Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft
File:                     uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft (raw, json)
Hash identifier:          HnPTqC/dq5wJdregj/FVSxbdIgSuzgFCO/hJAk3Had4=
Subject key identifier:   3F:01:03:B1:57:32:B9:66:9F:E7:2E:67:34:BF:5D:9E:9C:9D:64:B2
Authority key identifier: BA:11:AE:23:A3:E9:C8:BC:6F:5A:79:C7:15:FA:99:A7:8C:F8:5D:FE
Certificate issuer:       /CN=ba11ae23a3e9c8bc6f5a79c715fa99a78cf85dfe
Certificate serial:       019CAAC663BD33501A98EBE562655689C722
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft
Manifest number:          0B7A
Signing time:             Sun 01 Mar 2026 19:00:54 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:54 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:54 +0000
Files and hashes:         1: KP9ZK8Mm0n7oCIGFwbCMB_IJtD4.roa (hash: 9E7/dOsgEeSFLc8nXYfohFpko6PoMkA7jZYSR5wWOOU=)
                          2: uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl (hash: N01e4y+yVU1/MyMMi4UBxNUyQ0IRPeWms1/45MBKOxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 19:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:63:bd:33:50:1a:98:eb:e5:62:65:56:89:c7:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba11ae23a3e9c8bc6f5a79c715fa99a78cf85dfe
        Validity
            Not Before: Mar  1 19:00:54 2026 GMT
            Not After : Mar  2 19:00:54 2026 GMT
        Subject: CN=3f0103b15732b9669fe72e6734bf5d9e9c9d64b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5e:9a:b7:bd:13:9d:53:63:a9:62:10:f8:5f:
                    79:02:0a:9e:5a:e4:67:47:fe:3c:05:5a:44:b6:1a:
                    dc:0d:f5:c7:79:ad:c8:df:37:81:e9:75:01:5a:61:
                    ca:73:2b:0a:3c:cf:ff:97:e4:1a:0a:8b:d1:40:a3:
                    a7:ab:45:92:9d:74:46:25:c8:d3:49:de:fd:a9:36:
                    d0:0b:fd:ac:a9:fd:3d:f0:d1:0e:2d:37:0c:4c:e4:
                    ae:22:40:80:92:93:6f:d0:0b:7b:aa:47:49:b1:51:
                    8c:09:10:b1:be:67:b3:d4:1e:81:46:4a:6c:34:7b:
                    26:4c:58:c1:97:6f:fb:02:73:ee:fa:7e:c4:db:0b:
                    cf:e2:ba:79:ab:29:a2:b2:93:c8:6e:a3:eb:08:90:
                    8b:56:8f:c2:77:3d:c5:ab:d6:81:fb:5d:0c:59:a6:
                    fa:2a:7b:4b:3c:24:bb:ac:54:7d:ac:5a:44:69:a5:
                    84:54:f1:8b:13:32:33:25:b5:e4:32:26:27:12:05:
                    8f:a4:44:fd:c2:12:31:10:6e:81:33:93:28:b4:ce:
                    e1:49:80:b5:27:ab:50:c3:41:7e:61:14:06:db:3b:
                    ec:d3:20:32:d3:61:e9:ce:65:b9:9f:ab:71:1f:91:
                    4d:53:ec:88:b4:e0:52:f8:26:ce:92:f1:78:19:d2:
                    5a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:01:03:B1:57:32:B9:66:9F:E7:2E:67:34:BF:5D:9E:9C:9D:64:B2
            X509v3 Authority Key Identifier:
                keyid:BA:11:AE:23:A3:E9:C8:BC:6F:5A:79:C7:15:FA:99:A7:8C:F8:5D:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:be:40:42:3d:d4:e0:e2:71:d9:6a:9b:b1:6c:1c:a2:f4:21:
         fd:a8:af:cc:06:35:46:59:b0:c2:d1:8c:36:56:2b:cd:ce:0d:
         60:60:93:e8:09:7d:75:e8:b9:7b:a2:0e:00:1c:de:5b:e6:de:
         45:a6:80:fa:02:1e:3b:94:56:cf:16:9c:05:fd:0a:d9:18:bd:
         02:10:0e:60:71:e9:3c:cf:08:40:49:4f:c5:fe:33:61:70:90:
         bb:8d:90:4e:2a:b1:99:68:c5:9c:c0:c3:c8:b4:8b:98:10:f4:
         dc:40:aa:29:b1:03:c9:14:41:34:f2:f2:ae:2a:90:7c:02:38:
         a6:ff:1d:89:86:a6:09:ea:a8:68:71:21:f3:9e:3a:b6:82:f9:
         51:8d:1a:d1:a8:be:ff:93:9e:83:8c:41:07:14:f0:7d:6c:0e:
         ef:ac:eb:b9:83:f0:b9:bf:27:45:82:aa:3a:80:ee:77:0c:d1:
         15:86:96:cf:28:6d:25:e6:57:bb:c8:91:ef:69:d7:a9:ac:c7:
         b4:4f:9f:3a:84:9d:96:5c:6b:13:90:dc:29:b1:15:6d:f5:09:
         5c:19:98:1f:9f:85:70:1b:2b:3d:a2:a5:18:81:a0:cc:b0:7e:
         fa:79:c0:ff:7e:a6:9f:93:08:a4:44:51:b7:e8:2b:3e:9c:96:
         39:33:d1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:46:55 2026 by rpki-client