Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft
File:                     UVGCTBK9Pir3qYdSSnozqPGdgec.mft (raw, json)
Hash identifier:          UqTcz+2or+xbqxWGFXEQJZGCsJUCUHAGekEg3Q8aq9c=
Subject key identifier:   9E:38:BF:DE:3F:C5:12:65:B7:F0:42:A7:5C:0F:C7:25:EC:73:76:A4
Authority key identifier: 51:51:82:4C:12:BD:3E:2A:F7:A9:87:52:4A:7A:33:A8:F1:9D:81:E7
Certificate issuer:       /CN=5151824c12bd3e2af7a987524a7a33a8f19d81e7
Certificate serial:       019D265F1B4083478CC62DC08422CE0D3CF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UVGCTBK9Pir3qYdSSnozqPGdgec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft
Manifest number:          0719
Signing time:             Wed 25 Mar 2026 19:00:59 +0000
Manifest this update:     Wed 25 Mar 2026 19:00:59 +0000
Manifest next update:     Thu 26 Mar 2026 19:00:59 +0000
Files and hashes:         1: 3TqJFN82Ou6cnj7WZNmB53ds8d4.roa (hash: t6g92VZ+NxfWvf9Aux0ZfBmHd6Qz4U2PHoGnC8Owa3k=)
                          2: UVGCTBK9Pir3qYdSSnozqPGdgec.crl (hash: g3l0Z2jfhknUe0abG888H1VFylQUO+LBOldYSu2h/cI=)
                          3: xuWwl1BgKwPOCVw1Rz6hhY_T8g0.roa (hash: NHfKK1fHeYkhRnZLWNEvRWzPkzzE4p2I2B1Y78FJZF0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UVGCTBK9Pir3qYdSSnozqPGdgec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:1b:40:83:47:8c:c6:2d:c0:84:22:ce:0d:3c:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5151824c12bd3e2af7a987524a7a33a8f19d81e7
        Validity
            Not Before: Mar 25 19:00:59 2026 GMT
            Not After : Mar 26 19:00:59 2026 GMT
        Subject: CN=9e38bfde3fc51265b7f042a75c0fc725ec7376a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ce:2d:7f:c3:b4:7e:f3:33:b9:ca:4c:aa:35:
                    03:03:76:8e:c0:af:78:0d:0e:dd:cf:ce:22:92:06:
                    57:d3:ec:61:21:14:26:47:d7:3c:a0:43:32:8c:0d:
                    15:29:06:0c:fd:f1:f8:36:88:a6:c2:8f:6f:8f:81:
                    4d:b5:fc:d2:e2:c9:b3:f0:23:f3:dd:f5:86:b4:09:
                    ee:46:59:90:db:4f:5e:fc:ac:e1:45:06:3f:63:70:
                    82:ef:6c:e0:6b:77:f3:e4:6c:6b:d7:55:01:97:8e:
                    89:a1:01:c5:5d:a9:28:74:39:93:63:36:65:16:79:
                    e5:1d:fc:02:ce:92:33:a4:d1:32:97:52:57:ff:43:
                    91:bd:f2:32:65:7a:ba:a8:40:09:a3:ee:13:27:66:
                    a2:06:57:b1:2c:6d:cc:dd:c1:53:0e:0e:db:a8:6b:
                    ce:3b:d3:ae:44:dc:c1:ba:c7:37:05:30:a3:21:82:
                    aa:4a:88:a0:52:d9:43:9f:b1:4b:2a:54:ed:0f:3c:
                    3f:e2:eb:91:8d:d4:4a:7f:07:6f:b5:4c:2f:d0:97:
                    70:56:49:e3:d7:3e:7e:33:dc:0b:c5:1a:a4:f1:26:
                    98:8e:40:84:36:89:51:62:00:d9:cd:6d:36:3c:7d:
                    78:4d:80:13:85:b1:9e:40:63:f8:d4:76:59:17:64:
                    69:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:38:BF:DE:3F:C5:12:65:B7:F0:42:A7:5C:0F:C7:25:EC:73:76:A4
            X509v3 Authority Key Identifier:
                keyid:51:51:82:4C:12:BD:3E:2A:F7:A9:87:52:4A:7A:33:A8:F1:9D:81:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVGCTBK9Pir3qYdSSnozqPGdgec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:c6:68:cc:c1:8b:9c:6f:67:98:7e:ed:67:48:07:dd:7b:d4:
         3b:bc:4d:a6:96:72:51:68:9c:b4:03:c7:9a:7d:8b:ee:84:9f:
         a5:ef:78:a8:bc:ca:74:4d:24:42:36:95:8f:52:7d:b2:81:d9:
         52:ce:d8:cb:5e:67:58:8b:a6:07:fe:0e:bd:a0:4f:42:49:f3:
         43:1b:c3:63:d3:62:49:4f:ba:30:f4:c9:3b:16:5d:d2:75:c3:
         b2:df:ab:61:da:62:f3:2a:88:b7:c5:2c:b0:82:0f:37:ca:63:
         e4:b7:c0:57:b7:44:47:8c:9f:ac:a8:c7:cf:97:9f:d1:e8:cd:
         03:49:43:22:0a:ad:77:51:ef:38:6b:0b:84:af:57:dd:9a:cd:
         cc:19:06:af:15:ae:a8:0a:be:3c:60:39:04:91:61:f8:87:4e:
         3a:d9:c3:9e:69:dc:11:19:31:b4:88:be:96:8f:9a:4b:c1:68:
         8e:e7:1a:68:89:fe:a8:ac:d7:de:d5:35:8a:af:09:18:7a:93:
         ff:43:bb:dd:06:68:1a:48:cc:b8:8a:e0:93:1d:59:ed:f0:b0:
         98:f8:5e:5d:9c:e4:5d:17:93:77:e6:ab:e8:4a:8f:6b:bd:6f:
         8b:fc:66:4a:48:d2:24:4e:b9:87:0c:67:1b:f6:49:bf:2b:ea:
         b1:d5:e4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:46:18 2026 by rpki-client