Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
File:                     UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft (raw, json)
Hash identifier:          MIE6dUn4pcAHrWD25QnGWbubJOhDDcRzai60UluePzc=
Subject key identifier:   6E:00:61:A5:AD:79:4B:54:F9:37:DA:B0:D9:A4:FC:EC:5B:77:5D:8D
Authority key identifier: 53:38:02:E6:29:65:D4:58:4E:59:8D:59:B7:6A:92:8B:E5:AF:D9:71
Certificate issuer:       /CN=533802e62965d4584e598d59b76a928be5afd971
Certificate serial:       019CAB3426562DD0366BFCCB36B9073C0CF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
Manifest number:          03E9
Signing time:             Sun 01 Mar 2026 21:00:47 +0000
Manifest this update:     Sun 01 Mar 2026 21:00:47 +0000
Manifest next update:     Mon 02 Mar 2026 21:00:47 +0000
Files and hashes:         1: UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl (hash: o9epPuxt79lYk4A0JlGdBC4jwHZdW6QZe49Aba9Hlso=)
                          2: _ui81FBBiuw7bXFjjAu-AlY8ago.roa (hash: +W47PKSUEyOgp5p8G/Toro+Z87dMONYhdZgP4gDGUPI=)
                          3: ra_bl9yXslRJGJzxTDV_d-BlUpQ.roa (hash: wtAAXjDyWZtJfFcEXNFbtV3UJ/ZOa4GX5loIbK1mn74=)
                          4: wFmuZt6OG-oR7DBeq01Ww8HvPa4.roa (hash: a0H1kPyDShFzTVMDinn/3X1ONbp+NjLhweJzA1FQdjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:26:56:2d:d0:36:6b:fc:cb:36:b9:07:3c:0c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533802e62965d4584e598d59b76a928be5afd971
        Validity
            Not Before: Mar  1 21:00:47 2026 GMT
            Not After : Mar  2 21:00:47 2026 GMT
        Subject: CN=6e0061a5ad794b54f937dab0d9a4fcec5b775d8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c6:7f:8a:63:b1:34:e1:9c:2f:80:47:fe:24:
                    90:71:df:46:0b:78:35:5c:18:f7:cb:80:f0:3b:0b:
                    17:35:f3:52:e6:b3:f7:c5:dc:f3:64:ce:7e:da:05:
                    06:45:dd:d4:cd:18:87:f8:76:20:b7:55:c1:3c:b8:
                    3a:7a:4a:c4:7f:1d:cc:4b:14:84:65:c8:5c:3f:f1:
                    88:c1:49:46:c7:e0:71:c0:7b:49:b7:78:d6:00:37:
                    c2:d0:20:67:78:ea:f0:cc:1b:d5:0f:48:b3:e8:ee:
                    51:a3:d5:4c:68:b3:7d:83:5a:22:6a:61:fb:c9:5e:
                    b1:f5:6f:ab:dc:94:38:ad:f8:3b:e3:1b:89:76:e8:
                    67:77:21:98:5c:20:d2:a4:ca:50:51:23:6f:3b:e2:
                    44:e6:6a:90:e8:a5:16:86:08:41:35:5f:74:74:da:
                    77:43:c8:7b:85:e0:5a:e5:7c:b8:42:e0:35:38:0a:
                    03:5a:13:8a:14:ac:e1:f5:0a:25:8a:f2:6c:d5:71:
                    a6:ce:c9:a1:fc:64:33:88:04:c9:ab:35:63:da:6d:
                    4a:12:30:26:c0:24:dd:17:2f:f0:ed:31:d4:18:26:
                    41:ef:f4:56:8b:de:57:b7:72:8e:1d:f7:67:8e:55:
                    db:b5:73:63:dc:2d:f8:aa:a1:26:e8:98:b3:90:1d:
