Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
File:                     UxIuA6hBuIeJY6__9pXKT5_QaCw.mft (raw, json)
Hash identifier:          YpllymPOt1uJLdAKzemT8Gqnycca3Emu9XZWCmIHiXw=
Subject key identifier:   7B:46:A2:C0:73:43:CD:2B:88:0A:71:E0:0F:BB:FE:4C:5B:68:BE:F3
Authority key identifier: 53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
Certificate issuer:       /CN=53122e03a841b8878963affff695ca4f9fd0682c
Certificate serial:       019D2A044FC2253A420838CA4057D9548A23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
Manifest number:          119C
Signing time:             Thu 26 Mar 2026 12:00:18 +0000
Manifest this update:     Thu 26 Mar 2026 12:00:18 +0000
Manifest next update:     Fri 27 Mar 2026 12:00:18 +0000
Files and hashes:         1: UjFdhEdt4WKlDSIUUurW21paKp4.roa (hash: fDRm4GJe+GCEFChs7oH68Gzn9XNFPr0wdWmaIX+37oo=)
                          2: UxIuA6hBuIeJY6__9pXKT5_QaCw.crl (hash: 0hDJyxPvkEN2dIZ9o5PL53WeCEux40g0WYoEKOeW9Sg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:04:4f:c2:25:3a:42:08:38:ca:40:57:d9:54:8a:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53122e03a841b8878963affff695ca4f9fd0682c
        Validity
            Not Before: Mar 26 12:00:18 2026 GMT
            Not After : Mar 27 12:00:18 2026 GMT
        Subject: CN=7b46a2c07343cd2b880a71e00fbbfe4c5b68bef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:62:9f:03:ce:9a:ae:bd:d7:9a:da:c4:36:2c:
                    82:12:f2:6c:88:d3:34:d3:0a:fd:21:ed:a8:6a:0d:
                    21:bd:39:44:c1:e4:7a:f0:52:64:67:06:f6:79:56:
                    c2:6c:81:de:42:e5:9f:f3:fe:4a:ba:58:3a:69:e2:
                    7d:3e:af:81:75:fc:3f:cc:16:84:09:b0:21:ca:e8:
                    3e:b1:42:ae:ba:29:49:37:e4:23:c6:81:d1:c5:04:
                    7e:5b:a1:29:06:54:4d:42:0b:29:77:75:c6:d2:fb:
                    6f:2a:e3:b2:0f:ca:1c:11:a9:65:17:14:c9:ee:f3:
                    23:e5:b2:40:83:68:27:27:1c:c9:e7:74:57:6b:80:
                    94:95:12:07:4f:5c:ff:db:42:78:30:a9:c9:ea:67:
                    b7:fa:3e:90:ee:bc:3f:7e:4e:ff:1c:33:fa:62:12:
                    93:96:5c:c0:95:13:82:6b:53:28:29:1d:96:c0:26:
                    d4:59:0f:cf:d2:b4:ee:8c:28:1b:bb:f1:b4:17:43:
                    25:2a:db:da:0a:e6:47:fa:ed:d3:1a:4e:9c:35:7b:
                    f4:9b:6b:39:69:36:10:a8:84:4a:80:d8:f4:38:f3:
                    74:5f:1a:b0:f6:e2:53:87:bf:9d:fd:b4:13:b6:8a:
                    58:4a:d9:01:ee:0e:28:50:9e:aa:08:d4:a4:90:11:
                    35:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:46:A2:C0:73:43:CD:2B:88:0A:71:E0:0F:BB:FE:4C:5B:68:BE:F3
            X509v3 Authority Key Identifier:
                keyid:53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:7a:fc:51:fb:47:6d:5e:9f:59:7e:4a:09:f2:62:fc:00:23:
         e4:67:13:4b:f8:1b:50:1a:f5:6f:0a:38:d5:b2:37:55:6b:6c:
         a4:f1:57:07:ff:74:7b:cb:89:cd:63:d3:f3:f6:f4:92:cb:61:
         c4:01:b4:e1:03:b4:09:98:34:53:39:ff:24:62:7a:86:e6:e9:
         ce:22:15:5f:72:ea:a0:18:c4:95:96:14:d4:ba:ce:8d:96:79:
         2a:a1:97:c2:0e:6a:d4:c9:54:aa:f1:d0:8f:64:dc:8c:25:83:
         55:4c:22:7b:66:fb:03:cf:d4:30:53:e6:f2:d3:35:7c:2a:6e:
         13:60:47:8b:4c:a0:b1:4e:52:bc:6e:8a:e5:b8:9f:4a:dc:ea:
         ac:30:01:24:c4:ba:a7:3a:e2:e9:db:a6:1b:12:ac:52:d1:f7:
         6a:c3:c6:91:5d:51:39:1f:07:1a:e1:a8:72:14:84:eb:1d:ad:
         e7:c7:6f:5d:d4:ca:62:6f:9d:da:98:24:9e:f9:cc:26:5d:e2:
         1a:9f:41:10:b3:74:ec:96:09:92:4e:12:6c:4f:02:e8:0c:58:
         ae:87:cd:fc:5f:a5:8f:6c:b3:24:38:d8:e4:a0:95:e6:15:29:
         93:7d:8d:41:28:b7:5c:2e:ba:4b:ab:02:fb:5c:bd:5c:4b:27:
         cb:ec:31:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:57:15 2026 by rpki-client