Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft
File:                     UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft (raw, json)
Hash identifier:          EAc17GGr98NwECtPI4FE0BJ+CR/u6EzI95KgleFGFO8=
Subject key identifier:   F6:5C:79:DD:18:F0:EA:84:B9:80:47:F6:9E:C6:EF:01:10:B6:46:1A
Authority key identifier: 51:88:C9:4B:8B:ED:EE:CC:6A:59:BD:C4:4C:6F:D5:15:7A:BE:4B:67
Certificate issuer:       /CN=5188c94b8bedeecc6a59bdc44c6fd5157abe4b67
Certificate serial:       019CAA5830C3ED6BFBE4519FD382DB574B31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft
Manifest number:          09D4
Signing time:             Sun 01 Mar 2026 17:00:32 +0000
Manifest this update:     Sun 01 Mar 2026 17:00:32 +0000
Manifest next update:     Mon 02 Mar 2026 17:00:32 +0000
Files and hashes:         1: UYjJS4vt7sxqWb3ETG_VFXq-S2c.crl (hash: ymzCdGXeUwgT0JWQylijTSUI5Wq5hGMJViQ2uS1YZf4=)
                          2: uK_wPVcqKP0jy9R-MgLC2-CoJWI.roa (hash: wUN+v284pRIdx3/1i/zxf53vr2oGEP7/MlFstJJg9go=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:30:c3:ed:6b:fb:e4:51:9f:d3:82:db:57:4b:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5188c94b8bedeecc6a59bdc44c6fd5157abe4b67
        Validity
            Not Before: Mar  1 17:00:32 2026 GMT
            Not After : Mar  2 17:00:32 2026 GMT
        Subject: CN=f65c79dd18f0ea84b98047f69ec6ef0110b6461a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d3:c0:63:f8:ad:db:71:7c:10:12:ff:eb:7e:
                    b4:a1:8d:9e:0e:2b:9a:37:f2:44:2e:70:14:9a:20:
                    e1:ff:ed:2e:0e:7d:09:05:bc:d7:86:71:d6:01:4e:
                    df:e8:2d:96:4b:d3:12:3d:e0:6b:90:86:a8:ba:9b:
                    33:06:e8:c0:aa:44:e4:3b:9e:8f:94:36:ff:5b:92:
                    96:76:fe:e0:98:2b:20:43:1b:3c:75:d5:6a:52:2b:
                    e9:f6:32:93:a2:8e:41:ca:df:f7:b5:84:7f:3e:64:
                    5c:86:e6:57:af:b7:16:76:b0:0f:8e:a1:e1:79:90:
                    41:95:2e:7f:ff:08:92:93:77:f2:61:bc:bd:01:dc:
                    df:f8:db:7b:9a:31:8a:1b:a6:29:4c:87:a7:53:ec:
                    ee:ff:23:fc:92:76:81:dc:24:5c:e1:05:54:e0:c8:
                    3d:7e:d2:f1:d5:a6:5d:15:d9:7f:d8:74:f7:5f:03:
                    d5:a6:5e:e5:4c:38:38:b6:10:1c:9c:10:dd:3b:42:
                    e6:81:8f:2f:b0:8b:88:73:a1:bb:47:eb:87:08:e8:
                    05:4b:75:88:f9:61:6e:4d:bd:46:6c:be:c3:b8:36:
                    24:4d:62:63:4b:dc:c7:ad:34:47:11:34:4a:02:ee:
                    65:90:8f:58:ae:05:c7:31:d7:0d:b8:5d:33:75:98:
                    93:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:5C:79:DD:18:F0:EA:84:B9:80:47:F6:9E:C6:EF:01:10:B6:46:1A
            X509v3 Authority Key Identifier:
