Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.mft
File:                     uWnnPeg29B_yckNAuT7Bd2PWnnI.mft (raw, json)
Hash identifier:          bh9bomPy1A1d8lPqdPPNP6cRf/2eLeGy9xvBJL888IE=
Subject key identifier:   A9:94:A8:05:57:DD:E0:3B:4E:46:F5:78:27:FA:66:6E:22:2F:ED:BC
Authority key identifier: B9:69:E7:3D:E8:36:F4:1F:F2:72:43:40:B9:3E:C1:77:63:D6:9E:72
Certificate issuer:       /CN=b969e73de836f41ff2724340b93ec17763d69e72
Certificate serial:       019CADC78A6624AC911B85CF7017003B9D9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uWnnPeg29B_yckNAuT7Bd2PWnnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.mft
Manifest number:          0F4E
Signing time:             Mon 02 Mar 2026 09:01:01 +0000
Manifest this update:     Mon 02 Mar 2026 09:01:01 +0000
Manifest next update:     Tue 03 Mar 2026 09:01:01 +0000
Files and hashes:         1: TSmkEZq1s4JhgnGrVpGYTe9i5hM.roa (hash: vB+j/jUyEh0/4hWABQTMGfScyt4CG7R/SgKDOFAehts=)
                          2: uWnnPeg29B_yckNAuT7Bd2PWnnI.crl (hash: MY0PNoyWsDlYBDKSJ4C2JocTX5ii749Ste5UIbctaSs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uWnnPeg29B_yckNAuT7Bd2PWnnI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:c7:8a:66:24:ac:91:1b:85:cf:70:17:00:3b:9d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b969e73de836f41ff2724340b93ec17763d69e72
        Validity
            Not Before: Mar  2 09:01:01 2026 GMT
            Not After : Mar  3 09:01:01 2026 GMT
        Subject: CN=a994a80557dde03b4e46f57827fa666e222fedbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e1:be:f1:30:e5:14:18:04:94:16:21:aa:72:
                    06:23:87:0e:61:51:a6:60:43:ec:75:d4:dc:47:a8:
                    9f:0b:46:e8:10:05:da:37:05:35:3b:ac:06:55:a7:
                    7d:93:c7:ff:91:86:45:d9:e0:1e:97:2d:e4:81:00:
                    58:32:c1:0b:b2:d7:56:68:28:63:8e:9b:1a:d9:04:
                    ee:de:47:31:90:32:b4:61:3b:8f:e3:7b:6e:a9:ab:
                    98:56:d4:11:ab:0d:3f:1e:71:2a:8e:ba:b4:13:1c:
                    87:33:48:2c:69:2c:c4:f9:63:51:23:a8:d5:c0:4f:
                    6b:22:f7:6a:3e:34:16:b4:fd:1f:60:f0:18:07:5c:
                    bd:84:2c:99:d4:0e:b2:f5:69:1c:e8:10:8b:50:a2:
                    1c:72:c6:59:91:92:d9:8b:d9:82:82:ef:ed:8b:87:
                    6e:0d:44:23:e1:5b:53:98:51:3e:69:83:69:fd:08:
                    c9:5d:c5:cf:5b:59:fd:17:bb:af:20:b8:8a:4f:9a:
                    f6:08:be:96:a5:85:1b:0d:5d:fe:fa:14:1e:01:b9:
                    f0:51:3b:78:5a:e5:9c:af:f2:7d:6a:04:4f:ea:b5:
                    fb:71:25:82:13:44:7d:46:9c:12:c1:6c:41:02:88:
                    66:f9:4c:46:61:dd:f0:e5:47:ad:98:32:18:b1:5c:
                    53:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:94:A8:05:57:DD:E0:3B:4E:46:F5:78:27:FA:66:6E:22:2F:ED:BC
            X509v3 Authority Key Identifier:
                keyid:B9:69:E7:3D:E8:36:F4:1F:F2:72:43:40:B9:3E:C1:77:63:D6:9E:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWnnPeg29B_yckNAuT7Bd2PWnnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:89:89:d4:18:96:16:bd:bd:cd:63:86:06:cb:91:82:a3:a9:
         b2:d8:0c:0d:a9:92:59:84:9e:89:2c:7a:40:f9:bf:62:ed:c8:
         9f:93:1e:52:67:33:ff:05:0a:6b:a5:25:cf:79:6b:08:99:74:
         54:25:8e:71:95:1e:f2:c6:99:7b:e4:22:8c:b4:5f:6c:07:63:
         0a:e5:b0:0f:07:2d:a7:27:31:0d:ad:c2:d1:44:29:d9:3c:04:
         6d:26:a0:54:5a:aa:f3:7f:1c:bf:50:42:7e:72:c4:66:eb:5b:
         e0:51:65:6b:fe:08:2e:6f:18:31:82:98:a2:46:06:3d:04:3d:
         e0:75:22:50:93:b4:a9:90:5e:62:c6:31:86:5e:b8:77:63:3c:
         4a:9d:61:26:65:6f:e0:5d:47:08:ea:c1:59:e2:6e:b5:9c:43:
         d0:d9:5b:73:01:0a:7a:0c:b8:d4:10:d4:c7:9d:cb:b3:7e:cb:
         9a:42:f5:34:0f:35:06:4f:30:ff:6d:d4:04:60:30:2a:ed:e3:
         c8:e6:a0:2c:76:3a:1e:16:05:62:5b:1a:2f:0e:0f:9f:4d:c8:
         7f:c8:8a:44:50:85:85:68:95:04:49:e1:6a:a9:89:70:c6:fc:
         a8:55:23:a7:1e:0d:e8:b7:f3:9b:6c:f0:bf:4f:7c:93:5d:a7:
         3c:12:32:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:19:06 2026 by rpki-client