Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
File:                     UoMHMHbmc6Mrfda83A-8wW83tqE.mft (raw, json)
Hash identifier:          pi6LEpVIG4hT9QfXpp38CFs6lJjidaJD5oMGuRXT7j8=
Subject key identifier:   86:6C:14:1C:A1:F7:E5:A5:AC:00:E2:02:EA:7D:4A:18:38:DB:C4:78
Authority key identifier: 52:83:07:30:76:E6:73:A3:2B:7D:D6:BC:DC:0F:BC:C1:6F:37:B6:A1
Certificate issuer:       /CN=5283073076e673a32b7dd6bcdc0fbcc16f37b6a1
Certificate serial:       019D28BB2B800B19762A5D0ACF4EF7B6C84C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
Manifest number:          1889
Signing time:             Thu 26 Mar 2026 06:00:48 +0000
Manifest this update:     Thu 26 Mar 2026 06:00:48 +0000
Manifest next update:     Fri 27 Mar 2026 06:00:48 +0000
Files and hashes:         1: Jl1SU-xkBOcLP1W_NElxZ0fZTis.roa (hash: wF2WX53G3BqzGaZSb7k+E/KvA+vOFQAtSMl5iV+YPMg=)
                          2: UoMHMHbmc6Mrfda83A-8wW83tqE.crl (hash: P+pHH1vUUEWhTbGZYOJ+nZeD4sbTMdO/yS1pqQhFI0w=)
                          3: e37qSS4lM51pp_7NmwBBNPNYUQs.roa (hash: ASWof8eb9bNGVZSD2vAjoFRDN+8AOfifbyspUkbdPAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 06:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:2b:80:0b:19:76:2a:5d:0a:cf:4e:f7:b6:c8:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5283073076e673a32b7dd6bcdc0fbcc16f37b6a1
        Validity
            Not Before: Mar 26 06:00:48 2026 GMT
            Not After : Mar 27 06:00:48 2026 GMT
        Subject: CN=866c141ca1f7e5a5ac00e202ea7d4a1838dbc478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ae:ab:dd:99:82:be:7c:58:f2:60:22:1d:16:
                    47:26:36:46:63:f3:51:12:d4:51:af:d3:6a:14:ff:
                    08:ea:6e:ab:39:0b:02:f5:59:e2:59:ba:85:60:49:
                    12:0e:4d:7c:72:6e:8d:8a:a2:2e:2f:9a:56:ac:28:
                    ca:29:d6:a7:1e:37:3b:64:0f:56:8b:d3:39:60:e3:
                    9a:90:9b:3c:a0:9e:36:e4:d5:0a:06:3e:b1:82:c5:
                    35:59:bf:cb:af:63:0b:b5:2e:7a:08:ba:1c:53:f6:
                    82:f2:c2:46:b9:53:1e:d2:c6:c4:f8:39:5b:dd:60:
                    08:8d:d2:88:f8:c6:b8:a5:01:c0:da:ee:ca:d5:a5:
                    40:55:ab:36:d3:eb:1b:b7:3d:bd:6b:59:bc:30:45:
                    c0:78:72:a3:f1:e1:52:82:0c:07:5a:b0:ac:b1:54:
                    ed:d5:a6:55:8f:f5:a2:9a:74:2d:01:1b:54:24:27:
                    2b:8a:40:0c:03:43:14:d3:82:19:ed:3d:a1:bb:3d:
                    ac:ea:b9:4f:7c:a6:39:e6:45:32:62:1c:ed:01:b1:
                    2b:d8:f4:bf:85:b5:43:bc:a1:c8:c5:0f:a8:91:70:
                    a2:ab:e7:5c:d7:bc:1f:75:08:d2:7e:bb:fe:46:23:
                    82:98:e0:de:5b:4e:49:8d:20:e8:32:60:60:71:20:
                    2f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:6C:14:1C:A1:F7:E5:A5:AC:00:E2:02:EA:7D:4A:18:38:DB:C4:78
