Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
File:                     UYqkmTdA34rTjZLMDBByNObfoFw.mft (raw, json)
Hash identifier:          fWaAUmgf7uwulTfOHweoCaoUql1rQ0Y8pKTU0RHQUjY=
Subject key identifier:   6B:37:56:31:67:AA:81:60:E6:18:AA:3C:62:CD:14:53:90:59:90:58
Authority key identifier: 51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C
Certificate issuer:       /CN=518aa4993740df8ad38d92cc0c107234e6dfa05c
Certificate serial:       019D25F1A5F8E1B0888F9D1051F9054EE0FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
Manifest number:          1883
Signing time:             Wed 25 Mar 2026 17:01:26 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:26 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:26 +0000
Files and hashes:         1: 8S8fbH48Zt1BGehjiX35Ir6CDR8.roa (hash: QGuQT9cDWohDuhPq0Uc6XDo1ZAygMT/59WjQcx/USTE=)
                          2: UYqkmTdA34rTjZLMDBByNObfoFw.crl (hash: H0PEq+jz2iLsBReDs/fbwPvg1KZNy3RRsKP/HtUGF20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:a5:f8:e1:b0:88:8f:9d:10:51:f9:05:4e:e0:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=518aa4993740df8ad38d92cc0c107234e6dfa05c
        Validity
            Not Before: Mar 25 17:01:26 2026 GMT
            Not After : Mar 26 17:01:26 2026 GMT
        Subject: CN=6b37563167aa8160e618aa3c62cd145390599058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5a:75:1c:64:ff:31:8c:ea:c7:50:ab:f1:2a:
                    7b:ec:ce:0f:63:cf:e6:4b:a2:95:0a:14:ab:ba:2a:
                    9c:9b:37:8e:a6:70:e6:75:22:d1:04:dd:23:8d:20:
                    30:b1:12:aa:a0:33:4f:6c:6d:bd:7f:ed:08:43:e3:
                    fa:1e:2a:6e:0b:d0:34:a1:f3:7b:4d:ae:13:6f:cd:
                    01:56:9b:a2:a8:2b:a5:ff:2e:99:6d:08:ad:7d:08:
                    a1:e8:81:5d:23:af:7d:06:d3:de:06:49:1a:3d:f1:
                    a7:ae:27:45:86:29:fc:84:49:4a:f0:ea:b9:f8:20:
                    63:94:10:3d:39:d5:f2:05:dc:47:c1:99:fe:bb:1d:
                    89:61:39:a4:75:a6:ad:2d:d5:d4:f3:71:31:03:21:
                    49:b6:2d:d0:ae:87:76:6e:74:82:6a:58:13:bc:c5:
                    b6:3d:bc:fa:a5:6b:22:c6:89:ac:cf:7b:e6:b3:6d:
                    0a:69:04:80:6c:c2:1e:d9:df:67:a3:71:f1:0f:28:
                    e8:37:d2:8b:12:84:17:14:7e:2b:a6:80:dc:3b:92:
                    7d:3f:6c:74:f3:86:d5:59:07:60:5e:1e:c9:d9:a6:
                    e7:45:6d:96:3f:d2:c5:8e:ea:0f:2f:d0:f5:f4:65:
                    c1:80:c9:bd:b9:f3:2b:d5:ef:60:07:25:2c:7b:59:
                    b7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:37:56:31:67:AA:81:60:E6:18:AA:3C:62:CD:14:53:90:59:90:58
            X509v3 Authority Key Identifier:
