Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft
File:                     uMiqGHMPSoPihSxWklUau1se5-o.mft (raw, json)
Hash identifier:          mw2rzsPZH1c9+QfXiSi1UGJAEaRk0a6Nxq7WDAEcUH0=
Subject key identifier:   8A:6C:B7:E3:E3:BF:90:F0:15:C9:93:AA:E5:DD:1F:31:C9:B4:8C:AE
Authority key identifier: B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
Certificate issuer:       /CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Certificate serial:       019D25BA3CA01221CB8020C74074A1288A28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft
Manifest number:          1892
Signing time:             Wed 25 Mar 2026 16:00:55 +0000
Manifest this update:     Wed 25 Mar 2026 16:00:55 +0000
Manifest next update:     Thu 26 Mar 2026 16:00:55 +0000
Files and hashes:         1: 1v0gzSVrdpHJ1kxvOwfKSyYCpL8.roa (hash: cmDo8iK0CyxoS3TeSJaKn0b54YS7ZfZ1R+BFgSwd9T4=)
                          2: BeOlGfd4kyL56CFBTNlFeg1iQCc.roa (hash: 6DQD4VPy7IHhfQDtQNtD6rCp0/TWA+VmwTvJtNQ72aQ=)
                          3: etyrPt1aZEu7O63zljCUb1u_zQU.roa (hash: hrkIclXJJEK/pVdQYztmKRJMv7stBIcGF3RpANQ6FpQ=)
                          4: kltDPSTcnTIrexoD1sMXoWEDfig.roa (hash: +J8BVLpkJ8G69eEnylV5tiIBeDgKZy+3hkMu5nlYDBM=)
                          5: qDLtplQvu73cll4TfPnBN7uL-3E.roa (hash: K9lJ1HedvA9BUOXqoa+TlAxrvB9tTMH/uPN3HUOKJv0=)
                          6: uMiqGHMPSoPihSxWklUau1se5-o.crl (hash: Ot2hyXeLKYvtWJ4Z+EOByF+BpzFPxL4JQm7RaFN2Ppw=)
                          7: yP46kIpWtOqNANJHH7Ze_2pu2vw.roa (hash: oclUAkD+j2AdtktvuOa/dXAYpExh9g3kYwl48UqmTJE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:3c:a0:12:21:cb:80:20:c7:40:74:a1:28:8a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
        Validity
            Not Before: Mar 25 16:00:55 2026 GMT
            Not After : Mar 26 16:00:55 2026 GMT
        Subject: CN=8a6cb7e3e3bf90f015c993aae5dd1f31c9b48cae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f0:ec:ec:6a:8c:eb:c4:46:63:ce:8f:e0:19:
                    c9:e8:0d:2e:ce:dd:5c:c7:1f:02:e6:23:21:4a:d6:
                    fa:78:72:ec:08:82:38:06:72:67:2c:86:09:04:4c:
                    f0:3a:19:89:53:42:96:c4:09:76:6c:1a:c4:44:8d:
                    36:20:b7:28:b9:8a:9a:c1:00:10:e4:bb:01:48:d3:
                    68:c4:68:b9:1a:c1:be:59:dd:05:7d:5d:9e:b7:0b:
                    18:85:db:ca:2a:49:aa:4a:c0:af:0c:3a:07:17:27:
                    bf:71:c7:fd:59:e9:9a:43:37:a2:8c:92:a9:2f:1e:
                    f7:8a:53:0b:cf:9c:5d:16:55:5a:e1:7e:b9:4e:d2:
                    b3:6b:ac:3a:c3:64:0d:5b:6d:1c:09:6e:72:cb:d8:
                    ce:4a:6e:97:a7:c3:e8:b3:03:c7:37:2c:d9:53:23:
                    6c:70:95:b4:43:7d:57:f7:66:29:20:8f:ca:3e:81:
                    d9:a8:60:46:37:b3:64:84:24:f7:38:52:3e:32:50:
                    49:2f:90:c5:2c:69:3d:0c:64:ef:2d:ae:58:01:e2:
                    ce:00:4f:8d:27:7c:3e:94:44:ff:c2:db:e8:3c:53:
                    f4:58:f6:e6:ab:cf:07:92:7e:11:5a:4c:b6:a3:fa:
                    63:63:6c:37:1f:3f:20:de:ad:cd:87:e7:e7:77:ce:
                    34:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6C:B7:E3:E3:BF:90:F0:15:C9:93:AA:E5:DD:1F:31:C9:B4:8C:AE
            X509v3 Authority Key Identifier:
                keyid:B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:f0:3e:da:16:89:42:78:1b:c5:3b:94:11:0c:0f:c7:2b:ce:
         ea:74:42:d6:a0:0a:9e:f5:cc:ca:ea:ba:97:d8:e8:05:d6:32:
         60:49:03:cb:f8:60:da:72:4c:53:bb:79:c2:74:37:33:b2:0d:
         c7:5a:64:5e:4e:13:f5:5c:88:c5:26:25:3e:6f:3f:61:8c:97:
         af:05:53:01:3f:f4:6e:ad:89:52:73:60:18:d1:aa:09:36:93:
         71:f1:7e:ca:2d:e6:08:48:60:ef:55:11:0e:07:62:b3:75:16:
         2f:0c:24:4a:aa:35:0f:1d:78:33:c4:24:23:38:b2:06:61:02:
         50:ba:a8:b7:8e:e2:38:85:6d:64:33:90:76:8a:d5:16:75:61:
         f7:1f:3c:e7:de:0b:22:dd:f4:74:02:c7:4c:e6:9f:cf:a2:5a:
         b4:7c:03:a2:c8:66:4e:5c:3b:6a:58:5a:f4:ea:b1:e0:2d:cb:
         29:af:f3:fb:72:20:ca:02:8c:7f:1d:70:51:39:83:f7:81:50:
         da:73:7f:7d:2a:6f:fb:62:a0:99:9d:dd:93:9b:7b:28:48:26:
         a7:6d:58:ea:26:52:18:c6:a9:85:39:2c:f3:69:84:2e:49:34:
         d5:87:ba:bb:7d:37:29:22:fe:e3:3f:93:d7:c0:e4:1c:16:53:
         d1:c3:46:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:41 2026 by rpki-client