ee489f36de04219cd2192e04a7bdb13914648f
Certificate serial:       019CAC7E51C18995EE42B8DA50C391B93DBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uu5InzbeBCGc0hkuBKe9sTkUZI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft
Manifest number:          1371
Signing time:             Mon 02 Mar 2026 03:01:25 +0000
Manifest this update:     Mon 02 Mar 2026 03:01:25 +0000
Manifest next update:     Tue 03 Mar 2026 03:01:25 +0000
Files and hashes:         1: DPFop1VRWflc2dwO-UaKsnysNA0.roa (hash: TxO2MJ8nHORjvCPU/MK/XDRpBmX4mMRcY4M/4fMMMyw=)
                          2: Uu5InzbeBCGc0hkuBKe9sTkUZI8.crl (hash: T30ZiC5dH3nw39xX3FRIAwhfrB+tcKteSo5Bl6KLH3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uu5InzbeBCGc0hkuBKe9sTkUZI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7e:51:c1:89:95:ee:42:b8:da:50:c3:91:b9:3d:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52ee489f36de04219cd2192e04a7bdb13914648f
        Validity
            Not Before: Mar  2 03:01:25 2026 GMT
            Not After : Mar  3 03:01:25 2026 GMT
        Subject: CN=bd602536b4b9d24c319a16382d1edb53ed3bab5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:75:38:f1:be:a8:7c:5e:2a:d5:fd:7e:96:b2:
                    c9:fa:c5:b3:b4:e7:7e:60:0e:3c:4f:f6:0f:69:20:
                    00:11:4c:25:6b:91:3b:0c:2c:09:3a:d2:17:69:f6:
                    a2:2b:88:3a:1c:69:91:7b:ba:93:b2:70:00:9f:a4:
                    6a:9b:b5:cb:88:b7:55:03:c7:9e:fb:94:48:8e:e0:
                    bb:b3:3b:83:0b:a2:78:2d:9b:5c:76:dc:d9:4d:96:
                    ea:fb:4b:f0:4c:12:8c:d9:00:cd:c9:c0:bc:42:03:
                    8f:0b:44:56:c8:27:af:82:4c:0e:02:1d:a0:3a:85:
                    3d:aa:d2:21:d3:72:22:3b:54:90:bb:de:46:11:c2:
                    98:dd:0c:ad:f6:85:01:c6:02:83:1d:4a:0b:78:5e:
                    c6:77:2c:7b:66:67:b6:9d:77:32:f3:dc:c7:1d:b2:
                    42:16:9a:c8:6c:5f:a5:de:ca:7e:2a:0d:a5:6f:a1:
                    11:82:40:4c:94:b7:c6:4b:73:13:ad:07:c8:26:84:
                    a8:df:6a:76:d6:34:4d:29:7f:9c:0f:da:85:18:c1:
                    d2:dd:fd:a9:10:79:e1:12:01:6a:f7:6f:48:fd:8c:
                    00:02:24:8d:87:8e:d3:92:06:d9:c5:f7:40:1c:3f:
                    bf:06:03:39:9b:42:98:62:20:c0:9c:2c:58:f4:fa:
                    e3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:60:25:36:B4:B9:D2:4C:31:9A:16:38:2D:1E:DB:53:ED:3B:AB:5F
            X509v3 Authority Key Identifier:
                keyid:52:EE:48:9F:36:DE:04:21:9C:D2:19:2E:04:A7:BD:B1:39:14:64:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uu5InzbeBCGc0hkuBKe9sTkUZI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:a6:3f:cc:f1:1e:91:3c:28:03:99:84:54:97:41:c4:5f:66:
         d9:65:04:f8:6a:b3:8e:70:17:08:e1:04:53:9e:18:e0:07:e7:
         49:91:4e:07:14:ab:cd:84:34:8f:44:7e:3f:95:5b:98:70:4d:
         19:71:9b:12:eb:a1:cb:d6:0a:1f:35:46:dd:5e:e7:91:fb:dc:
         00:1f:e3:cd:2f:b9:a8:63:4b:70:7d:08:d1:5c:5f:d6:e6:5f:
         29:90:1c:34:a6:c9:ca:9e:cb:1e:74:89:1c:e1:63:fc:48:a9:
         a6:a2:e7:18:a5:09:d5:0a:a0:f9:ec:fe:8a:6a:6d:21:39:54:
         b5:a6:04:81:41:77:d8:fe:9e:aa:38:ea:ef:c3:f7:62:5e:54:
         e1:0e:f9:46:65:c1:79:bb:26:9e:2c:33:1c:fa:f5:83:8e:1b:
         10:a7:b9:5f:33:c9:bc:1c:0f:47:1a:7e:d1:e6:02:3b:d4:29:
         c3:b7:fa:c1:4f:51:75:8f:52:25:ff:ca:18:7e:1f:99:e8:de:
         b4:4d:39:c8:8d:ed:52:c0:ec:49:9f:b9:9c:bc:f4:ec:64:d2:
         9c:11:fd:e6:39:2c:12:8e:76:fa:0f:8d:fc:53:ce:70:2a:ae:
         a3:7d:47:28:76:93:95:ef:a7:ce:66:cf:7c:b0:9b:c1:77:bf:
         19:88:be:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:15 2026 by rpki-client