            X509v3 Authority Key Identifier:
                keyid:52:83:07:30:76:E6:73:A3:2B:7D:D6:BC:DC:0F:BC:C1:6F:37:B6:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:66:f7:19:30:d8:59:23:b1:cf:a8:be:84:38:d8:58:4a:ee:
         b4:83:dd:f8:17:4e:fd:b5:68:7e:c3:ee:13:78:a7:81:e8:27:
         b4:90:40:c7:b8:19:6b:5a:53:51:75:95:23:1e:02:56:18:93:
         18:03:28:16:71:70:a0:a2:21:3c:09:71:9c:00:89:e2:94:1c:
         79:e7:63:12:7d:04:2a:48:77:0b:98:d7:b1:0c:5f:61:f7:60:
         52:00:ca:87:1f:74:4c:80:83:6f:59:38:3b:5d:3b:2d:e7:3a:
         a2:54:93:7a:be:14:47:83:fb:98:39:9a:44:d6:3f:c4:bf:1a:
         aa:d9:ad:f0:e7:d4:8b:c5:f3:da:0b:f1:7e:f1:11:63:c1:62:
         a8:be:a7:d3:d9:f1:78:cb:df:7f:06:a8:7f:cf:aa:15:fe:b2:
         6b:c8:c2:a9:79:5c:af:62:60:02:0d:d4:91:e3:4d:f7:e7:fd:
         8b:d8:46:79:cf:a5:d4:1f:ab:8e:ff:2d:4c:f8:31:8b:73:02:
         e0:fe:d0:fa:ed:34:dc:81:73:cb:e6:97:a1:5b:c7:30:56:bd:
         88:c9:3c:9a:38:7c:d3:19:92:65:f0:b3:4d:3e:40:05:ad:c6:
         14:b0:a8:3c:5c:db:a7:2d:6d:31:1e:b5:a1:7a:06:7c:fb:6a:
         fb:90:44:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ouyuACxl2Kl0Kz073tshMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyODMwNzMwNzZlNjczYTMyYjdkZDZiY2RjMGZiY2MxNmYz
N2I2YTEwHhcNMjYwMzI2MDYwMDQ4WhcNMjYwMzI3MDYwMDQ4WjAzMTEwLwYDVQQD
Eyg4NjZjMTQxY2ExZjdlNWE1YWMwMGUyMDJlYTdkNGExODM4ZGJjNDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA666r3ZmCvnxY8mAiHRZHJjZGY/NR
EtRRr9NqFP8I6m6rOQsC9VniWbqFYEkSDk18cm6NiqIuL5pWrCjKKdanHjc7ZA9W
i9M5YOOakJs8oJ425NUKBj6xgsU1Wb/Lr2MLtS56CLocU/aC8sJGuVMe0sbE+Dlb
3WAIjdKI+Ma4pQHA2u7K1aVAVas20+sbtz29a1m8MEXAeHKj8eFSggwHWrCssVTt
1aZVj/WimnQtARtUJCcrikAMA0MU04IZ7T2huz2s6rlPfKY55kUyYhztAbEr2PS/
hbVDvKHIxQ+okXCiq+dc17wfdQjSfrv+RiOCmODeW05JjSDoMmBgcSAv5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZsFByh9+WlrADiAup9Shg428R4MB8GA1UdIwQY
MBaAFFKDBzB25nOjK33WvNwPvMFvN7ahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW9NSE1IYm1jNk1yZmRhODNBLTh3VzgzdHFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8yN2U1MjctZTAyZS00YzMwLWE4NmIt
M2MzNTRkNjE4YjNhLzEvVW9NSE1IYm1jNk1yZmRhODNBLTh3VzgzdHFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8yN2U1MjctZTAyZS00YzMwLWE4NmItM2MzNTRkNjE4YjNh
LzEvVW9NSE1IYm1jNk1yZmRhODNBLTh3VzgzdHFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa2b3GTDY
WSOxz6i+hDjYWErutIPd+BdO/bVofsPuE3ingegntJBAx7gZa1pTUXWVIx4CVhiT
GAMoFnFwoKIhPAlxnACJ4pQceedjEn0EKkh3C5jXsQxfYfdgUgDKhx90TICDb1k4
O107Lec6olSTer4UR4P7mDmaRNY/xL8aqtmt8OfUi8Xz2gvxfvERY8FiqL6n09nx
eMvffwaof8+qFf6ya8jCqXlcr2JgAg3UkeNN9+f9i9hGec+l1B+rjv8tTPgxi3MC
4P7Q+u003IFzy+aXoVvHMFa9iMk8mjh80xmSZfCzTT5ABa3GFLCoPFzbpy1tMR61
oXoGfPtq+5BEZQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:37:21 2026 by rpki-client