Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft
File:                     uTDaIVGBhBRfbXYhtaE71UA1rIM.mft (raw, json)
Hash identifier:          mEdnjjz8C7/IFyxKsWqLWhUkj+6zF8q0NUydRcUxXUU=
Subject key identifier:   2B:C6:57:A3:58:39:71:70:51:59:CE:D7:C7:87:47:DA:BD:24:A1:9E
Authority key identifier: B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83
Certificate issuer:       /CN=b930da21518184145f6d7621b5a13bd54035ac83
Certificate serial:       019D26CCF244E40E4C92F58B903D52DF628D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft
Manifest number:          1883
Signing time:             Wed 25 Mar 2026 21:00:58 +0000
Manifest this update:     Wed 25 Mar 2026 21:00:58 +0000
Manifest next update:     Thu 26 Mar 2026 21:00:58 +0000
Files and hashes:         1: Be8LblN_WsFoFsGu_QkIYbsLZMI.roa (hash: 4P/iotN6FmCSgpC5Liy5/5RLiOPYgv+FOHKRLXysJwc=)
                          2: OulomjatgU8B25dvFpqGURlBgcU.roa (hash: cQm9KuIWCCDGGQfAHCVTwYW3k+71Z7DZyQnTjaIdRSA=)
                          3: oRx6EJhqzaqgG0amciWL3M5KR-E.roa (hash: OiolxTV+7ThPd+hCMKxyTyX6crUMp94Obmmo4AolkqE=)
                          4: uTDaIVGBhBRfbXYhtaE71UA1rIM.crl (hash: 6Y2gYWdRsYr7WHQlcEvHMgdfolGRF8zA9H0xm6D5hyE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cc:f2:44:e4:0e:4c:92:f5:8b:90:3d:52:df:62:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b930da21518184145f6d7621b5a13bd54035ac83
        Validity
            Not Before: Mar 25 21:00:58 2026 GMT
            Not After : Mar 26 21:00:58 2026 GMT
        Subject: CN=2bc657a3583971705159ced7c78747dabd24a19e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e3:52:72:1c:87:84:d0:df:2f:93:c0:9b:ca:
                    d9:7b:a3:c6:2d:5d:15:21:bf:05:7d:9b:45:08:14:
                    68:e0:98:ed:1d:60:bd:50:3f:dc:d2:d2:c3:d2:b0:
                    4e:dd:2b:7e:9d:d1:f9:9e:b1:19:8d:2a:c9:07:7a:
                    8a:d9:b8:eb:62:c4:80:e2:c9:bb:8d:89:fe:8b:8d:
                    e8:ab:57:ec:c7:07:0a:c7:a2:ff:36:8c:8d:6a:57:
                    f7:d9:57:76:3e:52:d6:57:02:09:54:a5:a6:85:3e:
                    cf:53:12:79:ab:94:8e:03:47:b5:cf:76:76:07:63:
                    c3:7b:13:48:2d:62:1c:78:5f:a8:65:03:04:eb:65:
                    6f:8d:dd:5f:21:74:de:2c:53:94:d6:43:ac:54:f0:
                    6b:cf:d1:1b:6a:e3:9e:ae:fc:4b:9a:0a:44:fe:d1:
                    1e:42:dc:0e:87:7f:37:ae:5d:cd:a2:a4:84:6a:45:
                    82:20:4c:91:96:0f:00:65:f3:3b:eb:b2:20:65:4e:
                    f4:ec:c8:b1:7a:05:9a:5d:74:fb:c4:60:78:62:50:
                    7a:56:09:da:d5:a2:84:8e:da:37:c2:17:86:b8:a9:
                    70:7d:68:ff:9e:d0:1a:6b:4a:d1:f5:67:92:c2:f9:
                    55:56:b2:8a:53:e6:bc:b1:18:61:97:7f:68:48:4e:
                    fd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C6:57:A3:58:39:71:70:51:59:CE:D7:C7:87:47:DA:BD:24:A1:9E
            X509v3 Authority Key Identifier:
                keyid:B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:19:39:f7:a5:f0:ce:ca:fd:7d:e7:11:6a:5e:3f:d5:9a:d0:
         0a:93:f9:57:cb:43:9e:c5:dc:8f:59:70:92:98:d5:17:0b:e5:
         51:e7:31:06:04:1d:ec:4f:e4:45:3c:9b:51:da:0e:90:71:c0:
         ca:4a:97:e4:f7:e9:e1:db:b0:c9:5d:8a:ea:b0:41:b3:2e:67:
         32:e7:34:29:47:0a:db:46:d4:8c:ba:9d:1a:72:c3:a9:10:ec:
         56:40:b7:95:23:cc:8f:80:87:ba:9e:0b:33:10:85:69:d9:25:
         79:ed:f2:67:87:bc:3b:35:0d:a1:6c:1a:ce:e8:d1:8e:ed:74:
         2b:07:2d:08:2d:f1:04:74:94:48:cb:29:31:16:2b:a4:1f:8d:
         b6:9b:74:ab:f3:78:e5:66:16:d2:83:54:11:97:95:99:06:4a:
         52:75:76:63:98:ff:fe:c0:6d:ab:69:09:23:41:29:49:60:4d:
         b8:b5:f2:d0:91:f0:86:2d:f9:b5:96:0f:23:23:30:1e:7c:da:
         c8:81:03:b7:4c:70:46:a8:54:19:7f:3d:a5:1f:9a:aa:7e:95:
         4e:82:e4:d7:21:f1:f7:df:f4:10:9a:35:75:2d:f6:c8:65:f5:
         d1:57:67:52:b8:ed:c2:fb:49:3f:9e:98:6f:3d:75:71:51:13:
         55:61:e9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:19 2026 by rpki-client