Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft
File:                     uhfrfV8E0nFV8gF4bzkPtAimquQ.mft (raw, json)
Hash identifier:          ue/60G/MHvlzJJcrHqmUyUQFgR6dzbcB6QMvsPlrIYI=
Subject key identifier:   70:72:EF:48:D3:C9:E8:C9:C8:82:AF:66:7D:04:F9:DA:15:15:04:0B
Authority key identifier: BA:17:EB:7D:5F:04:D2:71:55:F2:01:78:6F:39:0F:B4:08:A6:AA:E4
Certificate issuer:       /CN=ba17eb7d5f04d27155f201786f390fb408a6aae4
Certificate serial:       019CB0C82DBCAE8B30FCBF3B38EFC077ED31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft
Manifest number:          82
Signing time:             Mon 02 Mar 2026 23:00:34 +0000
Manifest this update:     Mon 02 Mar 2026 23:00:34 +0000
Manifest next update:     Tue 03 Mar 2026 23:00:34 +0000
Files and hashes:         1: 0yT0OXiNw9csRLbDIHPuRhRNJuA.roa (hash: V99TnpgsuLfThbZigceHdcceXYaalafIhYll4v0qF0s=)
                          2: uhfrfV8E0nFV8gF4bzkPtAimquQ.crl (hash: STShp8neYllF1eBiaX8jhsXFG3twrykqF099sX1xbPo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:16:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b0:c8:2d:bc:ae:8b:30:fc:bf:3b:38:ef:c0:77:ed:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba17eb7d5f04d27155f201786f390fb408a6aae4
        Validity
            Not Before: Mar  2 23:00:34 2026 GMT
            Not After : Mar  3 23:00:34 2026 GMT
        Subject: CN=7072ef48d3c9e8c9c882af667d04f9da1515040b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:79:e1:73:19:2d:5e:38:f2:b1:8a:56:f8:65:
                    d3:60:ef:61:4b:c7:4d:92:84:98:e4:e3:18:87:e9:
                    fc:9b:5c:2f:52:49:7e:f4:b1:5a:fb:10:57:d6:0a:
                    51:e8:fa:d4:a3:2e:17:cc:de:fd:58:c8:fe:31:b3:
                    ef:f3:5f:73:a2:1c:6e:cf:c8:98:ef:9e:ac:08:37:
                    d3:6c:f8:8e:23:0b:7e:64:4c:59:05:81:55:b3:f3:
                    05:3a:41:83:69:d8:04:08:ad:47:d6:d6:d9:ef:85:
                    56:00:d2:09:90:4b:c6:be:6f:d7:8b:91:e4:44:07:
                    ae:2a:95:91:ec:8b:c3:7c:9c:17:ec:0e:87:12:e1:
                    a2:a3:28:f7:a3:85:1d:92:f4:2a:f7:7a:b2:46:68:
                    a7:a5:71:3f:07:53:e6:a8:6a:73:2f:85:e1:15:dd:
                    d8:54:96:ce:8e:c2:9e:1f:6a:1b:cd:38:c3:f1:41:
                    b7:5c:3f:f4:ff:6e:50:59:54:d3:63:4c:dc:2e:83:
                    c6:66:52:8a:53:eb:54:3e:4d:0b:1b:c3:57:a6:0b:
                    54:9f:48:12:01:f7:d8:a1:6e:28:42:16:84:ad:ba:
                    70:22:ec:6c:7c:1c:af:87:f3:46:7d:a3:cf:26:ce:
                    b4:99:f3:ba:3d:02:d3:88:90:24:a7:39:75:10:45:
                    68:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:72:EF:48:D3:C9:E8:C9:C8:82:AF:66:7D:04:F9:DA:15:15:04:0B
            X509v3 Authority Key Identifier:
                keyid:BA:17:EB:7D:5F:04:D2:71:55:F2:01:78:6F:39:0F:B4:08:A6:AA:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:b5:51:ad:79:63:8b:d9:ce:f2:19:83:f5:bd:c3:0b:e5:c0:
         96:8d:1c:c7:d0:ca:65:b7:46:42:45:92:25:b0:96:df:b7:80:
         63:bc:e6:36:0b:9e:b4:01:a4:fc:e4:ce:88:21:f4:b5:f1:31:
         f8:8f:69:13:a2:fc:83:11:94:83:2d:43:59:c1:78:88:63:59:
         7e:89:d0:bb:ad:91:25:e6:78:f2:c7:58:83:71:04:49:74:3a:
         af:29:f0:98:24:41:09:e4:32:5c:53:b0:96:2c:34:cf:b7:f7:
         4a:fb:92:08:28:dc:f6:ef:a0:9a:f3:bb:a7:88:22:5f:f3:9a:
         f1:c3:6d:10:e6:af:bc:1d:da:57:fd:11:ff:f5:8d:05:b4:aa:
         54:9b:60:43:ef:d8:7d:48:6d:39:02:6a:cd:a2:13:64:63:c4:
         39:dd:23:c2:5b:5f:fa:7b:a0:b5:0b:ff:7a:3d:23:65:8f:26:
         50:08:b3:53:b1:aa:b9:7d:45:0f:b9:66:ff:56:f8:7d:7d:04:
         68:10:6a:91:5e:1d:0c:01:09:9f:63:b2:63:2d:f5:90:90:a2:
         7d:fd:b5:ee:12:7d:68:8d:3d:e2:b3:8f:86:db:02:94:4e:fb:
         ba:79:fb:76:04:a4:45:b5:31:46:c3:54:85:77:10:4e:0c:f0:
         12:53:13:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:52:46 2026 by rpki-client