Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft
File:                     uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft (raw, json)
Hash identifier:          za/Wekvw1kJ52QZPANInNA9HJuIZY0MX8IGCDl1jyGo=
Subject key identifier:   65:FF:CC:74:25:B3:A5:E0:85:21:8A:06:84:40:EF:0F:66:E8:14:0A
Authority key identifier: B8:7B:BF:8E:5C:74:A5:26:BA:AF:61:85:AB:D9:49:DA:FA:8F:6D:CB
Certificate issuer:       /CN=b87bbf8e5c74a526baaf6185abd949dafa8f6dcb
Certificate serial:       019D9BBE9355EF9AF2FB97E050D069E6267A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft
Manifest number:          0B3C
Signing time:             Fri 17 Apr 2026 14:00:51 +0000
Manifest this update:     Fri 17 Apr 2026 14:00:51 +0000
Manifest next update:     Sat 18 Apr 2026 14:00:51 +0000
Files and hashes:         1: DkZq0zpUFhASpEE4ImZTT8jsmXs.roa (hash: DqNcDnHcsyHeYm9qtIpPz2EwaV9dY65pLLq3MnQC1Qk=)
                          2: uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl (hash: YoE45T8aH8+tdkJnpvEKu6d1d3vo0YvB1xbFknvw9Uk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:be:93:55:ef:9a:f2:fb:97:e0:50:d0:69:e6:26:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87bbf8e5c74a526baaf6185abd949dafa8f6dcb
        Validity
            Not Before: Apr 17 14:00:51 2026 GMT
            Not After : Apr 18 14:00:51 2026 GMT
        Subject: CN=65ffcc7425b3a5e085218a068440ef0f66e8140a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:75:1f:00:8b:48:a0:19:9d:7c:41:d4:4d:13:
                    25:26:40:1b:80:e2:54:ba:66:6f:63:83:0e:cc:62:
                    15:a7:a4:65:fe:07:b3:eb:5f:d3:49:5d:06:d5:40:
                    d2:38:53:11:f8:54:a3:96:d9:2c:4f:78:26:b2:f4:
                    f2:86:59:34:aa:71:d9:1b:fb:c9:3e:e9:9f:93:b8:
                    6b:60:d5:ca:b6:b6:c7:0a:45:c6:13:41:8c:fd:a1:
                    20:c8:28:23:b9:11:bc:d5:94:94:b9:c4:07:4c:3f:
                    3f:20:bb:3e:e7:81:ca:e2:a1:b5:15:e5:5c:91:26:
                    3e:da:fd:57:dc:a8:6b:22:94:47:d6:48:f2:cf:75:
                    e7:1f:fa:77:d0:6d:66:b2:fa:40:3c:43:62:c5:ae:
                    43:74:e8:06:21:02:8a:3b:d7:f8:7d:2c:d8:44:69:
                    51:79:96:77:f0:1c:59:d4:5d:34:d9:2c:1a:9a:b1:
                    19:d2:f2:b2:33:10:69:e2:7e:29:b4:27:91:14:05:
                    24:00:93:07:39:15:86:29:04:a2:df:aa:d6:e4:bb:
                    6d:5e:8e:4b:d6:8b:09:be:cd:fd:b4:6c:2f:56:6d:
                    c7:22:26:b2:73:a6:d3:59:2e:e9:2f:32:52:44:26:
                    8d:0a:96:e3:1a:b3:30:a5:67:c6:0e:ef:32:03:7f:
                    9f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:FF:CC:74:25:B3:A5:E0:85:21:8A:06:84:40:EF:0F:66:E8:14:0A
            X509v3 Authority Key Identifier:
