Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
File:                     UpIxske_9ltMY0GQfs1eq6f5ypI.mft (raw, json)
Hash identifier:          45jUjYZOedl8621iSMj4zozOwx1JM4eq7cYgX7Hjm+o=
Subject key identifier:   00:FD:4B:9A:4E:F3:85:75:92:FD:F6:C0:26:EC:0E:E1:CD:C1:A0:84
Authority key identifier: 52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92
Certificate issuer:       /CN=529231b247bff65b4c6341907ecd5eaba7f9ca92
Certificate serial:       019CABA2148F69ECA51AE00CAFF9407D4D8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
Manifest number:          184A
Signing time:             Sun 01 Mar 2026 23:00:51 +0000
Manifest this update:     Sun 01 Mar 2026 23:00:51 +0000
Manifest next update:     Mon 02 Mar 2026 23:00:51 +0000
Files and hashes:         1: UpIxske_9ltMY0GQfs1eq6f5ypI.crl (hash: gybitVGQywiidGK8yvdzHcp6loVCTHnxJ/Ue54U/h0A=)
                          2: jb28EMGpZLQEx0nm-COFBx7LuxA.roa (hash: tlsP+4YE5wEIxVFDiqeCuZVOSE8h29Zo7K+FoY31djg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 23:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a2:14:8f:69:ec:a5:1a:e0:0c:af:f9:40:7d:4d:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=529231b247bff65b4c6341907ecd5eaba7f9ca92
        Validity
            Not Before: Mar  1 23:00:51 2026 GMT
            Not After : Mar  2 23:00:51 2026 GMT
        Subject: CN=00fd4b9a4ef3857592fdf6c026ec0ee1cdc1a084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1a:bf:77:12:28:48:46:a4:f1:ce:9a:36:69:
                    2e:87:9d:b6:1a:2f:18:4a:1f:5d:0b:fb:2e:0d:5f:
                    d3:95:06:a0:03:6e:3c:60:f8:8d:3e:4b:f4:f2:27:
                    07:cc:ef:ad:c2:30:94:56:e0:f0:79:e2:02:5f:54:
                    18:d4:1b:b8:2e:15:30:53:2f:86:85:a5:10:f6:6f:
                    33:a7:22:ba:af:f6:1f:49:ec:2b:6b:6f:b1:3d:9c:
                    fc:6f:2d:aa:f5:e0:e8:3b:14:87:cd:ed:5b:33:c8:
                    b3:f7:2b:63:8c:3e:41:63:c7:db:8e:b5:91:84:96:
                    cd:73:4d:c1:2b:05:c3:6e:0c:36:fc:bf:f1:0a:1d:
                    67:03:7e:68:10:24:74:cd:ee:a8:48:bf:c3:df:15:
                    89:10:b3:c1:1b:03:bb:8f:d0:6f:93:d0:90:c8:1f:
                    de:ad:d0:41:65:a6:aa:6e:20:5f:a3:91:08:f5:76:
                    a8:d7:5d:4f:c0:f4:07:5d:94:36:ba:65:cb:52:0d:
                    8b:e5:68:08:b8:5e:b7:d7:9e:f9:11:4b:81:bb:b9:
                    5a:0f:83:ee:ec:c9:44:5c:9d:26:a4:75:21:52:09:
                    aa:7f:52:21:34:e4:af:f4:3b:23:4d:0a:8b:90:ca:
                    e3:91:40:b3:a3:f4:86:b2:36:f4:d0:4e:b9:bd:b7:
                    ee:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FD:4B:9A:4E:F3:85:75:92:FD:F6:C0:26:EC:0E:E1:CD:C1:A0:84