                keyid:51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:bb:4b:0b:e5:2c:f6:b6:ba:a1:b0:d1:8b:f2:36:ab:78:56:
         15:c8:0f:c1:f0:2b:34:62:a9:4a:17:d0:2a:dd:5c:c5:bf:11:
         eb:58:2d:04:a5:5d:ae:2d:7e:f0:24:a1:a5:81:30:61:95:3c:
         5d:65:03:6f:7b:19:2f:4b:9c:f2:33:4a:9b:46:5e:81:70:65:
         15:26:55:e7:e5:c3:cd:0f:28:f5:1c:e5:b6:3d:80:69:c4:2d:
         b3:7b:be:c7:5c:a4:fb:61:70:b1:c4:6c:2d:3b:3d:76:6c:11:
         ed:49:e4:6b:7c:11:6d:b3:00:a8:d5:f3:47:28:97:f5:73:20:
         7a:f1:69:75:b7:ce:08:45:4c:96:0b:e9:e2:38:8b:35:29:5a:
         0d:78:38:8e:bf:24:5c:bc:b4:74:d2:55:b6:03:0c:7b:5d:21:
         58:24:16:06:b7:32:0c:f0:39:c9:1e:5b:d6:7a:05:23:6a:48:
         e4:76:ac:15:75:09:af:73:a3:52:04:52:04:cf:98:ae:5c:2e:
         c9:b5:cb:c5:d1:fc:fc:fe:32:d4:32:dc:a5:d1:f4:80:f6:02:
         6f:96:4a:70:a5:dd:1b:7a:77:fd:b6:1c:29:4b:ba:d0:34:fa:
         b8:af:a8:c1:0f:c3:03:72:f4:28:7d:18:d0:e9:e2:91:02:a7:
         df:a5:26:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8aX44bCIj50QUfkFTuD6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxOGFhNDk5Mzc0MGRmOGFkMzhkOTJjYzBjMTA3MjM0ZTZk
ZmEwNWMwHhcNMjYwMzI1MTcwMTI2WhcNMjYwMzI2MTcwMTI2WjAzMTEwLwYDVQQD
Eyg2YjM3NTYzMTY3YWE4MTYwZTYxOGFhM2M2MmNkMTQ1MzkwNTk5MDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1p1HGT/MYzqx1Cr8Sp77M4PY8/m
S6KVChSruiqcmzeOpnDmdSLRBN0jjSAwsRKqoDNPbG29f+0IQ+P6HipuC9A0ofN7
Ta4Tb80BVpuiqCul/y6ZbQitfQih6IFdI699BtPeBkkaPfGnridFhin8hElK8Oq5
+CBjlBA9OdXyBdxHwZn+ux2JYTmkdaatLdXU83ExAyFJti3Qrod2bnSCalgTvMW2
Pbz6pWsixomsz3vms20KaQSAbMIe2d9no3HxDyjoN9KLEoQXFH4rpoDcO5J9P2x0
84bVWQdgXh7J2abnRW2WP9LFjuoPL9D19GXBgMm9ufMr1e9gByUse1m3cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGs3VjFnqoFg5hiqPGLNFFOQWZBYMB8GA1UdIwQY
MBaAFFGKpJk3QN+K042SzAwQcjTm36BcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVlxa21UZEEzNHJUalpMTURCQnlOT2Jmb0Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xZjc1Y2ItYzdiOS00NTI5LWJkYWYt
NDZjNzk3NGJkMThhLzEvVVlxa21UZEEzNHJUalpMTURCQnlOT2Jmb0Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8xZjc1Y2ItYzdiOS00NTI5LWJkYWYtNDZjNzk3NGJkMThh
LzEvVVlxa21UZEEzNHJUalpMTURCQnlOT2Jmb0Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoLtLC+Us
9ra6obDRi/I2q3hWFcgPwfArNGKpShfQKt1cxb8R61gtBKVdri1+8CShpYEwYZU8
XWUDb3sZL0uc8jNKm0ZegXBlFSZV5+XDzQ8o9Rzltj2AacQts3u+x1yk+2FwscRs
LTs9dmwR7Unka3wRbbMAqNXzRyiX9XMgevFpdbfOCEVMlgvp4jiLNSlaDXg4jr8k
XLy0dNJVtgMMe10hWCQWBrcyDPA5yR5b1noFI2pI5HasFXUJr3OjUgRSBM+Yrlwu
ybXLxdH8/P4y1DLcpdH0gPYCb5ZKcKXdG3p3/bYcKUu60DT6uK+owQ/DA3L0KH0Y
0OnikQKn36UmhQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:54 2026 by rpki-client