Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft
File:                     uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft (raw, json)
Hash identifier:          vb+8KIlCLi7GU/h0K6tSb+Yx934+h4jeJeECzwfsU5A=
Subject key identifier:   0D:F5:69:B8:A7:EF:C5:0B:48:72:FC:5E:7B:6B:2B:85:3F:54:A3:0F
Authority key identifier: B8:4B:63:05:86:58:A5:9E:CB:BF:44:39:5B:F1:6F:78:0D:C9:29:CC
Certificate issuer:       /CN=b84b63058658a59ecbbf44395bf16f780dc929cc
Certificate serial:       019CA9EB1A9781CCF240D3E80954391AEE14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft
Manifest number:          1843
Signing time:             Sun 01 Mar 2026 15:01:22 +0000
Manifest this update:     Sun 01 Mar 2026 15:01:22 +0000
Manifest next update:     Mon 02 Mar 2026 15:01:22 +0000
Files and hashes:         1: uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl (hash: VYj4XsowW7ugmkOVCxPC9Cmcyeu+bb3DbOXzBJKZv9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:eb:1a:97:81:cc:f2:40:d3:e8:09:54:39:1a:ee:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84b63058658a59ecbbf44395bf16f780dc929cc
        Validity
            Not Before: Mar  1 15:01:22 2026 GMT
            Not After : Mar  2 15:01:22 2026 GMT
        Subject: CN=0df569b8a7efc50b4872fc5e7b6b2b853f54a30f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bb:d4:d8:5a:e6:05:14:9a:5c:83:0b:e3:ed:
                    ec:ea:6c:bc:b9:27:ae:f7:4e:d2:7b:07:09:dc:71:
                    c1:ba:0c:f6:0a:78:63:c4:f4:2d:4c:28:c3:41:07:
                    1f:e4:4f:ff:7e:e9:ae:03:e5:c0:87:d4:f7:41:2a:
                    3f:5b:37:42:12:57:57:a7:29:83:8c:6f:96:ed:07:
                    57:ad:e0:6b:b4:01:38:c7:56:8f:44:21:e2:b2:19:
                    2a:8e:0c:9d:5e:f4:36:8d:57:17:d9:cb:80:77:6a:
                    be:f8:32:0c:9d:13:e5:f5:75:d6:d1:31:7e:13:c7:
                    be:2f:15:88:62:bf:a7:5a:a0:4d:78:5b:bc:e3:10:
                    ab:b8:97:1b:1f:e6:cb:42:45:ef:04:93:08:8c:04:
                    77:48:a5:fb:8c:14:6d:08:a6:77:b4:26:01:e9:a5:
                    c7:be:d4:14:9c:20:52:b9:5d:78:0e:64:8b:06:57:
                    04:06:f1:cc:d0:ff:10:ff:72:44:41:d9:d9:05:7f:
                    82:b9:0f:7a:6a:f6:86:27:e0:01:dd:5a:83:2f:25:
                    69:2d:26:c6:09:b6:41:26:b9:b0:37:7c:74:e1:9f:
                    33:ec:b7:f9:d2:5f:b2:45:57:d4:77:d5:36:8b:94:
                    af:07:53:d5:ae:28:19:2e:1b:e5:29:95:82:24:ab:
                    f8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F5:69:B8:A7:EF:C5:0B:48:72:FC:5E:7B:6B:2B:85:3F:54:A3:0F
            X509v3 Authority Key Identifier:
                keyid:B8:4B:63:05:86:58:A5:9E:CB:BF:44:39:5B:F1:6F:78:0D:C9:29:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1ba03d-424d-47ce-8bc4-a135cb559758/1/uEtjBYZYpZ7Lv0Q5W_FveA3JKcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:b9:2d:3d:c9:95:5b:d5:2a:f9:29:64:2c:08:90:33:8e:23:
         f2:e0:a8:fb:83:d8:d7:31:e0:d0:26:8c:9c:1e:a2:1f:ad:df:
         30:41:2a:5d:24:f0:e4:5a:9e:14:c2:bf:5a:cb:83:e0:0b:82:
         ee:9e:ca:29:57:d2:16:7f:ba:db:df:ba:2a:b9:f6:ad:87:e5:
         ef:70:f7:5f:75:57:e8:25:df:41:2e:bc:1a:97:91:68:7a:a8:
         59:06:b2:80:ce:8b:e1:1e:a7:f4:42:3d:08:1c:b9:8d:5c:70:
         22:e5:96:6a:97:33:8f:78:39:29:02:21:a3:34:4c:08:5e:c0:
         4d:42:81:f9:c0:39:83:17:d0:29:b8:50:e9:c1:f4:0c:bc:a7:
         0e:b7:94:a9:a5:70:df:0b:d1:18:dd:b4:ae:aa:18:d2:bf:df:
         ad:18:10:d0:98:67:89:ed:fe:cc:cb:2b:24:8d:5a:53:4d:92:
         19:bb:46:da:30:ff:92:4e:26:13:81:34:56:88:3c:09:68:e6:
         1f:ee:77:99:8d:81:ba:07:98:9d:6f:a7:5f:cb:75:0f:a8:64:
         1f:54:a5:87:c6:ea:51:9d:7d:2b:8b:ca:d1:bb:1b:e7:97:6f:
         08:80:af:64:29:50:86:fd:0d:59:9c:c4:53:ee:ef:f7:0c:fd:
         f1:42:6d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:10:36 2026 by rpki-client