Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a31884-2952-4647-815e-e52525db12db/1/UDCmlphoVt51uCLWrpX-ATE4IK8.mft
File:                     UDCmlphoVt51uCLWrpX-ATE4IK8.mft (raw, json)
Hash identifier:          /R779hNUVpjDAntKNprIr5/wMixAQyW//TKTskPcAzI=
Subject key identifier:   4B:9C:26:47:55:47:FE:33:27:3A:F9:B4:56:E2:41:43:11:0F:B5:27
Authority key identifier: 50:30:A6:96:98:68:56:DE:75:B8:22:D6:AE:95:FE:01:31:38:20:AF
Certificate issuer:       /CN=5030a696986856de75b822d6ae95fe01313820af
Certificate serial:       019CAAC6DC7E4854D2EB04C65DFC08A3FCE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UDCmlphoVt51uCLWrpX-ATE4IK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/a31884-2952-4647-815e-e52525db12db/1/UDCmlphoVt51uCLWrpX-ATE4IK8.mft
Manifest number:          123E
Signing time:             Sun 01 Mar 2026 19:01:25 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:25 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:25 +0000
Files and hashes:         1: UDCmlphoVt51uCLWrpX-ATE4IK8.crl (hash: bxK+rJvvFOZn1YY+J/tDBnK+0SjXq82sV2rhwUfuL5s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/a31884-2952-4647-815e-e52525db12db/1/UDCmlphoVt51uCLWrpX-ATE4IK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/a31884-2952-4647-815e-e52525db12db/1/UDCmlphoVt51uCLWrpX-ATE4IK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UDCmlphoVt51uCLWrpX-ATE4IK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:dc:7e:48:54:d2:eb:04:c6:5d:fc:08:a3:fc:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5030a696986856de75b822d6ae95fe01313820af
        Validity
            Not Before: Mar  1 19:01:25 2026 GMT
            Not After : Mar  2 19:01:25 2026 GMT
        Subject: CN=4b9c26475547fe33273af9b456e24143110fb527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:74:e4:10:05:9a:70:21:41:a8:61:60:f2:b7:
                    8b:d0:df:07:e7:08:65:72:2d:8c:06:8a:71:32:bf:
                    c9:2f:7a:78:6b:4f:c9:e3:2e:5e:96:c3:eb:a1:aa:
                    f2:ed:6b:61:39:38:18:c7:ea:08:24:88:f6:bd:e7:
                    d9:a2:f8:c5:44:0d:81:25:1f:06:5f:74:21:40:19:
                    93:a5:84:72:0a:32:14:af:59:df:a8:25:df:e4:1d:
                    29:d4:41:1b:71:21:9f:4b:e3:23:ad:51:ab:9f:17:
                    b6:de:ca:1b:74:22:e0:10:83:f7:94:bf:f3:9e:5c:
                    ba:61:17:11:9a:9e:43:8b:79:de:df:f5:fd:70:7f:
                    38:a7:59:33:b9:53:63:76:68:08:aa:14:32:b2:60:
                    8a:8f:c0:58:38:be:eb:ac:40:33:98:7b:5b:13:63:
                    10:17:65:30:08:52:55:8d:3f:69:a9:0c:13:5c:f6:
                    80:bf:21:c5:10:3e:0f:51:2a:c3:e3:36:1f:85:c2:
                    e3:5f:7e:0b:eb:5e:f4:3e:48:a3:b2:a8:20:dc:c0:
                    b7:47:33:85:fe:b6:6e:be:aa:fe:99:c0:73:74:38:
                    ab:3d:ce:79:b8:2a:1f:7b:b0:f6:66:32:c4:05:40:
                    ee:d7:6b:fd:7f:10:d1:76:49:83:8e:7d:f0:c6:18:
                    70:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:9C:26:47:55:47:FE:33:27:3A:F9:B4:56:E2:41:43:11:0F:B5:27
            X509v3 Authority Key Identifier:
                keyid:50:30:A6:96:98:68:56:DE:75:B8:22:D6:AE:95:FE:01:31:38:20:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDCmlphoVt51uCLWrpX-ATE4IK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a31884-2952-4647-815e-e52525db12db/1/UDCmlphoVt51uCLWrpX-ATE4IK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a31884-2952-4647-815e-e52525db12db/1/UDCmlphoVt51uCLWrpX-ATE4IK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:2d:38:f0:f6:85:5c:7b:73:4d:8f:68:e5:87:77:a3:7a:62:
         b0:15:3b:b5:80:85:f1:46:0e:cc:38:8f:69:f3:69:73:64:8c:
         ec:bd:28:93:ab:26:fb:2a:3a:fe:69:56:c1:a1:35:70:ed:3a:
         46:20:00:b8:23:3d:95:80:26:d0:08:85:63:10:d8:86:d4:e7:
         df:83:59:86:16:70:61:01:77:7e:9e:07:69:70:98:cb:a3:6e:
         25:69:ef:ea:bc:93:90:79:32:5e:34:26:7c:86:fd:ac:9b:57:
         94:21:34:4b:51:d3:7f:79:87:a4:b2:fd:76:45:75:be:1a:a8:
         11:5b:d1:9a:85:99:33:b6:ea:5c:c6:eb:0f:b1:ad:91:cb:10:
         80:71:9e:b3:20:c5:1a:da:5a:18:c8:77:30:e8:6b:ee:1e:a9:
         d0:96:3d:32:3f:a4:21:c3:ad:98:0b:a7:b1:11:6b:81:62:ea:
         37:8f:d8:7a:f2:8c:40:b6:fe:e1:fa:38:1f:1e:3e:e4:6a:83:
         fa:61:19:fe:5d:08:7c:55:6e:b8:ea:6a:f0:07:b4:d9:9e:e7:
         f6:ca:38:c1:bf:f1:1d:10:81:01:63:0c:01:b0:30:23:ce:02:
         d5:77:33:b2:c4:89:c9:0c:b0:b5:a2:9d:85:1c:c2:52:09:c0:
         6a:e1:66:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:52 2026 by rpki-client