Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
File:                     Ua-8FGJFXphp1IslexjiO-d6psM.mft (raw, json)
Hash identifier:          cv8C1i0QjxXumRSgJgmPlrSYsgpgBf3dSfHlyJ1t2h8=
Subject key identifier:   29:12:16:24:06:E2:64:C8:E0:D9:2D:D7:94:0D:A2:8C:BB:90:40:60
Authority key identifier: 51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3
Certificate issuer:       /CN=51afbc1462455e9869d48b257b18e23be77aa6c3
Certificate serial:       019D2771E53FC3D954878ACEB653A135086D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
Manifest number:          110A
Signing time:             Thu 26 Mar 2026 00:01:08 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:08 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:08 +0000
Files and hashes:         1: GYTArtIgvINKT637yicE0RzC_gA.roa (hash: Lep0lB2c1nnq/plQOSLHCa5SiVLmUmJL/Hit/FXoSs8=)
                          2: Ua-8FGJFXphp1IslexjiO-d6psM.crl (hash: C1kDESGbonTmiM5LppGpNOQKBitXWrfmt28BmTN65AY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:71:e5:3f:c3:d9:54:87:8a:ce:b6:53:a1:35:08:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51afbc1462455e9869d48b257b18e23be77aa6c3
        Validity
            Not Before: Mar 26 00:01:08 2026 GMT
            Not After : Mar 27 00:01:08 2026 GMT
        Subject: CN=2912162406e264c8e0d92dd7940da28cbb904060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:22:1e:9f:7d:1b:a6:e2:e1:f5:bf:a1:d6:c2:
                    cc:be:fb:77:f0:d7:4a:71:b0:46:fa:60:ab:ab:50:
                    10:7f:84:cc:fb:ec:75:38:b0:0c:41:18:4d:b5:26:
                    b0:b8:b1:81:98:e0:0f:6d:c4:2b:80:4b:7f:02:1e:
                    a2:b8:1b:b9:35:99:fe:d8:39:b4:82:5b:ac:18:bd:
                    fe:39:9f:6d:dd:28:b9:d8:19:fb:47:e4:03:8a:b6:
                    08:8f:c9:33:1b:f9:46:ed:49:01:e9:f8:12:31:87:
                    20:11:87:54:6e:be:e3:85:42:e3:8d:d7:0a:21:d2:
                    c6:12:cc:97:cb:57:de:48:93:8a:c4:bf:54:09:21:
                    92:0b:74:e4:2d:8f:ab:82:dd:a3:03:88:65:ae:93:
                    8e:de:6c:e3:04:99:ce:7e:e8:3b:6e:a2:21:cf:90:
                    74:4b:86:37:3f:51:59:0f:cb:ae:84:12:e3:8b:22:
                    b9:d6:29:2c:bb:e0:f9:af:0d:8d:8c:46:43:b0:e6:
                    32:f6:f6:c9:f8:a2:ff:e9:0a:be:4b:d9:2f:84:bb:
                    7b:66:44:35:f4:52:18:fc:8d:28:2e:7c:62:40:20:
                    38:44:98:3d:94:cc:d2:21:83:ef:e0:d2:2a:d8:77:
                    14:e5:0f:af:77:52:f8:88:1a:1c:5e:d7:14:0b:6b:
                    aa:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:12:16:24:06:E2:64:C8:E0:D9:2D:D7:94:0D:A2:8C:BB:90:40:60
            X509v3 Authority Key Identifier:
                keyid:51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:a4:e4:e3:63:8c:97:a7:53:4b:64:73:89:cd:7f:25:22:c7:
         9c:e4:3a:fa:95:3a:a4:b0:b3:f2:92:be:01:dc:50:3c:70:ed:
         d1:53:69:ff:10:d9:f5:e7:a4:3b:95:e5:23:8a:77:66:c8:28:
         05:6a:36:28:8d:da:3b:85:c9:1c:e5:b6:54:19:ce:92:53:97:
         7a:6a:2a:e0:8e:12:ee:72:d7:a2:41:b7:f6:10:f2:8c:1f:3e:
         30:1b:4f:fa:a0:ef:f9:5b:3c:f6:a6:02:bb:d2:25:1e:a1:e0:
         a7:56:6b:01:4b:56:93:d2:5d:54:e8:71:6c:f3:d3:2e:7c:7a:
         13:91:9c:c5:fa:2a:5a:86:f3:2a:c4:79:b9:d8:63:34:66:05:
         df:d9:6e:68:30:12:c8:cf:2f:df:e1:51:d9:73:a9:65:8d:4f:
         f2:7e:e0:15:d3:8e:6d:89:78:82:6d:ad:03:24:44:ed:75:c8:
         6b:3a:4b:b0:78:9a:bd:71:59:c7:a2:66:d5:ff:54:dc:40:a7:
         b2:77:f9:5b:46:1f:8a:3e:be:00:89:99:eb:ce:06:75:df:b2:
         09:98:ea:69:60:f5:e4:58:f6:c8:f3:0d:cf:92:f4:38:43:e9:
         7c:6f:5c:c6:50:c9:1c:7c:d0:9b:a4:a9:0d:ef:0a:0f:f1:00:
         d4:f9:60:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:21:36 2026 by rpki-client