Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft
File:                     uoGySm1gML8IjeowyaWTL-vcanw.mft (raw, json)
Hash identifier:          3FP6Yl7UisBKQlkJoQVPrl9kUAqP+CSyF5ZRjcIrTfE=
Subject key identifier:   BC:A0:BF:E5:70:DD:66:E2:3B:A2:8B:04:9F:71:05:35:39:8D:D8:15
Authority key identifier: BA:81:B2:4A:6D:60:30:BF:08:8D:EA:30:C9:A5:93:2F:EB:DC:6A:7C
Certificate issuer:       /CN=ba81b24a6d6030bf088dea30c9a5932febdc6a7c
Certificate serial:       019CAFED09F934BD8F96892731C9EA076578
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uoGySm1gML8IjeowyaWTL-vcanw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft
Manifest number:          0310
Signing time:             Mon 02 Mar 2026 19:01:13 +0000
Manifest this update:     Mon 02 Mar 2026 19:01:13 +0000
Manifest next update:     Tue 03 Mar 2026 19:01:13 +0000
Files and hashes:         1: uoGySm1gML8IjeowyaWTL-vcanw.crl (hash: xBygahTJ98nWGLTW6zToA3tuVhuYKuJQ7ojOXmWgNt4=)
                          2: zl-n2q1Zb7EgYohA26XnxYXqdxE.roa (hash: BY/YVHNSQVEAmKd+rhuDTBW07jn5TB4TSJNB9lFmcSs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uoGySm1gML8IjeowyaWTL-vcanw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:ed:09:f9:34:bd:8f:96:89:27:31:c9:ea:07:65:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba81b24a6d6030bf088dea30c9a5932febdc6a7c
        Validity
            Not Before: Mar  2 19:01:13 2026 GMT
            Not After : Mar  3 19:01:13 2026 GMT
        Subject: CN=bca0bfe570dd66e23ba28b049f710535398dd815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5c:4b:e3:c6:fa:ea:09:71:98:55:79:9b:74:
                    97:c3:f7:3f:20:5b:ad:09:a4:87:41:17:b1:7a:ba:
                    6b:7e:63:76:45:73:61:5b:7e:ee:3b:76:18:8b:9f:
                    dc:3c:15:d3:d1:45:2d:32:41:47:d3:55:cf:a1:4e:
                    61:bf:55:ff:87:f4:2d:c3:6b:23:58:0b:36:28:36:
                    48:05:78:3d:bd:d8:55:de:20:e7:3e:b9:e5:cb:14:
                    af:3b:71:55:34:1e:0f:b7:39:60:06:f4:d7:4e:58:
                    cc:6e:04:66:b6:23:3a:cd:c8:fe:35:96:39:2a:3c:
                    87:de:a7:09:ad:fb:11:e2:7a:d8:8d:b7:5d:42:6e:
                    e9:41:96:84:a6:99:ff:23:b8:59:37:81:8f:80:b8:
                    67:ff:50:b1:a7:17:fd:94:d5:73:31:8d:1a:bc:ca:
                    95:94:42:c2:3d:eb:96:95:40:52:82:fb:26:60:16:
                    23:5e:5e:cb:c4:ef:3b:37:4d:f4:73:e4:0a:61:b3:
                    f5:de:87:b4:e8:8e:36:30:58:3f:08:87:42:ff:7e:
                    ed:02:26:dc:fb:59:1e:9c:e7:f6:80:e0:83:d2:17:
                    5a:b1:e4:ba:da:a7:e6:43:4d:3e:ae:86:1c:d9:a4:
                    f6:03:ed:55:d2:c0:be:dc:2f:42:ff:4d:24:97:69:
                    82:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A0:BF:E5:70:DD:66:E2:3B:A2:8B:04:9F:71:05:35:39:8D:D8:15
            X509v3 Authority Key Identifier:
                keyid:BA:81:B2:4A:6D:60:30:BF:08:8D:EA:30:C9:A5:93:2F:EB:DC:6A:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoGySm1gML8IjeowyaWTL-vcanw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:b7:cf:56:00:9a:d9:5a:a1:1d:b6:99:59:3c:65:f0:06:a7:
         83:b1:fa:d1:92:e2:c2:94:57:dc:d4:19:46:ba:4e:ae:87:9b:
         2d:65:ea:f4:86:de:44:bd:97:53:18:77:dc:69:d4:16:ac:25:
         35:67:9d:b8:bc:d9:04:6a:86:17:39:2c:34:2a:4d:93:f3:fe:
         0c:be:3e:9d:16:3e:89:c4:60:83:6d:6a:71:4a:54:a1:70:ee:
         ef:08:b2:e6:a4:07:95:2e:1a:1b:ea:61:83:ce:55:59:9c:97:
         2e:eb:4d:02:85:a3:e2:d2:f7:91:a4:a3:3b:5b:21:69:93:ae:
         84:6c:9d:7d:d2:33:47:e7:cb:de:b0:cc:94:e4:3e:45:c5:05:
         6a:e7:c6:51:66:5f:0a:a1:b3:4c:5b:a6:59:7d:94:22:81:96:
         7b:0c:e6:c9:37:c8:2f:45:1a:e0:65:32:19:c3:2e:1e:d4:bf:
         43:ba:25:bb:1b:0e:a1:16:8d:11:50:1a:28:9c:b5:d6:bf:ac:
         a9:31:21:ab:47:23:47:2a:a9:0f:fc:cf:94:5e:ba:78:fb:42:
         a7:ca:60:59:24:3c:d5:c7:50:87:34:1c:13:00:5f:a4:59:78:
         ca:9f:6d:ea:15:43:73:11:da:6f:15:e1:ca:c3:68:04:df:aa:
         c5:23:d9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:24:13 2026 by rpki-client