Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
File:                     UeFASVvQbC6O-st-0KMVFtsfQF8.mft (raw, json)
Hash identifier:          SoY01eWRN9JI9kmLbEYfoGeieMQ6Hzg9pGveqnwNIPk=
Subject key identifier:   E1:79:D5:10:E0:AF:81:91:D4:04:EF:1E:45:35:52:E7:79:43:C2:88
Authority key identifier: 51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
Certificate issuer:       /CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Certificate serial:       019D27A8809368FA209BEB812C2A24E6A899
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
Manifest number:          0FE1
Signing time:             Thu 26 Mar 2026 01:00:47 +0000
Manifest this update:     Thu 26 Mar 2026 01:00:47 +0000
Manifest next update:     Fri 27 Mar 2026 01:00:47 +0000
Files and hashes:         1: UcC2Y8zHvL_FDSURiolVRBuB8_g.roa (hash: p3IzoT2nzG2oBklzpQ6gR/NCnzvpo3xyP/73GYhUd3g=)
                          2: UeFASVvQbC6O-st-0KMVFtsfQF8.crl (hash: Z8dzzeb4ZPbHwnyrsUH1aET7wP3EvNRu/TlrriO5E5w=)
                          3: vz5RaUGZ5UQMv5HfTK7-xdJaMis.roa (hash: YyzHvgYYzEsZBa9TKZu8r++ne7pY4Yz24jL7ObVc/TI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:80:93:68:fa:20:9b:eb:81:2c:2a:24:e6:a8:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
        Validity
            Not Before: Mar 26 01:00:47 2026 GMT
            Not After : Mar 27 01:00:47 2026 GMT
        Subject: CN=e179d510e0af8191d404ef1e453552e77943c288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fa:91:6d:1e:e2:75:91:70:d0:5e:a3:56:5d:
                    b0:cf:6b:d7:23:6c:bb:24:26:62:d2:90:e4:93:81:
                    07:b5:4b:44:ae:85:c1:ad:bb:6f:7e:cf:eb:96:96:
                    55:b4:33:44:38:18:01:5d:2f:85:16:81:27:99:b3:
                    9b:dc:58:4f:13:12:0c:d3:27:ca:d4:2c:30:57:62:
                    98:81:b6:dc:9c:0c:cd:d0:5c:89:88:48:dc:db:03:
                    3b:89:b3:b9:25:df:d8:0e:0b:8b:b3:c9:cc:ff:0a:
                    6f:2a:50:df:b0:7f:8a:fa:df:f1:17:cb:3b:a0:3d:
                    4e:b9:3d:ef:47:87:46:3f:8f:85:ef:d3:41:12:a5:
                    9a:45:93:4d:6c:d9:ad:f9:a2:24:a9:34:b4:87:6f:
                    a1:97:07:34:6f:9d:99:e1:d8:b9:ea:a9:6a:0c:52:
                    64:26:43:04:2b:37:9b:7e:39:50:f6:fa:83:5e:c9:
                    1b:d7:3e:c7:53:1f:bb:b4:10:27:a8:75:58:af:4c:
                    16:14:27:9a:2f:9f:86:f4:16:c6:8b:e2:21:04:54:
                    c5:93:8d:a7:03:d0:cf:81:3d:dd:bd:59:ea:c2:cb:
                    be:b8:86:0c:82:3d:a3:17:3f:23:39:03:b3:56:24:
                    7b:f0:3d:ec:d8:26:6d:c2:e8:c0:3e:94:48:05:6b:
                    e2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:79:D5:10:E0:AF:81:91:D4:04:EF:1E:45:35:52:E7:79:43:C2:88
            X509v3 Authority Key Identifier:
                keyid:51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:5f:52:8e:04:84:15:17:c6:25:c9:95:b0:2c:82:8c:91:0f:
         bd:5c:fe:07:52:f9:a6:2d:67:7c:42:0f:46:82:5a:12:ee:0a:
         a7:65:5c:d8:02:ec:ee:e6:54:b9:db:2d:b7:bc:7c:f8:f2:3b:
         11:0a:bc:c6:68:cc:15:28:30:51:1f:fc:d0:dc:cd:01:07:fa:
         d1:18:41:e6:f7:b2:4a:ec:f2:be:ab:63:03:76:1a:ef:96:b1:
         8c:dc:69:26:f1:87:9d:49:57:49:8e:3e:83:cc:5d:c7:ad:30:
         5d:ce:3d:10:e8:e6:de:1a:c0:5f:19:cd:fd:44:d5:4e:05:1b:
         14:44:04:38:39:ae:db:d8:1b:06:95:0d:a3:88:d8:a3:ca:d0:
         d9:0c:e3:bb:d6:53:a8:19:70:27:b3:4f:e9:e7:a4:54:9e:b2:
         42:73:b2:d6:89:b2:00:a5:e9:62:ce:a3:3d:11:a4:df:00:33:
         29:bc:b5:20:40:c7:24:c0:ed:2b:60:a5:7e:8b:45:5c:0f:b1:
         e6:c0:7f:a6:cc:63:06:a8:5e:ae:dd:d5:cb:10:b8:66:7a:1f:
         61:19:e6:3d:c6:72:d2:7b:11:3c:1b:f4:3e:0a:ed:23:40:2a:
         81:bc:32:f0:90:fc:a5:a9:f3:7c:f3:8c:0e:63:90:45:cc:f6:
         12:22:12:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:01 2026 by rpki-client