Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.mft
File:                     uMnnsYl6-wCPOx34vwT5tWdwPeQ.mft (raw, json)
Hash identifier:          yna9LfF0+Y/YIFx4eUrIMXAHvleNXixKvv6C/sfE9Vc=
Subject key identifier:   1D:87:3A:AD:17:7E:E8:E3:A9:20:6F:75:92:09:E1:3A:52:7D:3B:BE
Authority key identifier: B8:C9:E7:B1:89:7A:FB:00:8F:3B:1D:F8:BF:04:F9:B5:67:70:3D:E4
Certificate issuer:       /CN=b8c9e7b1897afb008f3b1df8bf04f9b567703de4
Certificate serial:       019D28849A032875280B6DB2B9F28E682A98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMnnsYl6-wCPOx34vwT5tWdwPeQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.mft
Manifest number:          1818
Signing time:             Thu 26 Mar 2026 05:01:11 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:11 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:11 +0000
Files and hashes:         1: 5qhVPI1i7bgsBqCDOR_pBDzMDds.roa (hash: hsXI0HXZI7WGFauILyyNN6KaKFpRLSAYg6OSGX8LjyY=)
                          2: uMnnsYl6-wCPOx34vwT5tWdwPeQ.crl (hash: AyozZK9meHDtcbjx4q2S8TBMW6o8vObhTTkLwdtfHn0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uMnnsYl6-wCPOx34vwT5tWdwPeQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:9a:03:28:75:28:0b:6d:b2:b9:f2:8e:68:2a:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8c9e7b1897afb008f3b1df8bf04f9b567703de4
        Validity
            Not Before: Mar 26 05:01:11 2026 GMT
            Not After : Mar 27 05:01:11 2026 GMT
        Subject: CN=1d873aad177ee8e3a9206f759209e13a527d3bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:cf:8a:0a:87:df:8d:2b:bf:6c:18:60:66:d5:
                    9f:29:af:14:f4:a0:1e:c8:4c:7a:81:fa:a1:56:47:
                    14:fd:32:c2:ce:95:7d:73:fa:d2:3e:fc:c9:ee:50:
                    b3:87:20:71:44:a7:a4:a0:8f:9b:f0:80:9b:74:45:
                    76:e6:2a:85:0c:a4:23:36:49:d1:91:76:bd:7e:02:
                    a0:2f:22:12:e1:32:0d:5d:6a:68:5e:eb:bd:df:e9:
                    ad:29:95:48:ed:0c:6d:64:25:f5:20:d8:64:92:fe:
                    dd:0d:ce:a1:84:90:d1:ba:20:51:d7:80:58:75:62:
                    65:89:40:ae:65:89:dc:62:e4:5a:1b:e5:01:da:35:
                    86:4e:d1:89:94:f5:0d:77:c0:88:46:c0:e8:3a:00:
                    86:56:6b:50:29:d4:13:da:f4:81:0c:84:44:33:79:
                    7c:0a:fb:a5:7d:ef:d3:82:8b:07:4b:30:81:c4:a1:
                    2b:83:7a:90:c9:5f:ff:ea:cd:16:e1:39:f8:36:63:
                    97:5a:73:cd:14:28:40:fb:21:af:8e:e3:38:4f:be:
                    78:e9:25:69:af:e0:40:51:f1:4a:62:c6:8f:1c:3f:
                    b5:d0:81:73:38:f3:30:00:fe:de:42:af:47:6f:5f:
                    2b:23:b5:98:19:e1:42:28:24:38:80:db:ba:3b:55:
                    28:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:87:3A:AD:17:7E:E8:E3:A9:20:6F:75:92:09:E1:3A:52:7D:3B:BE
            X509v3 Authority Key Identifier:
                keyid:B8:C9:E7:B1:89:7A:FB:00:8F:3B:1D:F8:BF:04:F9:B5:67:70:3D:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMnnsYl6-wCPOx34vwT5tWdwPeQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:a9:1e:ff:a3:71:35:cc:f0:57:36:0f:f8:d2:33:ff:18:cb:
         4d:56:d2:90:43:2c:5f:f5:52:67:44:ad:32:e3:c5:f6:7c:ad:
         74:6f:cb:08:b7:8f:e1:aa:26:0e:77:a0:a3:bc:ad:ac:dc:69:
         06:c9:78:c5:c8:41:e8:49:b4:5c:eb:0b:34:d0:88:65:51:8c:
         66:61:df:b8:10:50:d8:9e:8e:7f:9c:12:5a:c3:77:0c:e6:60:
         b1:c8:4c:60:42:4a:2c:19:02:76:e3:46:cd:e4:33:06:f2:da:
         7b:92:7c:da:d4:cb:46:65:d4:c1:ab:9d:bf:c7:e7:06:e1:4c:
         b1:f3:fe:40:30:9c:5b:52:0d:ac:c7:9a:48:0e:6d:24:ac:b8:
         a8:01:de:c1:d2:10:f2:d0:40:8a:af:58:84:56:65:b8:6e:6f:
         91:09:aa:4e:99:f4:ef:51:f4:8b:b7:a5:92:64:ae:5e:69:2f:
         bd:1a:31:a3:82:cb:29:76:d7:a3:ce:55:1f:ea:5d:82:cf:ff:
         67:45:eb:3e:a4:7f:b6:7d:3d:36:61:dd:e0:b6:ad:6e:c1:1e:
         d5:d8:a5:af:2a:d8:1a:7b:39:40:d7:b2:50:d0:d4:87:84:c7:
         bd:5f:30:0b:a8:26:f9:a1:fa:e8:d8:91:a7:70:52:44:08:37:
         1a:f8:b3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:33:56 2026 by rpki-client