                    b3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:00:61:A5:AD:79:4B:54:F9:37:DA:B0:D9:A4:FC:EC:5B:77:5D:8D
            X509v3 Authority Key Identifier:
                keyid:53:38:02:E6:29:65:D4:58:4E:59:8D:59:B7:6A:92:8B:E5:AF:D9:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:42:7d:41:a1:64:c6:42:f5:a4:75:5c:cf:90:47:ea:c4:78:
         d8:40:9e:04:17:78:c1:1f:85:f3:71:02:fc:f7:b9:ce:33:e8:
         f0:57:01:1f:0a:76:7a:8c:59:d7:a8:d6:e8:8b:08:be:85:db:
         e9:34:6e:3c:9e:5b:31:e6:50:f5:00:aa:f7:7c:1e:3a:40:1f:
         76:24:c5:bf:37:9a:7f:2c:9b:a8:44:59:2f:33:a6:44:5e:89:
         04:ae:76:eb:58:80:d3:e4:01:c9:88:cc:7d:2d:f9:2b:74:bd:
         07:e1:fe:88:9c:12:61:08:ea:28:6f:6e:f7:d9:02:0b:67:2c:
         bc:34:36:45:46:dc:9c:9d:fa:82:0b:9a:ce:3e:f5:06:38:be:
         b1:85:1a:e3:cb:40:06:6c:56:a3:4c:74:db:df:3d:ac:bf:d2:
         b8:54:03:11:fd:7c:0b:d7:bd:9f:3b:d2:d5:ee:6f:19:d5:e1:
         88:4e:a2:89:8a:9e:aa:7b:f2:b2:2e:f7:25:f0:ff:91:26:40:
         30:6b:5a:af:87:2b:13:ce:68:e7:ba:8e:9f:11:e8:58:ef:ae:
         87:5e:57:a8:b9:29:00:ca:fd:6b:a8:1d:7d:63:26:7e:07:a0:
         68:ba:59:b8:1d:5d:78:46:5b:db:85:48:23:14:d2:28:61:bb:
         1c:71:da:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNCZWLdA2a/zLNrkHPAzyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMzgwMmU2Mjk2NWQ0NTg0ZTU5OGQ1OWI3NmE5MjhiZTVh
ZmQ5NzEwHhcNMjYwMzAxMjEwMDQ3WhcNMjYwMzAyMjEwMDQ3WjAzMTEwLwYDVQQD
Eyg2ZTAwNjFhNWFkNzk0YjU0ZjkzN2RhYjBkOWE0ZmNlYzViNzc1ZDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsZ/imOxNOGcL4BH/iSQcd9GC3g1
XBj3y4DwOwsXNfNS5rP3xdzzZM5+2gUGRd3UzRiH+HYgt1XBPLg6ekrEfx3MSxSE
ZchcP/GIwUlGx+BxwHtJt3jWADfC0CBneOrwzBvVD0iz6O5Ro9VMaLN9g1oiamH7
yV6x9W+r3JQ4rfg74xuJduhndyGYXCDSpMpQUSNvO+JE5mqQ6KUWhghBNV90dNp3
Q8h7heBa5Xy4QuA1OAoDWhOKFKzh9QolivJs1XGmzsmh/GQziATJqzVj2m1KEjAm
wCTdFy/w7THUGCZB7/RWi95Xt3KOHfdnjlXbtXNj3C34qqEm6JizkB2zpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4AYaWteUtU+TfasNmk/Oxbd12NMB8GA1UdIwQY
MBaAFFM4AuYpZdRYTlmNWbdqkovlr9lxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXpnQzVpbGwxRmhPV1kxWnQycVNpLVd2MlhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wMWE3M2EtOGRhMC00OGI5LWFhZWQt
YTIzYzEzMWMwZDM4LzEvVXpnQzVpbGwxRmhPV1kxWnQycVNpLVd2MlhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8wMWE3M2EtOGRhMC00OGI5LWFhZWQtYTIzYzEzMWMwZDM4
LzEvVXpnQzVpbGwxRmhPV1kxWnQycVNpLVd2MlhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcEJ9QaFk
xkL1pHVcz5BH6sR42ECeBBd4wR+F83EC/Pe5zjPo8FcBHwp2eoxZ16jW6IsIvoXb
6TRuPJ5bMeZQ9QCq93weOkAfdiTFvzeafyybqERZLzOmRF6JBK5261iA0+QByYjM
fS35K3S9B+H+iJwSYQjqKG9u99kCC2csvDQ2RUbcnJ36gguazj71Bji+sYUa48tA
BmxWo0x02989rL/SuFQDEf18C9e9nzvS1e5vGdXhiE6iiYqeqnvysi73JfD/kSZA
MGtar4crE85o57qOnxHoWO+uh15XqLkpAMr9a6gdfWMmfgegaLpZuB1deEZb24VI
IxTSKGG7HHHaGw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:01:32 2026 by rpki-client