Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
File:                     UFQvugwXtDkeMpbENLX_8jqCm24.mft (raw, json)
Hash identifier:          7vLXmrRo3z9CDn7zaaU7WVZ9+BDyUkiEFMNFm6iwozc=
Subject key identifier:   76:97:35:54:BF:FF:C4:BC:F3:D5:28:E2:6B:A0:57:44:18:AD:01:14
Authority key identifier: 50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
Certificate issuer:       /CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Certificate serial:       019CAA582BA3AE6CB913E29E00CBA0010674
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
Manifest number:          146D
Signing time:             Sun 01 Mar 2026 17:00:30 +0000
Manifest this update:     Sun 01 Mar 2026 17:00:30 +0000
Manifest next update:     Mon 02 Mar 2026 17:00:30 +0000
Files and hashes:         1: UFQvugwXtDkeMpbENLX_8jqCm24.crl (hash: vFMYEqCl+rdpYMAVoEtayugGM8Hg7R5apZvbrljM2Z4=)
                          2: brFnh3rq3SaqASoxymZGHF7hvHQ.roa (hash: lmozdC2cR8kjC76avAg5K/NKcOEBFp0Tuc3TVnelJ0g=)
                          3: r-wLcfbrV7gSA_iFZTlD40lbPxI.roa (hash: 9BuizisqfHZcVlGBCcKNw9NkVDpUfvizltmHgaebiwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:2b:a3:ae:6c:b9:13:e2:9e:00:cb:a0:01:06:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50542fba0c17b4391e3296c434b5fff23a829b6e
        Validity
            Not Before: Mar  1 17:00:30 2026 GMT
            Not After : Mar  2 17:00:30 2026 GMT
        Subject: CN=76973554bfffc4bcf3d528e26ba0574418ad0114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:22:d1:64:76:18:05:16:05:78:8e:1a:6d:8c:
                    82:67:89:6c:4a:80:50:6c:23:75:94:9a:94:c1:86:
                    13:c4:d9:f0:3c:c9:22:ec:6d:87:b4:23:6d:b1:67:
                    8f:f4:65:36:23:09:fa:d3:64:49:70:96:5c:11:d0:
                    b2:39:02:8a:2e:bd:37:f3:10:90:15:19:a3:7e:56:
                    30:b3:c8:62:09:5d:9d:8c:7a:f1:8d:46:20:8c:12:
                    7e:a7:e0:5f:6c:b5:dd:cd:c2:9e:8f:a1:37:a2:9c:
                    2a:cc:06:8f:bd:39:f8:82:60:66:a6:ae:70:75:0b:
                    4f:29:a0:49:9e:a7:7b:c5:69:ab:6c:14:80:bd:61:
                    60:5a:4f:c4:e9:8b:6e:32:80:54:4c:f1:ff:10:b1:
                    10:90:44:ee:11:6b:91:9e:83:47:71:ba:d5:3c:e4:
                    57:11:6c:f7:f8:a4:2b:3e:3b:7a:49:2d:f0:8e:da:
                    ef:1e:0e:0d:48:df:30:4b:69:d3:91:47:7e:4e:14:
                    4e:78:fe:2c:9a:5e:88:3b:e6:26:c9:af:1e:d3:11:
                    a7:1e:ed:61:ac:b5:c9:7b:a4:6d:24:09:3b:32:b9:
                    a1:4a:a8:af:78:e6:19:ee:bf:2a:d4:81:10:6b:82:
                    17:c7:29:31:70:77:98:71:37:d5:cd:37:58:a2:66:
                    6f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:97:35:54:BF:FF:C4:BC:F3:D5:28:E2:6B:A0:57:44:18:AD:01:14
            X509v3 Authority Key Identifier:
                keyid:50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:5d:3f:82:f7:d3:72:b9:a5:8b:4e:20:5e:29:39:60:75:34:
         2c:52:8f:a8:2f:03:60:8b:71:ce:bc:cd:e7:5f:11:98:76:b2:
         03:dc:5d:57:d7:75:eb:89:bb:e6:ae:2e:81:81:5e:89:9c:06:
         0a:dd:8a:b8:f3:f7:d6:d9:9b:15:5a:f9:c9:11:1a:a2:2e:20:
         27:6a:b3:ba:1c:ea:7a:e8:1f:5f:c0:6e:56:ff:11:9b:a8:9a:
         ff:34:98:af:c9:01:6d:8a:1e:14:de:f9:94:d7:63:3e:45:5c:
         10:a7:25:70:27:89:de:be:d0:fb:03:60:b4:fc:a5:75:d0:9e:
         40:f1:d8:1f:fb:b9:ad:fb:b3:50:ee:d0:90:7a:bc:9e:75:6f:
         ee:cb:a1:68:61:45:b8:e8:47:2d:7a:f5:da:df:e2:38:bf:b6:
         c4:d3:03:15:8e:6b:28:91:d6:34:13:99:3d:fe:fe:ee:6f:32:
         d1:23:9f:06:73:d6:18:27:c1:69:ce:79:5e:53:9c:af:6b:bb:
         84:5a:c0:90:26:55:b5:94:6e:05:28:38:e9:3b:11:11:81:1b:
         b1:f8:29:fa:d2:e0:0f:d1:23:c9:9c:6b:bc:66:fd:99:da:21:
         45:f4:c2:49:a2:dd:33:33:af:50:dc:38:bc:00:8b:04:c4:c4:
         9c:2c:20:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:14:37 2026 by rpki-client