Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
File:                     uiOwejwKyeMz9S6LXUGnaKPTkCU.mft (raw, json)
Hash identifier:          pIsdvim1v5lv917lBLmV/7TNvE+Bt+eh91ImhQrEnjY=
Subject key identifier:   42:88:64:79:9B:E9:8B:D7:77:92:B8:C7:E9:F5:F8:4B:E6:42:BF:EB
Authority key identifier: BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25
Certificate issuer:       /CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025
Certificate serial:       019D265F74ECAF314DF39511D0D4A065C455
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
Manifest number:          0838
Signing time:             Wed 25 Mar 2026 19:01:23 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:23 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:23 +0000
Files and hashes:         1: cYSlOixvw1IRH_A6U1PmGBfOnLc.roa (hash: ObOoQktNn2mk1CLRsAqDNu4BrgB8VABVPaTI7wXzkNQ=)
                          2: cfljug29MBdwZ2IRskxqcwdwGN0.roa (hash: RSO1UVd7bjnpUDUf4c2ob5lCf11GhEF8w59+h0O9Z8s=)
                          3: e-t5BEEANDkjz8TT0h8YEJKZz74.asa (hash: tAn9UqhREKeh/3lPzeJs+A/xlp0r6QrTew+hGnn6pAM=)
                          4: sPDYGaB0jdjNmv_RI00LaumXHZM.roa (hash: cR+r+JhOtPPtk4/8vr8rgMsCxMQVubUz6os2NddknO4=)
                          5: uiOwejwKyeMz9S6LXUGnaKPTkCU.crl (hash: la4c9oE4L9qyFrCtBvkjEahlYELJyDOfAOlUnl0fmn0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:74:ec:af:31:4d:f3:95:11:d0:d4:a0:65:c4:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025
        Validity
            Not Before: Mar 25 19:01:23 2026 GMT
            Not After : Mar 26 19:01:23 2026 GMT
        Subject: CN=428864799be98bd77792b8c7e9f5f84be642bfeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:30:38:c4:22:fc:fd:44:87:53:5f:9a:39:79:
                    c3:4c:c0:16:3c:31:c0:47:07:95:f1:64:fe:14:8c:
                    ed:df:b7:40:56:46:19:a1:8a:f5:30:8f:7d:ec:5e:
                    cb:f7:10:3c:33:b3:33:9b:67:91:3a:12:a8:7a:8a:
                    49:c4:d7:71:11:33:64:c9:70:cc:0a:91:09:3b:42:
                    30:04:93:c1:8e:2c:d1:f0:fa:f1:47:b6:c5:a9:97:
                    bc:b9:71:81:60:2c:e1:24:d6:8e:97:48:4b:e9:fe:
                    71:07:ab:da:1f:aa:cc:83:1f:c1:ae:fe:7e:c5:a8:
                    3f:ac:02:db:c1:07:f5:95:4d:43:26:e1:04:32:be:
                    98:34:ca:19:d9:dd:45:cd:53:f1:b9:ff:fe:fe:ab:
                    80:aa:dc:5d:dd:7d:e8:37:56:17:55:dc:fc:d3:c6:
                    a0:07:a1:55:73:f3:95:3a:0f:1c:ee:0a:36:51:03:
                    be:d1:03:67:7a:08:21:06:30:95:52:7f:25:91:24:
                    85:65:68:55:02:59:6b:28:3e:ae:dd:7f:11:fe:eb:
                    53:47:d8:71:00:f8:c2:6d:5f:80:c6:51:2d:f3:95:
                    f0:b4:59:d0:0b:fc:c2:b2:3f:7f:4b:44:b4:34:07:
                    95:16:12:11:8a:42:5a:20:b5:57:cc:a7:c0:f6:19:
                    33:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:88:64:79:9B:E9:8B:D7:77:92:B8:C7:E9:F5:F8:4B:E6:42:BF:EB
            X509v3 Authority Key Identifier:
                keyid:BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:30:8e:53:40:b1:ca:96:0b:3d:12:1e:ba:25:5d:a6:7f:e4:
         cc:de:fd:44:dd:5b:f8:70:c3:25:ab:b5:bc:98:f5:ff:46:0b:
         64:64:f6:fd:c1:00:c0:2a:68:be:37:80:c4:91:96:51:9f:88:
         b6:c9:a7:73:cc:9f:1a:b0:5f:cf:65:33:88:2b:e0:1b:2b:ac:
         b9:7a:61:49:53:cd:d1:ec:68:4c:21:78:24:07:ac:77:f1:da:
         ce:da:b7:22:76:4f:19:f0:17:67:73:0a:e6:7d:49:6c:c1:d2:
         49:a8:6a:32:71:ba:e2:b4:a8:19:78:09:2c:51:05:81:b8:fe:
         99:f0:d4:84:db:5a:d7:ae:ef:38:1a:3f:ea:85:34:d6:7c:7b:
         14:ac:23:b4:aa:7d:04:2e:cb:94:10:d8:ec:c5:f8:4b:8c:a2:
         cc:e1:4a:13:a8:52:88:cf:f2:99:57:f3:0a:26:03:75:a3:da:
         eb:9a:0e:31:b6:42:bd:ef:ef:dd:03:01:32:92:3c:8c:1d:3f:
         b6:59:93:47:d7:c7:da:dc:01:a4:0f:42:0b:7e:ac:73:84:d9:
         19:c4:67:e9:1e:a5:06:3e:26:f9:17:cf:f2:16:3a:fe:0d:5a:
         70:0e:dc:91:a7:2e:9f:da:cc:43:9c:0c:85:4b:11:51:0c:16:
         66:64:42:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:34 2026 by rpki-client