Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft
File:                     UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft (raw, json)
Hash identifier:          mDZmLihluPJpuoxUi0Ln0AdC4eJMCf57YcBNkgPkw3s=
Subject key identifier:   37:ED:4A:13:B0:C8:4F:91:EC:E8:8A:47:81:9A:27:06:7A:4D:D7:73
Authority key identifier: 51:3B:DF:EC:55:B0:48:B0:D2:F0:3B:43:BF:66:E3:E6:7E:86:55:3F
Certificate issuer:       /CN=513bdfec55b048b0d2f03b43bf66e3e67e86553f
Certificate serial:       019CAFECB589370ECD57B54CB3D3B941FDBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UTvf7FWwSLDS8DtDv2bj5n6GVT8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft
Manifest number:          15EB
Signing time:             Mon 02 Mar 2026 19:00:51 +0000
Manifest this update:     Mon 02 Mar 2026 19:00:51 +0000
Manifest next update:     Tue 03 Mar 2026 19:00:51 +0000
Files and hashes:         1: UTvf7FWwSLDS8DtDv2bj5n6GVT8.crl (hash: iHRCVuIuyBkkckW1rUw8wXWfNyh6oUIOvaZ4jkThC8s=)
                          2: xhHlMs8V-oVtGZTag2-dr0XM40o.roa (hash: 7w/XbPL00KDOhcqVYw/WDbhjmiBSuWyGqB7xgQc6Wmw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UTvf7FWwSLDS8DtDv2bj5n6GVT8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:ec:b5:89:37:0e:cd:57:b5:4c:b3:d3:b9:41:fd:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513bdfec55b048b0d2f03b43bf66e3e67e86553f
        Validity
            Not Before: Mar  2 19:00:51 2026 GMT
            Not After : Mar  3 19:00:51 2026 GMT
        Subject: CN=37ed4a13b0c84f91ece88a47819a27067a4dd773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5e:c3:cd:77:07:51:63:59:69:da:a2:ef:4f:
                    03:e1:d1:34:4c:55:26:0c:fa:e1:c3:b6:c6:ef:35:
                    75:41:4f:e8:7f:80:0c:11:ed:d6:9f:9f:c2:23:86:
                    22:fb:69:dc:06:b7:c0:5a:c1:6b:b1:24:d1:6f:27:
                    f7:5e:fa:a2:af:af:94:b0:90:65:7a:df:18:ec:46:
                    fb:eb:bb:4c:7a:fb:7e:ff:2d:50:50:a7:fd:e8:b3:
                    40:9e:c9:60:c6:ea:c1:8a:4d:5a:8a:e9:1c:11:36:
                    72:72:04:e8:b8:e6:4e:2c:b5:f5:91:0d:4c:f9:66:
                    29:d2:ab:b3:83:8d:8f:8d:74:51:ff:1a:dc:cd:6c:
                    dc:a1:a7:22:9e:b3:59:8d:a5:7b:fb:d3:a3:ea:0d:
                    f5:96:ef:92:09:eb:88:30:25:88:fe:16:b5:2a:36:
                    b4:d5:72:c0:18:08:33:b3:22:41:46:f8:cc:0e:f3:
                    3b:ce:d4:7d:eb:a0:b9:a0:82:be:f7:1c:42:bc:a1:
                    a3:f0:e4:37:b7:12:95:50:5f:7a:55:3e:c0:2d:62:
                    1f:1e:c8:14:4e:65:17:6b:58:47:40:38:54:a4:73:
                    29:e5:d2:ee:ed:35:c8:a3:30:10:0d:19:73:8e:96:
                    ee:cd:de:b0:ea:93:b9:51:f0:f3:42:45:6c:95:5a:
                    85:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:ED:4A:13:B0:C8:4F:91:EC:E8:8A:47:81:9A:27:06:7A:4D:D7:73
            X509v3 Authority Key Identifier:
                keyid:51:3B:DF:EC:55:B0:48:B0:D2:F0:3B:43:BF:66:E3:E6:7E:86:55:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTvf7FWwSLDS8DtDv2bj5n6GVT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cbe695-d2d9-4d6f-87e2-a1cce6f80ca3/1/UTvf7FWwSLDS8DtDv2bj5n6GVT8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:49:1f:70:e9:ed:8c:38:dd:71:4a:2c:7c:fb:ff:73:17:58:
         7c:b5:43:e2:07:37:b0:ea:ae:3a:a8:4e:1d:e6:0a:a3:33:5c:
         bd:29:e9:b4:a4:64:33:3c:23:f7:7c:4b:55:98:d7:c4:09:a5:
         ba:fc:2d:fb:1e:02:47:8f:e6:f0:98:b2:d8:e6:3f:9f:df:f8:
         27:da:b7:71:c7:b2:02:60:2c:be:80:8a:11:21:3d:dc:74:a2:
         c0:82:51:8e:c5:24:25:8a:28:70:90:63:42:d2:16:55:07:a2:
         59:76:c6:13:58:ce:a7:34:9b:c3:fe:24:15:e6:92:0a:7b:f4:
         8e:72:39:4e:7a:c9:40:0b:64:7e:eb:8d:38:d3:bc:fe:28:32:
         18:80:20:b5:46:2b:de:5f:3d:e4:80:ad:b0:d8:4f:bd:74:39:
         bc:86:ef:f9:5b:95:47:ec:a6:91:db:14:0a:cc:17:8f:10:7c:
         8e:c2:37:1b:46:bd:bb:18:f4:f3:00:69:83:08:85:64:a7:3e:
         2f:6b:a5:8a:2f:d5:7b:02:07:e1:c6:04:22:a5:f8:f9:79:8b:
         8c:36:2d:f0:2b:fb:28:cf:e9:04:66:ab:f9:14:66:62:a2:fa:
         14:cc:c5:27:80:be:b8:b6:f2:2b:73:90:cb:2b:1e:6d:d0:43:
         b5:ce:f6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:58:25 2026 by rpki-client