Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.mft
File:                     UfIEU4aWnRHHQcO1ReAqAMElL3E.mft (raw, json)
Hash identifier:          9Mm2kPzwnpgyWmCGRmwH1cHzvpQgyTqbNcAyYTYfy5g=
Subject key identifier:   D6:73:48:AB:77:87:74:35:AB:EC:82:15:1A:20:04:B4:F6:31:41:89
Authority key identifier: 51:F2:04:53:86:96:9D:11:C7:41:C3:B5:45:E0:2A:00:C1:25:2F:71
Certificate issuer:       /CN=51f2045386969d11c741c3b545e02a00c1252f71
Certificate serial:       019CAC46801007DE464884CC778A23E8869C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UfIEU4aWnRHHQcO1ReAqAMElL3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.mft
Manifest number:          0F2A
Signing time:             Mon 02 Mar 2026 02:00:27 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:27 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:27 +0000
Files and hashes:         1: CD6jTd_TdOPKGlsQYuA0aPGO26g.roa (hash: t58/eGwC58jwWOrJ22eZzC9bcrP/pHmuhrh6+2TXzK4=)
                          2: UfIEU4aWnRHHQcO1ReAqAMElL3E.crl (hash: NEg8vH7MX02Xx3v4dby20bV69e3/u61NNB0WxnevqwQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UfIEU4aWnRHHQcO1ReAqAMElL3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:80:10:07:de:46:48:84:cc:77:8a:23:e8:86:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51f2045386969d11c741c3b545e02a00c1252f71
        Validity
            Not Before: Mar  2 02:00:27 2026 GMT
            Not After : Mar  3 02:00:27 2026 GMT
        Subject: CN=d67348ab77877435abec82151a2004b4f6314189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8e:14:e0:ed:fe:2c:95:e3:c1:2f:2a:9d:03:
                    1b:85:06:c0:4e:96:1f:98:39:2b:91:f1:c2:6c:13:
                    b8:07:3a:25:60:1b:5b:9c:d2:ee:a8:15:11:52:ad:
                    0a:60:65:74:87:59:00:8d:d7:c8:e3:bb:06:99:76:
                    14:8c:ba:62:a5:dc:47:3f:8e:6a:f5:a6:b7:0f:62:
                    af:ec:18:e4:41:39:f2:d3:e2:b5:3e:a4:fc:5c:cc:
                    90:4c:6d:71:70:36:80:96:f5:5d:5e:be:29:0c:08:
                    d4:20:fb:8d:ff:de:c9:51:be:6f:61:a6:92:71:de:
                    c1:37:63:b0:ce:c7:d1:d8:97:10:24:74:64:d5:e8:
                    c6:97:74:8b:d2:7d:9c:3a:5d:a1:a6:81:6a:23:b0:
                    55:98:3e:4a:3f:b8:67:51:59:68:1b:98:26:bc:8e:
                    55:59:87:54:33:40:37:33:3f:2c:c5:d8:70:3d:92:
                    15:2f:9b:eb:4d:81:aa:3f:a8:40:6d:a5:a9:1b:4f:
                    3e:19:bf:8e:42:ac:30:13:f0:c9:00:f9:be:b2:fd:
                    ab:d6:c3:d5:73:af:45:d8:8d:2d:c3:cb:66:b5:18:
                    f5:6a:e6:fb:88:db:8f:c5:2b:9f:03:f2:27:e0:22:
                    8a:f6:c0:b2:63:76:95:86:fb:0f:93:48:c4:af:f6:
                    d6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:73:48:AB:77:87:74:35:AB:EC:82:15:1A:20:04:B4:F6:31:41:89
            X509v3 Authority Key Identifier:
                keyid:51:F2:04:53:86:96:9D:11:C7:41:C3:B5:45:E0:2A:00:C1:25:2F:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfIEU4aWnRHHQcO1ReAqAMElL3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ca:f7:cc:b3:7b:de:e4:b6:1c:3b:31:36:4d:6b:50:db:f6:
         25:fd:0f:a8:c6:1a:ea:fa:45:c4:6e:6d:78:b3:03:d1:4c:3c:
         3f:46:b9:85:8d:8b:be:02:2e:94:fe:b8:22:90:f7:68:58:cc:
         c4:20:e2:b3:00:d0:d1:30:46:c5:52:63:11:e7:60:15:1f:0b:
         e8:ca:0e:7c:3d:9c:4f:ef:7e:ed:ea:86:0c:15:26:03:e4:73:
         0a:de:6e:20:07:78:c5:d3:54:61:bf:15:88:7f:f5:62:f2:e5:
         c2:8e:b5:44:13:c0:8b:ec:6c:ca:47:3c:7f:41:4d:63:7e:65:
         7f:d5:03:a6:94:fa:93:0e:45:14:7a:f4:80:cc:29:84:51:ae:
         22:85:0c:98:2f:02:d6:f6:99:b9:c6:eb:fb:db:43:a3:18:4b:
         0e:35:9f:5b:2d:92:42:06:93:1c:1f:0d:9d:1a:e3:8e:94:e1:
         a3:41:b4:4d:8e:d9:c5:8b:ae:af:91:bd:a8:7e:a0:ad:5f:87:
         11:64:f9:99:0c:56:ef:26:49:b6:84:be:62:f8:bb:06:5e:05:
         35:76:21:a2:99:a8:82:0a:b7:29:05:b5:14:40:fd:ca:c1:e4:
         ec:0d:14:aa:46:a4:57:81:66:13:16:29:3c:83:32:9d:a5:33:
         69:f1:10:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:02 2026 by rpki-client