Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft
File:                     i_UbRkYUeZl2V31e96gHjqgMF0M.mft (raw, json)
Hash identifier:          3LXPEGKe27mm+JZGoj1xQvZu3lHyQ+B7IhHylnQBDmU=
Subject key identifier:   4C:ED:67:6D:72:C2:4B:9C:6F:18:3B:98:40:8B:21:EC:71:9F:E7:C7
Authority key identifier: 8B:F5:1B:46:46:14:79:99:76:57:7D:5E:F7:A8:07:8E:A8:0C:17:43
Certificate issuer:       /CN=8bf51b464614799976577d5ef7a8078ea80c1743
Certificate serial:       019CAA213FFA67DC9CD32CBE490EEDC71BEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft
Manifest number:          0732
Signing time:             Sun 01 Mar 2026 16:00:31 +0000
Manifest this update:     Sun 01 Mar 2026 16:00:31 +0000
Manifest next update:     Mon 02 Mar 2026 16:00:31 +0000
Files and hashes:         1: i_UbRkYUeZl2V31e96gHjqgMF0M.crl (hash: jXuzwoOmC4APGYgaz3XyMxubp6ysfbpqw4tkQBydoLg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 16:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:3f:fa:67:dc:9c:d3:2c:be:49:0e:ed:c7:1b:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bf51b464614799976577d5ef7a8078ea80c1743
        Validity
            Not Before: Mar  1 16:00:31 2026 GMT
            Not After : Mar  2 16:00:31 2026 GMT
        Subject: CN=4ced676d72c24b9c6f183b98408b21ec719fe7c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6f:59:d3:51:e1:17:d5:94:57:9a:d0:06:31:
                    d6:8b:17:70:38:1a:9d:77:81:d7:6f:74:91:bf:53:
                    59:03:3f:5c:22:3c:16:86:8a:b3:25:78:42:a7:43:
                    f9:70:0e:73:25:1c:45:4c:d5:63:fa:13:c0:8a:02:
                    cd:04:87:74:f2:d4:ed:50:f8:1b:c7:96:27:e4:d6:
                    d1:a3:4e:eb:6e:31:10:19:27:33:c6:7e:4e:3e:18:
                    85:a6:20:f8:ce:0b:ed:13:2e:cf:b4:89:a2:b2:1b:
                    3e:96:3b:49:81:b9:e1:60:45:4b:cb:65:37:91:e2:
                    bf:fd:fb:f0:84:a9:00:d7:82:00:91:bc:fe:be:8e:
                    f5:ec:93:2c:58:ca:4f:c9:a0:ca:5b:ef:b2:a8:c8:
                    cf:88:4c:bf:a7:7f:35:11:7c:e4:56:9a:df:6d:d2:
                    16:74:92:10:22:47:67:29:ff:56:19:31:8a:26:3a:
                    cc:a5:e3:6c:13:8a:76:ad:b2:25:db:ca:1d:b7:7f:
                    ac:83:c6:99:41:a1:d6:57:90:b4:e1:67:ec:15:77:
                    65:93:a8:e3:81:ca:c1:df:1a:1a:08:52:87:dd:7c:
                    5b:9a:af:d6:6a:f7:5f:f1:b8:7e:f9:02:57:34:90:
                    59:2a:c2:02:5e:87:46:23:e9:b7:23:5e:a5:58:2f:
                    46:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:ED:67:6D:72:C2:4B:9C:6F:18:3B:98:40:8B:21:EC:71:9F:E7:C7
            X509v3 Authority Key Identifier:
                keyid:8B:F5:1B:46:46:14:79:99:76:57:7D:5E:F7:A8:07:8E:A8:0C:17:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:32:f5:7b:73:3e:44:40:1c:ff:91:65:33:2c:81:9b:02:95:
         ab:c3:03:1b:bc:db:ca:23:51:92:64:e6:b9:f7:b5:aa:cf:34:
         85:e8:44:c6:16:4e:e7:30:55:38:33:a3:26:be:68:02:1a:df:
         ad:73:38:78:88:d7:ba:30:67:19:0d:77:04:d1:68:08:6d:ce:
         fd:6f:f1:0a:a3:b9:16:ba:63:5e:ba:07:2c:6a:9a:76:51:41:
         de:38:6f:3a:89:65:30:50:6d:ad:f3:a8:2f:f8:61:df:6f:6a:
         86:97:93:b8:a2:da:9b:b4:4f:f4:f2:30:7e:21:6d:7d:54:58:
         c1:f7:4f:87:ca:c9:6a:a4:ea:d5:fa:f8:be:9a:e5:d5:85:1b:
         e2:12:92:33:36:4f:8e:fc:ff:6d:02:3e:12:b4:78:9a:a3:7d:
         5e:b0:49:eb:25:2a:e5:b9:99:60:b2:fd:a9:53:44:ee:2c:54:
         f2:6a:4a:12:20:f1:0c:87:dd:3d:46:e6:aa:99:b5:4f:68:e5:
         e1:ae:e8:72:03:9d:a3:14:d6:08:6e:aa:7a:3f:78:59:35:4e:
         ba:b6:22:41:89:7b:6a:99:ae:69:58:e5:7a:97:f6:0b:8c:de:
         cd:57:6e:0c:63:aa:ff:a5:bd:c2:f9:07:a7:d3:ee:8c:62:15:
         41:49:b0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:27 2026 by rpki-client