Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
File:                     UqqgphiMl6p0LMeG47cLyQnKxEw.mft (raw, json)
Hash identifier:          bnkYTj1f9u3WWtoBmZIKvbLpsQbPoEe1CF95etxt2ik=
Subject key identifier:   EB:AD:63:79:6E:77:B9:9D:6D:3B:D4:C0:7B:54:DF:6B:FD:18:0C:42
Authority key identifier: 52:AA:A0:A6:18:8C:97:AA:74:2C:C7:86:E3:B7:0B:C9:09:CA:C4:4C
Certificate issuer:       /CN=52aaa0a6188c97aa742cc786e3b70bc909cac44c
Certificate serial:       019D284E10EB8486C61CD6078846E26E3BCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
Manifest number:          188A
Signing time:             Thu 26 Mar 2026 04:01:37 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:37 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:37 +0000
Files and hashes:         1: UqqgphiMl6p0LMeG47cLyQnKxEw.crl (hash: s9/+AupfrHIN5iK6B9Ea/Yi0S1do7mXMjbhZvuJJYlY=)
                          2: m66pD5NNoTudVlprN23DFJpyQNo.roa (hash: Zi+SOs/s829OkjmiRlWIKt2XYMZgmPRVGnqrx7IEkng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:10:eb:84:86:c6:1c:d6:07:88:46:e2:6e:3b:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52aaa0a6188c97aa742cc786e3b70bc909cac44c
        Validity
            Not Before: Mar 26 04:01:37 2026 GMT
            Not After : Mar 27 04:01:37 2026 GMT
        Subject: CN=ebad63796e77b99d6d3bd4c07b54df6bfd180c42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:53:e8:b3:39:21:60:e3:a3:f8:a6:af:ff:26:
                    e0:d6:06:4a:d4:53:27:bd:4e:82:d6:aa:4c:3e:8e:
                    47:d8:db:d5:3c:13:a8:16:e6:4e:e5:45:8f:17:54:
                    d0:a0:9c:fe:a0:9b:a7:a6:21:66:96:8c:e6:6b:a6:
                    e3:42:cf:fb:6b:e0:c7:22:cb:07:78:46:30:12:d6:
                    47:06:59:36:ef:59:cd:21:a4:da:eb:fb:09:78:8b:
                    6a:d8:a0:9d:d6:57:04:59:3f:04:0e:b4:ce:fe:ad:
                    7b:f5:ed:74:06:b2:d7:3b:ee:df:a0:15:cb:ac:0b:
                    3c:fa:dd:16:12:07:89:cf:d5:d5:fc:f7:bc:68:64:
                    f6:ba:59:6b:e7:ae:08:8d:55:94:67:47:9f:3a:db:
                    c0:ea:5f:56:4a:dd:30:25:64:33:21:5c:c4:c9:66:
                    79:3b:d6:55:67:6d:e6:06:e6:3b:ba:9d:c9:22:44:
                    64:de:65:b6:1d:a9:6d:ed:a8:6e:4f:ee:c7:75:d9:
                    da:55:3b:a8:76:83:0a:ed:11:e7:86:25:e6:56:71:
                    fd:99:81:a3:bc:e8:1a:64:11:1b:89:90:c7:69:be:
                    f0:76:69:e4:1f:be:01:27:fc:0f:d0:2f:91:d6:7f:
                    9b:3c:43:68:ab:8f:a4:af:00:44:4a:8c:cb:1d:c6:
                    65:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AD:63:79:6E:77:B9:9D:6D:3B:D4:C0:7B:54:DF:6B:FD:18:0C:42
            X509v3 Authority Key Identifier:
                keyid:52:AA:A0:A6:18:8C:97:AA:74:2C:C7:86:E3:B7:0B:C9:09:CA:C4:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:06:f0:4b:f7:ca:83:92:39:46:12:10:ee:65:70:75:91:85:
         96:18:b2:a0:39:9d:52:9e:37:4f:86:69:0f:61:35:39:f1:96:
         f9:87:4c:57:93:b0:49:45:d6:03:a3:51:bb:43:59:aa:ff:6b:
         dd:02:b1:b1:eb:de:e0:95:52:e2:0f:c9:1b:58:cb:80:b4:a3:
         d4:61:64:78:68:e4:10:7b:2b:b8:dd:59:57:46:ff:c8:15:59:
         69:4f:f9:01:6a:64:db:ee:2b:3f:44:75:51:aa:d3:a3:94:3a:
         09:cd:32:a2:32:d9:65:9c:10:3d:84:fb:7b:62:52:6d:df:fb:
         8d:0e:64:23:8b:d5:45:a4:7c:5f:0a:36:f8:47:07:f4:ae:2b:
         65:be:b2:5f:83:56:6f:d6:13:09:7b:20:ef:f9:13:61:c9:f8:
         99:a9:52:f0:d2:14:b0:e5:fc:31:30:6a:23:d5:6e:c3:1d:44:
         60:04:e4:9c:d3:c9:c3:f3:66:a9:c3:4a:bb:92:80:15:b1:1c:
         40:91:02:c7:c9:4c:07:d4:60:9b:81:b9:f2:e4:19:c5:d1:81:
         98:bb:95:c5:6a:31:14:76:73:3d:d4:a2:e6:ee:ba:cd:b8:6a:
         0c:7a:46:86:b5:d8:ca:e4:35:41:5c:09:64:71:23:25:14:7f:
         ec:98:ac:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:35:05 2026 by rpki-client