Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft
File:                     Uuopd4vrKAAYKU4jlcv6AELI94o.mft (raw, json)
Hash identifier:          YvsGiLlAl2DWYBykWNkVaRFvVQaKE11cQrxEQtYFYl4=
Subject key identifier:   D8:5B:E8:5C:18:07:75:EB:01:1D:BE:E5:06:66:62:0C:58:BC:98:E6
Authority key identifier: 52:EA:29:77:8B:EB:28:00:18:29:4E:23:95:CB:FA:00:42:C8:F7:8A
Certificate issuer:       /CN=52ea29778beb280018294e2395cbfa0042c8f78a
Certificate serial:       019CAB6AE2CE04E61410CA40328D4277FB7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uuopd4vrKAAYKU4jlcv6AELI94o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft
Manifest number:          0A6E
Signing time:             Sun 01 Mar 2026 22:00:34 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:34 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:34 +0000
Files and hashes:         1: Uuopd4vrKAAYKU4jlcv6AELI94o.crl (hash: q5JokDcfbI2M0lcrwpPQKJyeRQvVToLwr8/hJo7P40Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uuopd4vrKAAYKU4jlcv6AELI94o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6a:e2:ce:04:e6:14:10:ca:40:32:8d:42:77:fb:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52ea29778beb280018294e2395cbfa0042c8f78a
        Validity
            Not Before: Mar  1 22:00:34 2026 GMT
            Not After : Mar  2 22:00:34 2026 GMT
        Subject: CN=d85be85c180775eb011dbee50666620c58bc98e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e0:ff:f6:4b:19:32:15:65:8f:1b:69:af:45:
                    23:b1:7c:8a:ea:71:02:a1:3a:63:7d:61:a0:03:cc:
                    10:22:14:65:64:ac:8d:e5:47:57:a1:92:a9:ce:21:
                    de:3b:c7:71:50:b4:3d:9a:2b:60:41:69:56:5c:c7:
                    da:b4:9e:04:15:1a:f3:d5:d3:71:ef:0f:d2:5a:81:
                    6c:e7:58:67:e3:b4:e6:a7:11:24:52:cf:3c:4d:5a:
                    2d:13:38:1a:c8:50:04:44:66:db:8b:18:22:fa:27:
                    89:b1:ab:81:0e:6c:bc:17:44:69:8e:e8:89:31:7a:
                    5b:8b:6c:18:75:6c:65:49:42:13:7b:83:fe:ff:19:
                    1b:41:c7:45:46:e7:64:1b:1a:f4:b9:96:d7:33:23:
                    f9:39:ea:cf:32:fb:b0:f9:cb:24:fa:79:e0:93:78:
                    77:1f:49:01:b7:e8:8e:f8:d5:1d:2e:ac:66:2a:6a:
                    60:4c:72:17:70:12:de:79:df:21:de:cf:81:6a:ff:
                    07:df:47:94:b5:f7:df:4a:a7:02:ad:e5:3a:d0:a1:
                    3e:0b:e1:ca:bc:f6:33:c1:00:43:ed:ef:63:7f:ed:
                    62:71:9a:cd:e3:9b:ff:cf:e9:41:62:c2:bf:5d:ea:
                    f3:43:4f:60:10:49:34:44:29:f1:d9:61:36:91:89:
                    bb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:5B:E8:5C:18:07:75:EB:01:1D:BE:E5:06:66:62:0C:58:BC:98:E6
            X509v3 Authority Key Identifier:
                keyid:52:EA:29:77:8B:EB:28:00:18:29:4E:23:95:CB:FA:00:42:C8:F7:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uuopd4vrKAAYKU4jlcv6AELI94o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:cb:21:92:1a:5f:ac:2d:b2:6f:a6:80:4d:a5:22:2d:1f:a1:
         e5:dd:e7:bc:84:84:8b:9e:e8:a9:60:6d:0d:97:61:15:32:46:
         60:0a:e5:4e:71:c3:c7:af:1d:f8:5e:89:66:62:73:ba:55:d3:
         33:8e:01:d4:02:81:48:37:80:8b:26:59:fd:41:8c:54:5b:93:
         27:45:c0:3b:92:9b:df:0e:54:39:65:8c:b4:31:b1:70:a6:65:
         34:0f:46:73:22:82:5f:64:74:d5:2e:72:64:44:e2:62:00:dc:
         51:82:27:12:df:ac:5f:6e:f9:c6:97:27:57:15:ed:5c:84:a2:
         b8:17:f0:4f:e5:3d:7f:df:a4:1e:8d:5e:0b:28:d3:3e:cb:ff:
         1b:99:90:fb:2d:6d:87:ee:d5:93:56:91:f7:65:11:28:aa:be:
         6f:7d:85:4e:90:11:8d:4c:9d:3e:02:d5:e9:b2:8d:ec:36:77:
         7a:bb:37:c4:00:c4:02:5b:19:18:dd:2d:ea:77:eb:c7:14:18:
         4f:02:8d:f4:28:d0:0c:9c:36:cb:fe:ea:7a:9d:64:b5:92:d2:
         97:aa:2a:88:0f:db:c8:48:be:3d:91:68:04:72:53:68:af:30:
         11:d9:5e:dc:9e:c4:7c:b8:3f:b8:be:45:9f:80:c8:37:e2:f9:
         bb:9e:79:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:36:23 2026 by rpki-client