Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft
File:                     UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft (raw, json)
Hash identifier:          5h7ykAbl5sg2XauLJQs0xMyJPeI+omz39pxz3APjNbo=
Subject key identifier:   F1:AE:AA:53:C3:7C:A3:30:93:92:07:29:B2:E7:F4:C6:54:AE:82:88
Authority key identifier: 53:08:41:E8:2A:A4:6D:99:59:FC:78:11:B2:57:95:C5:6C:D5:06:08
Certificate issuer:       /CN=530841e82aa46d9959fc7811b25795c56cd50608
Certificate serial:       019D281674A92FC2B64978E253902544B820
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft
Manifest number:          186A
Signing time:             Thu 26 Mar 2026 03:00:53 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:53 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:53 +0000
Files and hashes:         1: UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl (hash: krjaTsBFBPRhYv4+57rcsn7kcqI/Jeu+Lezn/uJoyiA=)
                          2: V-wJc1_T9ZdDaXQ8Bjgp6ZwH7Ko.roa (hash: 5Q51/s2uhZseLvK62BKwJY/vcbWTvSMuqDjEqNx+KWI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:74:a9:2f:c2:b6:49:78:e2:53:90:25:44:b8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530841e82aa46d9959fc7811b25795c56cd50608
        Validity
            Not Before: Mar 26 03:00:53 2026 GMT
            Not After : Mar 27 03:00:53 2026 GMT
        Subject: CN=f1aeaa53c37ca33093920729b2e7f4c654ae8288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ad:7b:6b:d8:77:cc:2d:e7:b1:35:16:aa:10:
                    b8:fe:c7:49:56:86:7e:f6:83:66:d6:fb:14:0d:3c:
                    17:80:db:ed:75:a8:ea:8c:0d:b8:69:d3:78:80:e1:
                    2e:a8:86:8a:63:04:a7:96:db:2b:bd:a3:5b:05:d0:
                    8f:26:99:49:c4:78:32:69:7f:54:d7:c1:47:d3:62:
                    03:7a:7e:53:a4:49:fd:26:13:94:b5:07:71:4d:24:
                    fe:c5:ed:34:ad:ad:08:bd:1b:be:37:63:89:4f:9f:
                    68:31:7d:85:d2:cb:93:78:92:a4:b8:11:4f:ad:d2:
                    bc:8a:d9:41:8d:b9:81:73:10:df:7f:b7:bf:d8:d6:
                    07:be:73:3c:20:50:3b:5e:38:7c:60:b4:29:71:21:
                    06:c7:0b:e1:53:09:f8:79:9b:df:b9:6e:7d:1d:02:
                    07:3b:9d:c5:96:ed:32:bd:5e:8e:a1:f4:5e:72:c2:
                    61:31:9c:69:e8:eb:05:85:89:95:c5:b9:3f:2a:ee:
                    7f:87:0b:f7:6d:c6:e2:03:d5:d4:37:dc:ec:dc:be:
                    e7:5e:2d:28:f3:d6:62:85:2f:57:7b:d6:89:83:f3:
                    ff:5f:df:56:df:9e:1e:5f:78:a2:9a:22:99:c4:a4:
                    06:95:90:b2:3d:e2:d1:27:4d:01:b6:6c:8c:3d:88:
                    b6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:AE:AA:53:C3:7C:A3:30:93:92:07:29:B2:E7:F4:C6:54:AE:82:88
            X509v3 Authority Key Identifier:
                keyid:53:08:41:E8:2A:A4:6D:99:59:FC:78:11:B2:57:95:C5:6C:D5:06:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:bc:b9:8a:77:32:2f:22:34:9f:0f:75:b2:5b:ed:99:9f:34:
         fe:6c:ca:42:4f:e1:74:52:55:59:92:7e:76:ca:02:d4:b5:bd:
         c5:9c:ea:78:74:3f:3f:78:44:72:2a:d7:5f:3f:a5:e2:d6:83:
         e3:3e:9a:52:61:94:6a:2a:98:d6:72:d1:5f:b1:df:4b:e9:9b:
         25:4a:a6:3d:14:4c:f8:41:c0:f5:ef:9a:78:28:b1:f0:51:b5:
         ba:d0:91:c6:59:ec:5c:cf:2d:c6:30:22:a1:32:9b:18:eb:aa:
         6d:f2:da:e1:64:25:bc:34:7e:19:d7:e7:f2:eb:db:02:07:e8:
         47:f3:33:57:5c:8f:bc:4f:63:e2:f3:b0:c7:0a:ac:fc:0d:be:
         6a:d7:7b:af:d8:0e:76:bc:a6:d7:bb:c5:58:c0:bf:ce:aa:18:
         6c:b0:dd:07:db:c3:d4:97:92:9e:84:88:5d:34:28:e3:a9:dd:
         38:b5:49:0c:49:13:47:13:e7:74:da:07:00:e1:ae:cb:12:cc:
         e9:1c:14:57:d5:31:d8:3e:8d:ee:31:b2:a5:72:ab:2e:a0:59:
         30:9f:41:c7:dc:55:91:44:ff:3d:4b:8e:e9:87:50:f9:71:4d:
         59:6c:1c:9f:e8:a6:c4:88:4c:67:b5:ae:c3:f4:ed:0e:67:76:
         9e:ea:23:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:52 2026 by rpki-client