Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft
File:                     UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft (raw, json)
Hash identifier:          F1bDniuaa5hPXXNwbCtNll6CdVHj9lpZR4lbg/PEv8I=
Subject key identifier:   91:1B:52:46:89:A4:AF:9C:2B:83:6A:9A:01:09:84:C8:F4:88:B9:65
Authority key identifier: 53:32:4E:A7:BB:9E:D5:8D:8D:7B:85:D5:D1:CD:C0:FE:43:BC:E2:36
Certificate issuer:       /CN=53324ea7bb9ed58d8d7b85d5d1cdc0fe43bce236
Certificate serial:       019D273B1820ABCFC33D2668571651A1273C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft
Manifest number:          1888
Signing time:             Wed 25 Mar 2026 23:01:17 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:17 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:17 +0000
Files and hashes:         1: Gx6baosvhsyuunnM0M86NpVi0j4.roa (hash: K5GR2Z76x52/389cbUDZWRSkT2fniOaUKJncmjnTypo=)
                          2: UzJOp7ue1Y2Ne4XV0c3A_kO84jY.crl (hash: YWefWnZRZm3gxPRsow7mPxf84HlAk9XcGMDyGTjRNHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3b:18:20:ab:cf:c3:3d:26:68:57:16:51:a1:27:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53324ea7bb9ed58d8d7b85d5d1cdc0fe43bce236
        Validity
            Not Before: Mar 25 23:01:17 2026 GMT
            Not After : Mar 26 23:01:17 2026 GMT
        Subject: CN=911b524689a4af9c2b836a9a010984c8f488b965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e0:e7:80:31:e5:c1:eb:2f:a2:12:d5:ad:69:
                    5a:86:2a:4c:4a:27:ba:8b:e2:ce:e2:b9:f0:ae:0b:
                    e8:93:e5:51:66:63:9f:5b:32:54:df:96:b0:23:fb:
                    ae:bf:72:ee:aa:48:ee:ca:48:ab:ec:2a:8a:ff:56:
                    6a:10:63:01:5c:af:ec:93:8e:d5:28:3e:e7:d1:9f:
                    99:74:a4:20:4f:eb:f7:1a:18:09:89:e4:63:64:47:
                    66:1b:fd:3e:17:92:cf:39:f4:54:91:51:79:94:19:
                    80:a5:22:d5:38:19:c3:40:50:d0:23:43:76:a7:dc:
                    6a:08:03:08:07:7a:32:02:64:c0:86:f3:c2:d6:0a:
                    c0:d7:33:90:67:41:f3:dc:5b:09:5b:37:9f:ff:ab:
                    39:0c:86:3d:15:fe:c2:84:96:c5:f1:a2:99:79:3e:
                    3c:40:f6:13:f5:9c:56:27:13:98:ec:a8:47:1c:0b:
                    ac:c2:f5:54:ab:51:07:85:b4:b2:2f:53:09:d0:41:
                    d0:5b:26:3e:d0:8f:b6:f4:57:48:3c:72:1e:5f:43:
                    57:27:89:f6:90:1f:5b:ab:1d:af:42:11:d8:e4:94:
                    12:17:c4:81:57:48:41:5c:4b:da:22:eb:0c:c8:4b:
                    61:cb:c8:e7:da:41:05:cb:27:56:3a:d8:28:7f:77:
                    e2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:1B:52:46:89:A4:AF:9C:2B:83:6A:9A:01:09:84:C8:F4:88:B9:65
            X509v3 Authority Key Identifier:
                keyid:53:32:4E:A7:BB:9E:D5:8D:8D:7B:85:D5:D1:CD:C0:FE:43:BC:E2:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:fb:fa:fb:58:99:81:c9:34:6d:03:3c:f0:e8:20:9d:23:6d:
         fc:19:d6:0c:4b:32:7b:3a:c0:29:5b:c6:35:19:1b:47:bb:38:
         72:68:a2:d8:65:fa:cf:75:ce:30:77:36:d6:30:5f:32:9b:6c:
         84:00:41:1b:e3:77:2f:bd:f8:2b:9d:1a:b1:15:ea:2c:67:38:
         08:9f:2c:d7:92:f0:e1:19:ec:c1:2e:17:a3:05:42:cd:e6:74:
         90:d4:3a:8c:42:fc:47:22:f0:4b:20:88:c4:a4:15:4e:a9:d7:
         fa:98:71:26:7c:35:63:98:c4:aa:18:cb:13:3d:5b:4d:d7:ac:
         2d:8a:70:e4:0f:75:9a:a9:15:ff:c7:77:96:ac:ca:96:64:3d:
         65:0f:df:7c:97:62:66:56:09:14:a6:aa:5a:81:6b:9d:b4:91:
         d7:32:ac:1f:a7:6e:62:44:de:19:c6:56:8e:bc:9d:57:ad:3b:
         a3:d5:cf:d5:25:17:d9:f0:0e:0a:7d:2d:60:c1:c9:12:51:c0:
         34:08:89:68:7c:ad:77:de:99:61:a2:82:da:04:c7:b5:51:05:
         57:6c:ef:bc:0c:91:96:bb:ca:e5:18:6d:fc:3a:0e:e1:dd:38:
         0b:b2:c2:cd:b8:5a:b3:22:9e:a7:65:cc:0d:94:86:00:78:62:
         a1:68:51:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:31 2026 by rpki-client