Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.mft
File:                     UeY89ghzETR_MU8k4mlsf2zqbXI.mft (raw, json)
Hash identifier:          1ogm4ZpzizAKgqSIED87EmaQChIKANRuKXO+8vH2wQk=
Subject key identifier:   9B:A5:38:40:E9:04:D7:05:EF:96:6C:E5:30:87:E2:52:DF:FB:72:67
Authority key identifier: 51:E6:3C:F6:08:73:11:34:7F:31:4F:24:E2:69:6C:7F:6C:EA:6D:72
Certificate issuer:       /CN=51e63cf6087311347f314f24e2696c7f6cea6d72
Certificate serial:       019CA86AF08A2400CC8AAB7E0E14B1DED54C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeY89ghzETR_MU8k4mlsf2zqbXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.mft
Manifest number:          EF
Signing time:             Sun 01 Mar 2026 08:01:46 +0000
Manifest this update:     Sun 01 Mar 2026 08:01:46 +0000
Manifest next update:     Mon 02 Mar 2026 08:01:46 +0000
Files and hashes:         1: 64cOQxiZnrejgF_yLbuSNNh-5DY.asa (hash: /CmbqsnAzo+sIy4VN1xw/guWwGwOsWmQxl16cZjywCU=)
                          2: UeY89ghzETR_MU8k4mlsf2zqbXI.crl (hash: CbbnhQfDzc6K5BIHAb7aMsBy4DnGHeWsot/FZJhb4fE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UeY89ghzETR_MU8k4mlsf2zqbXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a8:6a:f0:8a:24:00:cc:8a:ab:7e:0e:14:b1:de:d5:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e63cf6087311347f314f24e2696c7f6cea6d72
        Validity
            Not Before: Mar  1 08:01:46 2026 GMT
            Not After : Mar  2 08:01:46 2026 GMT
        Subject: CN=9ba53840e904d705ef966ce53087e252dffb7267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:30:30:f7:b2:83:9a:da:ad:76:cb:44:94:a3:
                    77:35:78:c1:ca:24:94:8c:0b:ed:98:69:8f:1d:d1:
                    86:45:b0:75:30:3e:fc:ec:43:12:91:88:b2:0e:2b:
                    5b:44:84:89:f8:5a:56:ce:40:7a:01:ed:de:df:f9:
                    a1:fb:d8:8b:d2:2b:d7:d8:01:d2:36:1c:74:d0:7e:
                    63:be:b1:e5:08:da:21:1e:88:54:2a:5f:f4:a6:87:
                    38:19:b7:12:d7:34:25:8d:99:ed:38:94:29:23:ef:
                    d8:34:de:cf:99:85:a6:88:66:a6:ba:f2:29:f0:53:
                    59:3c:e9:53:b6:ac:3e:77:be:0f:95:fa:e0:1b:fc:
                    5d:77:a0:8a:45:91:43:9c:9e:33:a1:71:32:31:f0:
                    1d:25:52:38:37:ba:77:c7:95:0a:ef:41:11:5a:43:
                    9c:7f:6d:75:5d:91:92:fa:a3:6b:4d:8d:09:b9:49:
                    b2:98:99:0c:bd:ff:ae:d3:b8:4d:d7:0a:08:ec:1a:
                    9c:4c:b2:d5:01:9e:78:de:3c:f3:c6:8f:a4:08:68:
                    30:f0:89:9f:ba:b3:5d:90:38:ed:b2:55:a6:7e:2e:
                    5b:42:dd:91:49:e3:4d:8a:84:ec:f1:7a:68:01:f1:
                    78:39:de:38:8f:af:5c:ed:6c:d1:0c:0f:84:4a:65:
                    0b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A5:38:40:E9:04:D7:05:EF:96:6C:E5:30:87:E2:52:DF:FB:72:67
            X509v3 Authority Key Identifier:
                keyid:51:E6:3C:F6:08:73:11:34:7F:31:4F:24:E2:69:6C:7F:6C:EA:6D:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeY89ghzETR_MU8k4mlsf2zqbXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:71:72:4a:17:e6:ee:78:8d:f2:32:0e:db:ca:f2:24:27:f5:
         3e:be:9f:ee:d2:cf:75:c1:2a:da:c3:16:35:b2:5c:d3:9e:70:
         ec:c6:3a:61:89:b1:ba:43:c8:a1:f2:df:75:08:38:48:56:53:
         e6:4e:35:46:de:e1:05:10:0d:cf:56:ac:3b:13:fb:3f:02:d9:
         e3:6a:2a:9e:1b:03:e3:88:be:1a:3d:17:e8:40:b1:02:4d:2e:
         a3:03:ed:9e:0c:24:9c:79:b6:8a:88:67:e0:c0:eb:8b:97:44:
         9c:a8:54:23:02:99:47:52:07:b5:94:c7:85:57:6c:0a:39:88:
         22:35:de:5c:13:d5:b2:c6:f7:34:df:82:92:ae:68:82:22:49:
         d0:ba:86:9c:66:dd:3e:7e:a4:4a:8a:85:4b:13:e1:59:00:a2:
         3a:12:9b:42:26:2b:3a:33:10:a1:a1:c8:a7:ca:e4:1f:3a:53:
         f4:92:eb:5d:f0:fd:57:ea:ce:a8:bf:97:14:e9:55:c5:fc:07:
         e4:a0:91:c9:8f:dd:2a:a9:c8:0f:ac:52:1f:63:8f:03:26:d1:
         2f:c7:5f:79:2d:12:ec:1e:93:17:da:23:55:67:88:e2:5c:02:
         7d:0e:48:e2:72:e2:58:ae:42:6c:b9:0c:b5:f2:dc:0e:56:6b:
         a9:a6:61:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:28:33 2026 by rpki-client