Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
File:                     uFsMinWJOk-OHvDZpNQUeNizMng.mft (raw, json)
Hash identifier:          0kdlrZ+aIXtJcOii/0URx8eQYv/NKyV7TeAc5YlGG6c=
Subject key identifier:   6E:BD:1F:8D:C8:A0:C8:EC:F9:EB:C3:F0:F0:59:C0:7C:1F:4A:62:8A
Authority key identifier: B8:5B:0C:8A:75:89:3A:4F:8E:1E:F0:D9:A4:D4:14:78:D8:B3:32:78
Certificate issuer:       /CN=b85b0c8a75893a4f8e1ef0d9a4d41478d8b33278
Certificate serial:       019CAAFD5021AEF6783DC5ED6775B1FB12BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
Manifest number:          17A1
Signing time:             Sun 01 Mar 2026 20:00:53 +0000
Manifest this update:     Sun 01 Mar 2026 20:00:53 +0000
Manifest next update:     Mon 02 Mar 2026 20:00:53 +0000
Files and hashes:         1: 8y3Tj4TsEaNV9uqE3_Wm8d75SXY.roa (hash: yZH4sqNiTJoNNbuM1J9mJYZWJbe1HILioSLqth5sEdY=)
                          2: HVxmAfBjZ6ZLdFwLWBto8AESvAs.asa (hash: hcVfaTwHi+0pfWKV+QVinfnUuQbFH+9lvzWtmpQvDYI=)
                          3: HqKAWum-OFZ9NLI9L0i8Qooknqs.asa (hash: lOJrYcM36+x+F6jmp2VCjFJX1AVn86mOQN9gIP6YbRA=)
                          4: IpKrE-_m-Bh_Vf9sAiL9RizjUYg.roa (hash: 8q6f4vw2poLJek7yAHJ0nyjZ8IKhwyPGqBKWSnBCaDo=)
                          5: Jo3OhvYKqzyTMsOO-06Cr6N1_P8.roa (hash: n7Kb4qqB8hRT0/AEwz8YCJRJUt0Sd29P7/pf8OQNdu4=)
                          6: uFsMinWJOk-OHvDZpNQUeNizMng.crl (hash: 8QWzFcKCW8PutnfB7xN4ce7PKrgBiusEVmTcjkAZjlA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:50:21:ae:f6:78:3d:c5:ed:67:75:b1:fb:12:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b85b0c8a75893a4f8e1ef0d9a4d41478d8b33278
        Validity
            Not Before: Mar  1 20:00:53 2026 GMT
            Not After : Mar  2 20:00:53 2026 GMT
        Subject: CN=6ebd1f8dc8a0c8ecf9ebc3f0f059c07c1f4a628a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ed:df:2a:44:fe:86:7f:55:90:54:69:10:fc:
                    86:20:4a:fd:4a:2f:25:71:49:8c:d5:bd:ca:d1:2b:
                    93:33:c8:f4:0b:8c:7b:8c:1e:38:25:0f:b5:df:c7:
                    cd:ee:02:31:4c:53:83:a2:43:ef:d1:af:fa:0b:52:
                    3d:c2:34:a1:55:e8:4f:0f:f1:89:66:61:7c:e1:54:
                    8e:9e:b1:01:b0:ac:43:89:14:89:e0:cb:c0:3d:bb:
                    89:a6:7d:7c:66:01:a6:56:76:3c:84:76:49:cd:80:
                    05:56:98:1a:62:69:d1:fc:73:9b:60:56:d1:1b:41:
                    78:9d:ab:a3:76:7f:de:2f:60:cc:94:d7:61:cb:06:
                    72:a3:92:7b:7b:a1:79:c2:15:70:e3:be:09:b1:8f:
                    01:2c:e2:bb:73:80:2e:a5:ef:42:b4:30:15:2f:fd:
                    27:d9:3b:54:26:b7:b7:0e:ef:eb:30:e0:a5:de:c5:
                    c6:95:36:f0:06:dd:11:8f:df:a2:0a:cd:d5:b0:47:
                    05:51:cd:18:69:21:0c:bf:a4:fb:11:00:f4:81:76:
                    8f:b1:60:b9:61:e1:ed:95:e2:a3:60:4b:3e:95:81:
                    c1:4a:ff:26:e7:51:ed:0c:87:dd:19:2b:47:b0:7f:
                    d7:9c:cb:09:d4:b0:98:be:a8:d3:fd:81:58:5a:db:
                    3a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:BD:1F:8D:C8:A0:C8:EC:F9:EB:C3:F0:F0:59:C0:7C:1F:4A:62:8A
            X509v3 Authority Key Identifier:
                keyid:B8:5B:0C:8A:75:89:3A:4F:8E:1E:F0:D9:A4:D4:14:78:D8:B3:32:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:0b:33:46:38:f9:01:bb:d4:10:b3:3a:d4:88:63:ae:e1:bf:
         c4:7c:af:f9:9b:4f:90:ba:f3:ec:22:5a:41:0e:c0:56:de:5e:
         14:7d:e4:54:09:b2:d4:54:ee:7b:a3:2c:3f:a2:80:a4:10:ff:
         8b:ab:ee:7a:ec:01:86:eb:43:af:a9:04:d0:0a:07:07:03:de:
         2a:cd:80:0b:e7:8a:82:66:f8:d9:3e:8c:4e:0a:af:65:91:73:
         ea:e8:4e:69:00:fe:d0:e7:1b:cb:10:c8:16:fc:ac:9f:a5:f6:
         8e:a5:0f:9f:1d:84:b4:b4:47:07:88:57:e0:3b:76:40:fd:b1:
         c1:6c:73:fb:be:02:bf:77:e5:75:d2:10:2c:36:97:ae:9e:ef:
         86:12:8b:35:a8:f0:42:35:62:eb:9c:d5:5c:da:e7:a3:89:38:
         29:e1:18:45:bd:fc:41:f7:91:46:08:5f:20:06:26:cc:9b:9e:
         1a:ee:69:7d:49:8b:fd:00:61:da:22:73:cd:f4:e9:f1:46:cf:
         ed:f3:00:2e:5c:c3:b4:88:7e:f9:98:e1:2c:92:ec:32:8b:27:
         b4:63:33:a3:04:d6:f0:56:01:93:39:e2:40:7f:2d:90:d0:4d:
         89:de:04:68:74:ac:a6:6e:4d:a9:2f:93:1e:2f:30:ff:12:84:
         86:14:89:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:31:20 2026 by rpki-client