Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.mft
File:                     uEboVBh_kzKVTGDgjDNRr83xCFs.mft (raw, json)
Hash identifier:          L8ohh3Hwxfe64qG8MekgRtaHDE3gzdkI1ytpBfxAyVk=
Subject key identifier:   0F:65:80:05:8E:74:33:4E:AB:47:49:31:F5:FE:0D:FE:04:13:12:5A
Authority key identifier: B8:46:E8:54:18:7F:93:32:95:4C:60:E0:8C:33:51:AF:CD:F1:08:5B
Certificate issuer:       /CN=b846e854187f9332954c60e08c3351afcdf1085b
Certificate serial:       019CAC0FE6F569E6A5A405C27DC4B548AAEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uEboVBh_kzKVTGDgjDNRr83xCFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.mft
Manifest number:          0877
Signing time:             Mon 02 Mar 2026 01:00:49 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:49 +0000
Manifest next update:     Tue 03 Mar 2026 01:00:49 +0000
Files and hashes:         1: LoU6bInR-t2CDpwfpMzLYbLy3pA.roa (hash: 7e0dmQJEvRFv5WAuIm9ehE3YMHYXzzfWjHPD+c3OUhs=)
                          2: uEboVBh_kzKVTGDgjDNRr83xCFs.crl (hash: NiLpKsSnGWwjJFqFNv7x3xecZqmZ3mGqIbo9V1zXgGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uEboVBh_kzKVTGDgjDNRr83xCFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:0f:e6:f5:69:e6:a5:a4:05:c2:7d:c4:b5:48:aa:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b846e854187f9332954c60e08c3351afcdf1085b
        Validity
            Not Before: Mar  2 01:00:49 2026 GMT
            Not After : Mar  3 01:00:49 2026 GMT
        Subject: CN=0f6580058e74334eab474931f5fe0dfe0413125a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1c:08:98:04:71:42:9e:2c:9d:b1:aa:a9:44:
                    39:11:84:cd:97:73:05:63:44:07:4a:70:dd:4e:6b:
                    6a:2f:cb:db:20:e7:09:69:30:ba:b8:bf:29:ca:bd:
                    71:70:c1:f5:0a:ee:30:09:8b:9d:5b:bc:92:b1:50:
                    9b:3b:29:64:30:ab:36:0f:a2:5e:c8:c0:04:9a:17:
                    86:d0:4e:45:2c:b3:f5:1f:27:a3:27:96:75:6b:54:
                    7a:6b:bd:26:98:e9:5e:2d:59:53:f5:03:1e:a2:5e:
                    a8:3d:8c:9a:26:bc:9a:f7:81:6e:b5:17:df:b0:57:
                    22:88:86:14:f7:82:b5:73:05:f4:ba:f3:2c:b0:0d:
                    20:34:f5:7c:5e:17:aa:a4:a6:bf:42:33:7e:b1:2e:
                    fc:a3:26:8a:8e:d5:9a:01:e7:28:00:7c:b7:10:06:
                    a8:f8:df:ed:b8:42:9b:8a:5c:f0:52:fc:96:c9:5e:
                    22:d1:87:3a:9e:d5:f1:40:15:fd:f6:f2:62:de:ed:
                    44:4d:a8:53:45:97:9c:94:62:fd:4c:f1:fb:10:9d:
                    e8:13:cf:c3:5e:4c:ee:4b:fe:27:fa:21:ff:5c:5a:
                    cf:0c:a2:c3:85:6c:46:d6:11:a6:06:c4:8b:e1:97:
                    51:f0:0b:a6:e7:58:df:58:97:4c:b8:57:37:0d:9c:
                    bb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:65:80:05:8E:74:33:4E:AB:47:49:31:F5:FE:0D:FE:04:13:12:5A
            X509v3 Authority Key Identifier:
                keyid:B8:46:E8:54:18:7F:93:32:95:4C:60:E0:8C:33:51:AF:CD:F1:08:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEboVBh_kzKVTGDgjDNRr83xCFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:27:e6:07:f3:87:77:2a:2d:c6:ce:37:3d:67:ae:50:ac:41:
         cf:1d:b0:62:c1:95:39:c6:38:c7:01:56:07:74:04:46:c1:98:
         1b:66:83:64:05:eb:3f:f6:a3:a5:5a:59:a4:29:58:1b:05:9a:
         7c:a3:30:be:f6:05:83:89:f8:b2:8c:c9:49:57:5e:03:09:55:
         cf:d3:9a:e1:ba:c9:53:1d:10:d2:a3:7a:90:22:56:4f:18:26:
         73:5b:20:12:c2:28:26:66:2a:1d:af:da:6e:86:1d:31:66:42:
         60:d4:7e:90:75:6a:27:4c:db:da:26:55:6a:9b:cd:bf:5b:a5:
         2c:02:b3:37:f1:d1:9c:d9:70:e4:8d:ba:f7:6f:63:da:3a:51:
         ce:c4:63:23:37:4b:45:24:19:cf:a1:1e:94:75:80:60:89:3e:
         c1:fe:ba:dc:d7:02:70:70:0e:2b:46:3e:8d:89:66:55:d9:53:
         39:c8:ad:4f:d2:b2:a2:f8:45:a4:33:d8:ea:6e:c7:e8:f0:34:
         27:46:32:5a:9d:78:14:30:7a:24:4b:fb:81:56:a2:11:8d:27:
         6a:c0:46:53:8e:d4:02:d2:6a:6f:30:d1:e6:99:ca:ef:cf:05:
         21:3d:14:f1:25:76:9b:f8:e1:7f:25:e2:71:52:88:23:1e:5b:
         d2:60:08:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:43 2026 by rpki-client