Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
File:                     UFEncj6gz9ByRxOykXNMqjU-IOo.mft (raw, json)
Hash identifier:          7scskFGZ4q4aPUlQZnV5EedXGyk4NjJyRMmhWjtqbNM=
Subject key identifier:   89:A9:30:86:46:82:BD:9E:56:D5:9D:50:84:04:C3:DD:54:C3:83:7E
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Certificate issuer:       /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial:       019D2B1755E72C6244E76E6AA5370A4453FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
Manifest number:          189C
Signing time:             Thu 26 Mar 2026 17:00:42 +0000
Manifest this update:     Thu 26 Mar 2026 17:00:42 +0000
Manifest next update:     Fri 27 Mar 2026 17:00:42 +0000
Files and hashes:         1: 14cEr7aw02iRpmKpyvIitczolkE.roa (hash: tnVtFBhFwWzq6hl069GjNphOkbpm/TSjb8WTv76Dy+o=)
                          2: JExJtb-2H86T5l_2TNtSXSkGdK4.roa (hash: PhyjLCVkG5sspCrwOMxylvOtWm2ph/t/PSTEggPhL8U=)
                          3: UFEncj6gz9ByRxOykXNMqjU-IOo.crl (hash: Fc5Fsrc1tR1p+Yvy+i9Q1ueiXl9eM3NGS6FWmsEKjv4=)
                          4: Ujf1HQzWin0iYAwrw7fkvXgREuQ.roa (hash: f0htKcIDwehLOvh5H4qdrK1WzEMGMziN25syYu4+eGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:17:55:e7:2c:62:44:e7:6e:6a:a5:37:0a:44:53:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
        Validity
            Not Before: Mar 26 17:00:42 2026 GMT
            Not After : Mar 27 17:00:42 2026 GMT
        Subject: CN=89a930864682bd9e56d59d508404c3dd54c3837e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0f:64:a2:c1:5b:7c:53:ab:a6:48:4c:bd:52:
                    ef:36:51:39:99:47:5f:ed:42:35:46:cd:2b:c9:bd:
                    b9:9d:be:c9:c4:c4:8e:d6:8a:9b:43:7b:7b:ac:89:
                    21:5b:fb:96:32:e8:e6:9c:d4:15:18:d0:13:94:d6:
                    c6:aa:92:3b:70:56:50:78:74:fc:bf:c0:b8:1a:f0:
                    c0:f8:d0:12:c8:05:ad:0d:34:d4:41:67:c8:cb:b7:
                    bb:ee:f6:97:ed:42:ac:b5:bb:0a:e7:13:02:47:be:
                    b1:82:d8:65:3b:2f:f0:26:77:a9:90:98:aa:2d:aa:
                    f2:15:65:ab:6b:39:bb:b6:fe:56:ff:97:80:44:5e:
                    24:32:b5:f9:06:4f:e6:55:66:5f:d4:e6:95:43:21:
                    08:69:d2:23:31:e6:44:3b:28:0a:f5:13:68:cf:c2:
                    dc:10:14:f2:a9:24:7c:3c:64:19:2f:c5:d5:8c:ae:
                    c4:91:7c:9c:20:f8:90:c1:21:3b:55:78:79:51:5a:
                    2f:f8:b5:4f:0f:da:f3:1a:ad:f2:7f:ca:91:cc:50:
                    d8:d3:e1:2b:88:f3:81:08:04:b0:57:83:35:df:77:
                    9e:fe:f8:96:db:f2:74:4d:ce:12:ba:9c:3b:4a:1c:
                    f4:ee:83:36:be:c3:5d:a0:d9:40:fd:e4:e2:b1:45:
                    33:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A9:30:86:46:82:BD:9E:56:D5:9D:50:84:04:C3:DD:54:C3:83:7E
            X509v3 Authority Key Identifier:
                keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:4d:95:20:1d:6d:ac:bc:7c:59:9e:2e:5e:10:a7:41:47:bb:
         87:f6:42:d9:e2:b2:f0:7e:2a:2c:e7:7e:8c:66:3d:14:23:2f:
         b3:a6:02:a5:3e:86:eb:eb:6b:34:9d:ce:ed:41:2e:80:b2:fc:
         51:53:6f:bd:10:b3:92:2b:d3:ab:fb:90:35:ab:34:77:ca:6d:
         ea:39:67:42:e3:5f:33:3f:00:c6:6a:69:e7:b1:a6:1e:f8:09:
         28:48:c6:64:9e:ae:1c:b6:12:00:b6:3c:da:2d:a3:51:e1:89:
         44:6b:19:0c:17:2a:c1:82:d5:64:3a:67:af:a8:d3:7e:69:43:
         79:f1:81:01:4c:04:2c:68:9b:8b:01:ae:71:f9:95:84:71:b8:
         e5:d4:64:04:c6:63:25:ce:90:04:0b:cf:17:6c:bf:17:c0:4f:
         53:69:cd:76:91:ba:c0:e5:c3:76:1e:82:e4:94:80:cf:93:48:
         8d:25:73:14:a1:e1:b1:c8:54:2d:02:a2:6e:8d:2a:2c:54:f4:
         f7:37:dc:df:68:0d:71:24:5e:26:d3:4a:d5:5f:54:92:ca:9c:
         88:5c:61:6a:c1:e6:16:15:40:8a:30:42:40:54:6c:40:11:63:
         c4:e4:2b:7d:ba:98:74:e1:70:bc:82:31:8f:77:43:b6:fd:7c:
         88:cc:04:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:04:04 2026 by rpki-client