Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.mft
File:                     uIog4vueEVBGObZ8_sCv6z8wZpA.mft (raw, json)
Hash identifier:          16i/9dRSDaWz/xWmBkA6AqBAZm1gXa/Cow1GsgNvwRA=
Subject key identifier:   80:6E:4F:E4:F2:57:00:E3:CC:39:5D:9A:1C:34:A7:7A:9A:AA:FB:A2
Authority key identifier: B8:8A:20:E2:FB:9E:11:50:46:39:B6:7C:FE:C0:AF:EB:3F:30:66:90
Certificate issuer:       /CN=b88a20e2fb9e11504639b67cfec0afeb3f306690
Certificate serial:       019CAB6AEB15327B49438FC5E4FA5CBF7E4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uIog4vueEVBGObZ8_sCv6z8wZpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.mft
Manifest number:          1843
Signing time:             Sun 01 Mar 2026 22:00:36 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:36 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:36 +0000
Files and hashes:         1: uIog4vueEVBGObZ8_sCv6z8wZpA.crl (hash: KAaN2JEZmseXFAnmIpuknavJHROhpYfJtQYL7JzwbNk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uIog4vueEVBGObZ8_sCv6z8wZpA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6a:eb:15:32:7b:49:43:8f:c5:e4:fa:5c:bf:7e:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b88a20e2fb9e11504639b67cfec0afeb3f306690
        Validity
            Not Before: Mar  1 22:00:36 2026 GMT
            Not After : Mar  2 22:00:36 2026 GMT
        Subject: CN=806e4fe4f25700e3cc395d9a1c34a77a9aaafba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:55:fa:10:29:51:c7:30:8f:40:f3:b8:4a:ab:
                    3a:76:ef:a4:69:39:65:b7:8f:ad:92:c1:a6:6e:67:
                    1c:11:13:4e:5c:79:d5:15:27:22:73:72:78:58:63:
                    f7:70:84:02:3c:c7:46:75:25:77:f9:a1:f5:8c:38:
                    9b:44:ee:0f:ab:0b:2d:b8:e0:83:6c:31:ee:d6:df:
                    1e:b3:21:29:77:11:93:3f:86:e7:40:60:4a:09:16:
                    c7:75:0a:fb:53:99:6b:db:90:54:47:6d:ac:c5:30:
                    ea:c9:68:55:07:b5:bd:23:c1:a2:14:c2:50:af:32:
                    13:1e:da:52:98:01:7d:5d:fb:bb:ad:0f:38:30:3d:
                    89:3e:44:ea:00:ec:01:03:c5:29:03:03:d0:71:aa:
                    74:13:bb:3e:68:3f:98:9f:b3:29:8d:c3:d4:76:44:
                    cd:17:a0:1e:45:e9:19:c6:82:d2:27:a3:1c:1e:91:
                    26:dc:80:77:d5:81:ee:c9:22:a5:8b:fe:aa:3f:ce:
                    35:d7:20:e9:bb:b4:75:16:06:04:b4:98:70:48:12:
                    30:e0:6f:4f:cd:17:ff:fa:a6:ce:7e:7d:a3:e6:6d:
                    fa:73:db:3b:07:fe:3b:47:fc:c4:47:70:db:53:00:
                    cf:ff:e5:ce:d6:b2:be:96:51:9c:6b:00:19:cf:f0:
                    49:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:6E:4F:E4:F2:57:00:E3:CC:39:5D:9A:1C:34:A7:7A:9A:AA:FB:A2
            X509v3 Authority Key Identifier:
                keyid:B8:8A:20:E2:FB:9E:11:50:46:39:B6:7C:FE:C0:AF:EB:3F:30:66:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uIog4vueEVBGObZ8_sCv6z8wZpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/abb62e-4b75-44c3-8fb3-18ccbc995bf8/1/uIog4vueEVBGObZ8_sCv6z8wZpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:ea:52:19:ed:cd:bb:bb:d8:74:c0:b7:d8:8d:3b:a1:83:92:
         2f:1f:4a:a9:78:03:db:9c:f8:ef:ca:e7:26:27:2d:09:09:81:
         70:b3:8b:83:01:a8:df:87:63:c3:48:70:4a:03:6a:0c:38:88:
         af:b7:1a:bc:53:99:d9:fe:1b:b0:5d:84:71:56:f0:94:67:24:
         3a:1c:36:6c:9a:ef:80:25:12:50:17:c2:d0:f1:4b:ac:f2:52:
         c0:95:9c:8c:0d:f6:22:1d:e4:dc:e4:e1:aa:fa:f1:98:0a:e3:
         ab:5a:44:08:2b:4c:a5:cc:0c:36:6a:d7:db:fd:bf:5c:9a:1e:
         18:c2:c9:7e:c9:87:c1:c6:73:8c:7d:f2:2c:76:b4:f7:cc:e3:
         45:10:05:23:a9:40:b0:d8:72:48:c4:f4:c1:11:5f:b2:7e:6b:
         89:95:a7:c4:df:c8:74:6a:fc:90:c9:43:35:55:c6:73:ed:22:
         23:36:cc:35:c9:d1:7a:9e:a8:4c:dd:ed:53:8a:09:3b:13:00:
         25:35:2b:a3:50:8e:ad:b4:56:ab:fc:03:f4:75:71:09:32:75:
         54:e5:dc:63:a0:1b:8b:b3:b2:af:50:1d:a0:dc:6a:49:7c:8d:
         26:f9:cf:40:9b:db:85:21:7d:1f:b8:68:77:83:fa:68:3d:eb:
         91:d2:99:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:23 2026 by rpki-client