Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.mft
File:                     U1hROBB5ZcOJ82e1Wr15K1Meuco.mft (raw, json)
Hash identifier:          JCBDm/5t+WwHdgPZIuOM5Saaq6mDydpvmhml0dz+1tM=
Subject key identifier:   47:88:3E:38:40:B0:27:C3:BE:E4:F7:DF:11:18:81:33:62:40:76:66
Authority key identifier: 53:58:51:38:10:79:65:C3:89:F3:67:B5:5A:BD:79:2B:53:1E:B9:CA
Certificate issuer:       /CN=53585138107965c389f367b55abd792b531eb9ca
Certificate serial:       019D27E01DBDB3EA85C8678F4A9F8458A7B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U1hROBB5ZcOJ82e1Wr15K1Meuco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.mft
Manifest number:          0971
Signing time:             Thu 26 Mar 2026 02:01:32 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:32 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:32 +0000
Files and hashes:         1: EvEuN17BJ9vGyYCGgJ1an9fP9sQ.roa (hash: tKY9v1gC0C+RNHLN0VBuXiREaB1BHfONGebwE/+0gCE=)
                          2: U1hROBB5ZcOJ82e1Wr15K1Meuco.crl (hash: v+PV8xujc4hISRZPmZca8/azsNlUoM4/GBycXnSuDq0=)
                          3: mNafWshijFwD-Ut7Wdi6Nk68ro4.roa (hash: y33b561nOMPIeg/yMx0/7quUZ2RAxT/gk02bC3hNJts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U1hROBB5ZcOJ82e1Wr15K1Meuco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 02:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:1d:bd:b3:ea:85:c8:67:8f:4a:9f:84:58:a7:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53585138107965c389f367b55abd792b531eb9ca
        Validity
            Not Before: Mar 26 02:01:32 2026 GMT
            Not After : Mar 27 02:01:32 2026 GMT
        Subject: CN=47883e3840b027c3bee4f7df1118813362407666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d8:b3:aa:e7:07:8d:b6:b7:f5:66:74:09:c9:
                    b1:f7:16:e0:f0:78:8b:06:fc:7d:d7:fc:26:ee:c0:
                    12:bd:ce:84:cc:c6:f3:ef:fb:50:26:8b:d3:8f:1e:
                    fd:2e:45:d1:76:2c:84:0c:93:95:0d:27:3b:80:31:
                    0a:80:3c:25:c3:48:e1:d9:1d:7f:a7:21:88:21:4f:
                    de:3c:5e:a7:2f:d7:55:b0:f3:be:e1:7f:84:a5:4d:
                    2a:0f:9e:cf:ae:b4:b2:18:92:9e:cf:38:bf:8f:f2:
                    20:1d:73:16:ff:64:15:06:bd:92:25:d2:3d:41:df:
                    16:a0:4b:01:43:c4:11:c0:48:93:7e:16:db:ab:f6:
                    2f:2d:57:c8:17:ef:ee:f3:e5:8e:63:89:84:4d:b6:
                    d6:14:0c:e8:0f:82:86:7f:8f:65:38:de:e5:bf:cf:
                    27:53:67:96:87:25:3e:4c:e9:83:67:a3:e2:d8:89:
                    38:a8:af:c7:2a:ee:5b:44:1d:19:e5:17:af:86:e6:
                    78:ee:1c:62:a4:b6:83:24:2d:65:0d:c3:54:75:bb:
                    e5:4d:2e:a6:84:07:e7:2b:32:ea:bf:a9:ce:27:d5:
                    11:c8:31:c8:c4:26:eb:89:a2:71:db:c2:82:a4:48:
                    d9:aa:76:48:52:02:8e:ad:e5:5a:91:22:df:df:78:
                    66:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:88:3E:38:40:B0:27:C3:BE:E4:F7:DF:11:18:81:33:62:40:76:66
            X509v3 Authority Key Identifier:
                keyid:53:58:51:38:10:79:65:C3:89:F3:67:B5:5A:BD:79:2B:53:1E:B9:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1hROBB5ZcOJ82e1Wr15K1Meuco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:03:f9:4a:62:87:22:fa:84:8c:6b:d1:e7:fa:05:cb:0c:24:
         a5:ef:d9:fe:fe:ea:3a:e0:fa:df:8c:fd:aa:a1:25:10:d4:4f:
         fa:70:ef:6c:a7:60:e8:e0:6b:59:ae:3d:95:04:2c:73:de:22:
         54:00:f7:0c:3c:76:85:83:e4:6a:aa:3f:f4:68:71:dd:27:fb:
         d2:06:95:07:1b:aa:d0:b9:d7:6c:be:51:28:ac:72:fe:3e:74:
         f4:97:2b:4e:f0:ff:da:76:7d:78:d9:50:13:0c:bb:17:4c:b9:
         eb:17:12:c1:a5:c7:da:0c:8b:85:77:7d:ae:3c:fa:a1:3f:40:
         55:83:dd:56:77:20:13:7d:24:2d:e1:39:27:8d:3a:04:0e:d7:
         29:03:01:29:7c:1f:5b:bd:93:fc:13:9b:27:be:43:15:9d:c0:
         13:17:9b:59:43:2d:c9:46:6c:87:75:c8:de:d5:07:61:cc:17:
         75:01:f4:b5:b0:c2:b5:d0:ef:e8:30:3d:56:12:2d:c8:45:6e:
         a8:67:47:b2:46:f6:43:af:4d:0c:5c:60:1a:b0:d0:32:7d:d5:
         6a:25:33:73:fd:d6:c3:e2:a1:b8:2e:a8:81:70:0d:f8:98:6d:
         09:32:5c:ba:1f:4e:23:95:2a:ed:b9:de:ed:9e:b5:31:11:68:
         b5:6d:5f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:02:04 2026 by rpki-client