Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft
File:                     ueqJNvjlMGO0s73w87FbKuZn7xM.mft (raw, json)
Hash identifier:          dfy4uDWe1d43PVHrK/cte99LZlXzlPh/c0+9yokP4DI=
Subject key identifier:   7E:B7:78:9C:A2:D0:3B:D9:4A:EE:52:6F:41:33:34:2C:96:A2:C5:C1
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Certificate issuer:       /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial:       019CAAFD3FB571FC6AE6ADE32F1EBB730443
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft
Manifest number:          13F9
Signing time:             Sun 01 Mar 2026 20:00:49 +0000
Manifest this update:     Sun 01 Mar 2026 20:00:49 +0000
Manifest next update:     Mon 02 Mar 2026 20:00:49 +0000
Files and hashes:         1: BK_uZd5RIdvcCcnIrkl91Qf2mFw.roa (hash: wV2RNnXCJX3V+Medw8LdpmAEbR5QwEUgTvufx7pFq14=)
                          2: FtL8JAR5L3QuiWjveQYYqx5Vysc.roa (hash: TDzblppwWN3R0n7X/3t6Y/QCHzmL0n6aO41HLuZVCKU=)
                          3: G9O4g34wmhpRqqqyNq64bnjh27k.roa (hash: lYlheaBAaMmywrolWQWx4QnBFOXnz365592aJuQe6Mw=)
                          4: NeWc7fV2xerzCZLqJxMH7S9Rnq0.roa (hash: edl6dCh63hg4Y8AUvmK5tlCPTiU0Nu0TVS0oTDNYUII=)
                          5: XppJI7pSNx6BdFrEbdtPboTQL6o.roa (hash: Cty7u06Lt5vOCxE5CLtni9wB/17m9CZOi2zJp+IGXYM=)
                          6: hHQPymz7nrurWK651cK6wH1WQB4.roa (hash: dwQ4oAHDFe0oAQKlctscRR06w5cemCjD8MkqMj9iTyk=)
                          7: hn8HZ87MGm21OeAakwo0L7epBvo.roa (hash: K2tDb7I5NoqsKa5/k7EGMMNhy8l68r1VCX67mnoFnXs=)
                          8: kV_BrjVm5ak2BohajWeFXkU5WnY.roa (hash: gf0jyat4SEAG7hpeZ/XK4zeXtnW9UimqB92MtzK9bjk=)
                          9: kyFQugjVSgHbKP7Cp3yvdfTkM7Y.roa (hash: lYivRiiWhdQqSTdJmm6RVAol+uwcwmFLCfnYj2bvGyA=)
                          10: th-tx_kJ7veQ1scNgs5J6K1YnW4.roa (hash: CptKWeu/KjIE3Xe0fo+dZtItTKDZJuUjeV7GErUniCg=)
                          11: ueqJNvjlMGO0s73w87FbKuZn7xM.crl (hash: X3yubFEpzipl/XAIroBHiMxK4GWF6cRNxaPaJICvxz4=)
                          12: uibhPc4NbRy01honmhOVxxl-SbI.roa (hash: aerci+cgin2TuEzTcnRWk0Cjk81xvvnVy7gKs1IvnLQ=)
                          13: xxR8mx-20J_lo55Rh1660v5SUI4.roa (hash: 2Y9dBCwd98Bba/rHT3QIRjMGiqefSe3zB38HBIRd3qw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:3f:b5:71:fc:6a:e6:ad:e3:2f:1e:bb:73:04:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
        Validity
            Not Before: Mar  1 20:00:49 2026 GMT
            Not After : Mar  2 20:00:49 2026 GMT
        Subject: CN=7eb7789ca2d03bd94aee526f4133342c96a2c5c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:57:43:e9:25:d6:a8:b3:b4:0a:ec:8c:5f:73:
                    2a:1f:20:e5:1f:fc:10:ff:05:84:d6:ce:e1:d1:39:
                    ef:1c:da:58:a3:86:ef:78:c3:d2:98:5a:af:2a:d9:
                    a2:9c:ca:14:82:de:a3:94:96:29:dd:56:fe:b5:04:
                    a1:5d:65:6d:04:f4:00:5a:42:f7:2d:69:7d:c6:c6:
                    3a:8a:77:64:75:54:3d:40:30:0d:be:0c:5f:01:b7:
                    18:33:a9:de:dd:b0:73:a2:15:62:9c:84:33:14:d4:
                    a0:16:b5:71:aa:94:94:05:12:c4:10:45:d8:66:7d:
                    23:f2:55:f8:58:4e:60:1d:ef:2d:5a:e5:8f:0d:32:
                    94:ce:e9:f5:f0:0a:58:c0:37:44:06:bd:6e:97:e1:
                    01:b2:d6:51:a6:1b:ac:21:35:5b:ac:78:dd:f8:ee:
                    54:8b:51:73:de:8c:05:86:51:24:4e:86:29:ae:b5:
                    87:b5:79:3a:d0:51:72:0c:03:7d:36:f9:7e:04:e8:
                    10:ff:90:7a:bd:1b:5a:47:e3:f8:a0:8b:c8:b1:c6:
                    a0:78:ba:74:75:63:8f:19:20:b0:ea:2a:f7:37:b7:
                    42:6d:42:c6:ef:7a:2f:b8:96:74:35:9b:26:06:44:
                    b2:65:04:3b:0a:e2:7d:2f:f9:1d:1f:dd:f7:fd:dc:
                    f6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B7:78:9C:A2:D0:3B:D9:4A:EE:52:6F:41:33:34:2C:96:A2:C5:C1
            X509v3 Authority Key Identifier:
                keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:12:6a:e0:ec:4e:fa:fe:04:de:27:a8:18:5a:fc:b0:dc:4f:
         c1:9d:68:05:eb:3b:4f:19:a1:ac:c5:46:94:8e:07:4e:f9:15:
         ee:37:94:e2:cb:59:a4:8d:c3:fa:24:ea:3a:66:e1:22:36:cd:
         d2:40:b3:3b:96:8b:10:f1:30:40:c2:fa:ca:7e:91:dc:cb:41:
         77:f1:8f:30:b8:28:11:49:d2:76:2e:97:08:82:ce:e9:24:5c:
         59:1a:03:7c:3f:22:44:98:4a:a6:db:d6:44:be:d9:a2:16:50:
         55:76:e9:a0:ea:d6:11:74:5c:29:86:ea:34:09:c4:8f:7b:fb:
         16:3a:80:77:6a:80:aa:f9:5d:2a:fe:24:e1:e3:cf:68:7b:2a:
         c9:24:46:49:11:fb:ed:6b:b1:ee:ee:66:84:e3:3f:cb:38:24:
         53:5b:9f:18:68:8e:22:f3:5f:e9:65:f6:fc:35:20:32:c9:53:
         e3:9f:56:4a:59:29:c0:db:98:f0:4d:75:d5:7b:b7:bd:40:47:
         84:30:13:d5:77:b3:35:54:4c:19:cc:e8:d9:c1:34:50:9f:a8:
         18:ad:b1:01:30:a8:61:32:54:e2:f3:2b:cf:64:0a:56:92:d9:
         1b:58:a6:4a:af:b3:c6:6a:47:44:1f:5b:2f:c1:12:34:d3:50:
         4b:75:4d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:32:25 2026 by rpki-client