                keyid:B8:7B:BF:8E:5C:74:A5:26:BA:AF:61:85:AB:D9:49:DA:FA:8F:6D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:61:dd:93:b7:b2:e9:e2:86:67:08:53:57:0c:87:2c:03:8c:
         79:b0:d4:f7:ba:16:e6:37:92:4d:ca:40:5a:eb:6c:77:21:d4:
         ad:6a:05:6d:57:51:0c:3d:45:c6:61:be:70:f9:d6:82:ba:d6:
         bd:a3:0e:0c:74:b5:32:73:be:54:2d:30:77:8f:53:05:0c:d0:
         10:52:33:28:c6:5d:48:73:f5:f9:fb:d2:56:6d:46:70:bb:08:
         83:96:5f:0a:00:fa:1d:63:2a:b5:ca:5a:a0:7d:7b:73:9c:38:
         e4:91:71:20:18:24:6a:3d:26:4f:fc:15:43:2e:e0:d5:57:73:
         f7:c0:de:2e:ca:27:4c:d7:50:e6:82:26:51:5a:19:c4:e5:a5:
         dd:4f:33:5c:8e:92:ff:0b:d7:be:a1:10:ae:29:e7:b3:07:40:
         a0:a5:0e:ce:dd:19:0c:63:4d:c4:98:e8:41:af:2a:36:52:ad:
         89:22:cc:93:fa:72:7e:de:00:57:9f:78:72:c4:a9:91:5f:2b:
         4a:3e:36:e3:bf:e6:53:7b:de:0e:f2:4d:de:ee:04:1b:9c:84:
         c6:75:7d:33:da:86:4b:ca:86:58:16:47:e2:73:3a:54:09:ef:
         69:d1:70:81:fb:92:4a:d5:9b:e7:1b:de:d7:fd:b0:6b:ab:fa:
         ec:c1:53:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bvpNV75ry+5fgUNBp5iZ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4N2JiZjhlNWM3NGE1MjZiYWFmNjE4NWFiZDk0OWRhZmE4
ZjZkY2IwHhcNMjYwNDE3MTQwMDUxWhcNMjYwNDE4MTQwMDUxWjAzMTEwLwYDVQQD
Eyg2NWZmY2M3NDI1YjNhNWUwODUyMThhMDY4NDQwZWYwZjY2ZTgxNDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nUfAItIoBmdfEHUTRMlJkAbgOJU
umZvY4MOzGIVp6Rl/gez61/TSV0G1UDSOFMR+FSjltksT3gmsvTyhlk0qnHZG/vJ
Pumfk7hrYNXKtrbHCkXGE0GM/aEgyCgjuRG81ZSUucQHTD8/ILs+54HK4qG1FeVc
kSY+2v1X3KhrIpRH1kjyz3XnH/p30G1msvpAPENixa5DdOgGIQKKO9f4fSzYRGlR
eZZ38BxZ1F002SwamrEZ0vKyMxBp4n4ptCeRFAUkAJMHORWGKQSi36rW5LttXo5L
1osJvs39tGwvVm3HIiayc6bTWS7pLzJSRCaNCpbjGrMwpWfGDu8yA3+fsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGX/zHQls6XghSGKBoRA7w9m6BQKMB8GA1UdIwQY
MBaAFLh7v45cdKUmuq9hhavZSdr6j23LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUh1X2pseDBwU2E2cjJHRnE5bEoydnFQYmNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS84MDhiZTEtYTY5MC00NWU5LTkwMGUt
NTM5MGY5ZjgzNjIwLzEvdUh1X2pseDBwU2E2cjJHRnE5bEoydnFQYmNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS84MDhiZTEtYTY5MC00NWU5LTkwMGUtNTM5MGY5ZjgzNjIw
LzEvdUh1X2pseDBwU2E2cjJHRnE5bEoydnFQYmNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaGHdk7ey
6eKGZwhTVwyHLAOMebDU97oW5jeSTcpAWutsdyHUrWoFbVdRDD1FxmG+cPnWgrrW
vaMODHS1MnO+VC0wd49TBQzQEFIzKMZdSHP1+fvSVm1GcLsIg5ZfCgD6HWMqtcpa
oH17c5w45JFxIBgkaj0mT/wVQy7g1Vdz98DeLsonTNdQ5oImUVoZxOWl3U8zXI6S
/wvXvqEQrinnswdAoKUOzt0ZDGNNxJjoQa8qNlKtiSLMk/pyft4AV594csSpkV8r
Sj4247/mU3veDvJN3u4EG5yExnV9M9qGS8qGWBZH4nM6VAnvadFwgfuSStWb5xve
1/2wa6v67MFTNQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:39:53 2026 by rpki-client