                keyid:51:88:C9:4B:8B:ED:EE:CC:6A:59:BD:C4:4C:6F:D5:15:7A:BE:4B:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:32:3e:b6:85:b2:7c:95:13:68:f3:eb:4f:04:ed:5a:f7:8d:
         77:7a:c4:6b:1d:b1:1e:e3:89:65:38:75:c0:87:df:91:73:1e:
         4d:5b:bf:d4:e7:41:05:ad:80:3f:33:d3:df:15:3d:87:ea:49:
         37:42:ba:ed:f1:9d:83:e6:4b:b3:c3:64:02:b2:c1:fe:e5:6c:
         5c:7b:28:4a:14:76:84:a0:fd:2c:b0:34:69:3a:19:4e:0c:10:
         a4:79:14:a0:09:29:11:40:58:cb:54:28:1b:d0:71:9f:93:15:
         30:dd:ac:e9:18:fa:81:e9:99:b4:16:b1:bc:10:47:31:d0:1d:
         c0:dd:45:07:ed:45:3a:31:b6:69:63:2d:99:da:47:3c:42:51:
         4e:41:c5:51:2a:12:b6:5c:21:5d:e1:a0:e7:22:50:52:26:ca:
         1f:8b:d2:24:8e:46:fc:a2:b0:70:47:61:e4:b1:ff:89:47:f0:
         3d:81:e1:37:08:58:57:25:4b:7f:0a:89:5e:21:b4:70:9a:2c:
         87:25:77:e6:3c:31:01:4d:c4:7a:38:16:43:4f:b3:88:81:dd:
         71:29:c6:37:52:06:e5:b5:1f:fd:2f:1c:36:57:0d:62:df:d6:
         3e:c3:6f:be:36:7f:a8:00:de:03:74:da:c0:57:e3:a2:7f:03:
         7b:bf:43:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWDDD7Wv75FGf04LbV0sxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxODhjOTRiOGJlZGVlY2M2YTU5YmRjNDRjNmZkNTE1N2Fi
ZTRiNjcwHhcNMjYwMzAxMTcwMDMyWhcNMjYwMzAyMTcwMDMyWjAzMTEwLwYDVQQD
EyhmNjVjNzlkZDE4ZjBlYTg0Yjk4MDQ3ZjY5ZWM2ZWYwMTEwYjY0NjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tPAY/it23F8EBL/6360oY2eDiua
N/JELnAUmiDh/+0uDn0JBbzXhnHWAU7f6C2WS9MSPeBrkIaoupszBujAqkTkO56P
lDb/W5KWdv7gmCsgQxs8ddVqUivp9jKToo5Byt/3tYR/PmRchuZXr7cWdrAPjqHh
eZBBlS5//wiSk3fyYby9Adzf+Nt7mjGKG6YpTIenU+zu/yP8knaB3CRc4QVU4Mg9
ftLx1aZdFdl/2HT3XwPVpl7lTDg4thAcnBDdO0LmgY8vsIuIc6G7R+uHCOgFS3WI
+WFuTb1GbL7DuDYkTWJjS9zHrTRHETRKAu5lkI9YrgXHMdcNuF0zdZiTvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZced0Y8OqEuYBH9p7G7wEQtkYaMB8GA1UdIwQY
MBaAFFGIyUuL7e7Malm9xExv1RV6vktnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVlqSlM0dnQ3c3hxV2IzRVRHX1ZGWHEtUzJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9mYmQxNDEtMTY0NS00MmRlLTlhN2It
MGZlNTVjYTEwZjhmLzEvVVlqSlM0dnQ3c3hxV2IzRVRHX1ZGWHEtUzJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9mYmQxNDEtMTY0NS00MmRlLTlhN2ItMGZlNTVjYTEwZjhm
LzEvVVlqSlM0dnQ3c3hxV2IzRVRHX1ZGWHEtUzJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANjI+toWy
fJUTaPPrTwTtWveNd3rEax2xHuOJZTh1wIffkXMeTVu/1OdBBa2APzPT3xU9h+pJ
N0K67fGdg+ZLs8NkArLB/uVsXHsoShR2hKD9LLA0aToZTgwQpHkUoAkpEUBYy1Qo
G9Bxn5MVMN2s6Rj6gemZtBaxvBBHMdAdwN1FB+1FOjG2aWMtmdpHPEJRTkHFUSoS
tlwhXeGg5yJQUibKH4vSJI5G/KKwcEdh5LH/iUfwPYHhNwhYVyVLfwqJXiG0cJos
hyV35jwxAU3EejgWQ0+ziIHdcSnGN1IG5bUf/S8cNlcNYt/WPsNvvjZ/qADeA3Ta
wFfjon8De79D6g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:55:51 2026 by rpki-client