            X509v3 Authority Key Identifier:
                keyid:52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:ad:66:3f:12:84:92:37:74:de:67:3d:59:3f:c7:a8:80:47:
         42:48:c5:2d:89:dd:ef:ac:b6:af:ff:bd:0e:c3:d5:ed:30:c8:
         96:32:0c:33:d9:f2:b1:5a:e7:8f:a2:5e:50:3f:f0:85:e4:ca:
         73:8e:35:5d:08:fb:00:17:f5:06:83:71:82:60:76:5b:b1:19:
         b9:59:06:af:37:5f:51:ec:54:14:af:da:29:3a:ff:36:3d:84:
         5b:23:8c:c8:36:33:71:1a:55:e0:3b:80:f1:eb:26:3d:aa:ba:
         8a:88:43:e8:01:38:c5:12:03:30:b8:91:ef:66:10:89:24:be:
         01:95:44:c3:d1:5f:b4:30:80:1e:8c:91:84:b7:89:64:07:3f:
         b4:10:88:68:e8:84:be:a1:b4:a4:76:14:f0:05:e0:a2:9f:03:
         0b:3a:b8:25:fe:fe:db:06:b0:3f:5d:af:63:9b:e0:ba:0e:a7:
         66:d4:5e:29:4b:b9:68:86:30:b3:2f:49:6f:86:86:e7:fc:ee:
         44:b3:c5:43:6c:d4:e5:17:5b:cc:09:87:2d:ee:bb:45:f8:e6:
         6f:1f:6e:38:c1:ee:e3:9b:01:30:9b:36:63:36:b7:fa:bd:1a:
         fd:da:24:01:1d:24:e8:b3:94:16:b2:04:c3:ab:62:87:55:28:
         e7:7f:07:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrohSPaeylGuAMr/lAfU2PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyOTIzMWIyNDdiZmY2NWI0YzYzNDE5MDdlY2Q1ZWFiYTdm
OWNhOTIwHhcNMjYwMzAxMjMwMDUxWhcNMjYwMzAyMjMwMDUxWjAzMTEwLwYDVQQD
EygwMGZkNGI5YTRlZjM4NTc1OTJmZGY2YzAyNmVjMGVlMWNkYzFhMDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxq/dxIoSEak8c6aNmkuh522Gi8Y
Sh9dC/suDV/TlQagA248YPiNPkv08icHzO+twjCUVuDweeICX1QY1Bu4LhUwUy+G
haUQ9m8zpyK6r/YfSewra2+xPZz8by2q9eDoOxSHze1bM8iz9ytjjD5BY8fbjrWR
hJbNc03BKwXDbgw2/L/xCh1nA35oECR0ze6oSL/D3xWJELPBGwO7j9Bvk9CQyB/e
rdBBZaaqbiBfo5EI9Xao111PwPQHXZQ2umXLUg2L5WgIuF631575EUuBu7laD4Pu
7MlEXJ0mpHUhUgmqf1IhNOSv9DsjTQqLkMrjkUCzo/SGsjb00E65vbfuMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAD9S5pO84V1kv32wCbsDuHNwaCEMB8GA1UdIwQY
MBaAFFKSMbJHv/ZbTGNBkH7NXqun+cqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXBJeHNrZV85bHRNWTBHUWZzMWVxNmY1eXBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84ZWM5NmQtZDYxYy00NmFjLWJmNTQt
NjUxMzVjZjJmODE1LzEvVXBJeHNrZV85bHRNWTBHUWZzMWVxNmY1eXBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi84ZWM5NmQtZDYxYy00NmFjLWJmNTQtNjUxMzVjZjJmODE1
LzEvVXBJeHNrZV85bHRNWTBHUWZzMWVxNmY1eXBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeK1mPxKE
kjd03mc9WT/HqIBHQkjFLYnd76y2r/+9DsPV7TDIljIMM9nysVrnj6JeUD/wheTK
c441XQj7ABf1BoNxgmB2W7EZuVkGrzdfUexUFK/aKTr/Nj2EWyOMyDYzcRpV4DuA
8esmPaq6iohD6AE4xRIDMLiR72YQiSS+AZVEw9FftDCAHoyRhLeJZAc/tBCIaOiE
vqG0pHYU8AXgop8DCzq4Jf7+2wawP12vY5vgug6nZtReKUu5aIYwsy9Jb4aG5/zu
RLPFQ2zU5RdbzAmHLe67Rfjmbx9uOMHu45sBMJs2Yza3+r0a/dokAR0k6LOUFrIE
w6tih1Uo538Hrw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:29 2026 by rpki-client