Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft
File:                     UdspKXLBDGn5fs0k8vtptPZ3beg.mft (raw, json)
Hash identifier:          2l+Mo8yYBXc5EwQh1fUJCiCI4cBhzIBhnkt/9iQBBPY=
Subject key identifier:   69:88:CD:28:8C:F5:44:70:12:8E:79:E1:17:85:76:9D:7D:37:BC:7C
Authority key identifier: 51:DB:29:29:72:C1:0C:69:F9:7E:CD:24:F2:FB:69:B4:F6:77:6D:E8
Certificate issuer:       /CN=51db292972c10c69f97ecd24f2fb69b4f6776de8
Certificate serial:       019CAB6B39D27CDC90DFE6B14D5AA7ED7945
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UdspKXLBDGn5fs0k8vtptPZ3beg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft
Manifest number:          1843
Signing time:             Sun 01 Mar 2026 22:00:56 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:56 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:56 +0000
Files and hashes:         1: UdspKXLBDGn5fs0k8vtptPZ3beg.crl (hash: xFblV+6fwcLt50TJQF4atHByrdu8DAHoXI//E4YMeVw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UdspKXLBDGn5fs0k8vtptPZ3beg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:39:d2:7c:dc:90:df:e6:b1:4d:5a:a7:ed:79:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51db292972c10c69f97ecd24f2fb69b4f6776de8
        Validity
            Not Before: Mar  1 22:00:56 2026 GMT
            Not After : Mar  2 22:00:56 2026 GMT
        Subject: CN=6988cd288cf54470128e79e11785769d7d37bc7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:55:b7:2d:5e:9a:a5:e8:34:b5:ee:6a:32:c9:
                    9a:43:db:15:92:42:0b:55:0c:d1:8d:14:68:a2:af:
                    a1:49:dc:49:4d:f0:97:f4:a0:29:7f:bb:f1:38:84:
                    ec:0f:79:b8:b2:b4:a9:df:0b:3a:2d:14:b0:c3:f6:
                    2e:22:53:f5:cf:21:d8:f4:e4:db:c3:d9:85:51:22:
                    d0:7e:01:2f:f2:ab:66:09:5c:ed:c9:7b:c7:79:58:
                    1c:70:d2:c7:20:99:b6:bd:94:61:79:3b:88:90:c7:
                    c2:43:cf:d5:7c:c1:a7:8e:f0:37:2f:dd:f3:12:f5:
                    e9:b1:7b:87:d6:dd:3e:84:87:17:6a:93:d5:8d:cf:
                    35:1b:b0:a4:b6:86:8b:cc:a6:ba:ca:36:d1:83:b7:
                    16:20:f9:72:48:bf:c0:30:b1:9c:c6:bb:e9:49:1b:
                    36:bd:eb:8f:9a:aa:10:44:a0:3e:28:78:10:d0:b1:
                    b5:7a:86:5b:77:a4:55:f4:b1:0c:0a:b9:68:84:b6:
                    37:60:1b:ef:1a:e1:22:e4:42:5b:35:d5:15:b8:17:
                    ed:a5:1a:f3:b3:41:da:61:8a:99:d5:bf:80:69:fe:
                    57:73:29:ad:46:db:8e:03:50:13:3f:f8:1d:af:b4:
                    47:15:65:03:8c:9f:3f:f2:aa:ee:d5:23:f3:70:93:
                    19:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:88:CD:28:8C:F5:44:70:12:8E:79:E1:17:85:76:9D:7D:37:BC:7C
            X509v3 Authority Key Identifier:
                keyid:51:DB:29:29:72:C1:0C:69:F9:7E:CD:24:F2:FB:69:B4:F6:77:6D:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UdspKXLBDGn5fs0k8vtptPZ3beg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:f7:e6:a4:f9:9e:cc:4e:22:aa:39:ca:28:7c:fe:2d:b0:d9:
         32:8d:b4:4c:b3:e7:c3:19:01:7f:26:3f:ef:e6:ae:34:1c:82:
         37:a8:2c:aa:b4:fd:e6:e6:4f:5b:07:54:ed:6f:ad:93:46:97:
         5b:25:fb:fc:ab:f7:c7:2b:e9:07:ad:26:7a:11:7c:d3:13:a2:
         7e:6b:96:f4:66:91:13:34:ba:7b:f7:12:ad:da:62:dd:41:7d:
         63:70:36:4f:34:d7:cd:88:dd:6c:0e:ad:7f:b4:30:42:a2:1f:
         30:54:bd:d8:51:3c:97:c2:b4:f7:23:ce:a1:16:81:4c:3d:aa:
         8b:3b:34:38:c4:1f:ed:02:27:3a:ad:2a:33:4a:e6:67:8c:07:
         f6:ca:c6:cf:4c:35:ce:be:33:1a:73:ad:4f:cb:06:76:dd:b7:
         e8:d2:58:0c:2a:f7:64:80:e6:3a:2c:b5:cb:e3:d9:56:b6:71:
         39:a4:18:0d:d1:8f:fc:ff:31:a4:9b:07:03:86:aa:d7:31:d6:
         d5:64:e0:bb:f0:47:68:b5:e9:16:89:30:a3:3d:1d:a8:e3:5b:
         1b:c0:d9:d7:65:b7:b3:c5:d0:a9:1d:2f:87:4c:d9:13:a0:a7:
         f0:5d:6e:ec:1e:3d:b4:e6:53:03:61:35:06:0d:f2:c8:27:48:
         00:c8:3a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:17 2026 by rpki-client