Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
File:                     Uylu4zFT725pONV6KhMsHlJtxDA.mft (raw, json)
Hash identifier:          3t96Ys06gZzrtA5hWB1zGJt9b/y9Y/TaloltQtLJVro=
Subject key identifier:   9C:65:AB:C8:E8:3F:C1:7C:5F:4D:D2:88:3F:8C:DE:A8:7C:71:17:A5
Authority key identifier: 53:29:6E:E3:31:53:EF:6E:69:38:D5:7A:2A:13:2C:1E:52:6D:C4:30
Certificate issuer:       /CN=53296ee33153ef6e6938d57a2a132c1e526dc430
Certificate serial:       019D2703FCE5F5131D347A610ED5C3CA0F5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uylu4zFT725pONV6KhMsHlJtxDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
Manifest number:          175C
Signing time:             Wed 25 Mar 2026 22:01:05 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:05 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:05 +0000
Files and hashes:         1: MGJC7B1Ba42lx5xp2OR9KB_r3CM.roa (hash: 3dEWz8p/HyJK1M8zb2CLGf2EvdGWCjzIW7fX7f0DY+A=)
                          2: Uylu4zFT725pONV6KhMsHlJtxDA.crl (hash: iozqv6U3y2YD6zVCf2tDJDe3SUnCtXZMjIFKy46LGC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uylu4zFT725pONV6KhMsHlJtxDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:03:fc:e5:f5:13:1d:34:7a:61:0e:d5:c3:ca:0f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53296ee33153ef6e6938d57a2a132c1e526dc430
        Validity
            Not Before: Mar 25 22:01:05 2026 GMT
            Not After : Mar 26 22:01:05 2026 GMT
        Subject: CN=9c65abc8e83fc17c5f4dd2883f8cdea87c7117a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:10:c5:ac:f9:85:7d:d7:ac:a9:15:d7:ed:ad:
                    7c:13:d2:b6:ac:ee:a2:53:bc:94:cf:68:1d:51:0d:
                    72:6e:d0:00:0e:0c:f6:0d:13:65:eb:6a:44:73:65:
                    70:07:c3:f0:ed:93:c7:37:6e:cd:ae:e4:54:22:42:
                    ae:74:b9:1a:4d:f7:2e:18:65:02:65:58:9a:cb:fb:
                    67:11:42:3c:cd:8a:bd:01:33:e3:d3:b0:af:eb:e1:
                    14:62:8a:d3:ab:63:da:e7:f6:1d:52:fe:3e:2c:76:
                    cf:d1:c2:78:51:c3:60:6e:82:af:55:56:d8:ad:18:
                    bd:40:42:8e:72:ec:02:48:5e:9e:45:ef:b0:60:20:
                    61:9c:f8:92:34:6f:16:7a:38:21:da:cb:c5:08:af:
                    ca:c0:61:f4:8a:02:50:5e:83:6b:08:0c:8a:0f:74:
                    63:66:45:55:86:f7:62:b7:97:44:c8:1f:1c:df:09:
                    37:c6:31:94:fb:ea:49:34:b6:51:5d:e4:0a:ef:7a:
                    fd:30:a1:27:e1:93:2f:d6:ac:2f:05:29:4a:8e:e3:
                    3d:0d:ac:f2:bf:54:cf:27:af:36:f5:2f:53:f5:e4:
                    f6:e6:b4:55:ac:a2:65:9c:07:78:6e:fe:9b:1e:45:
                    3c:a4:66:0b:31:2c:50:0b:44:1b:dc:fe:69:41:b9:
                    1e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:65:AB:C8:E8:3F:C1:7C:5F:4D:D2:88:3F:8C:DE:A8:7C:71:17:A5
            X509v3 Authority Key Identifier:
                keyid:53:29:6E:E3:31:53:EF:6E:69:38:D5:7A:2A:13:2C:1E:52:6D:C4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uylu4zFT725pONV6KhMsHlJtxDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:a7:1d:06:58:04:5f:32:34:90:98:2a:05:19:6f:79:c8:c4:
         5a:68:87:e2:bf:93:ee:4b:9b:77:eb:fb:4a:4b:7c:3d:73:a3:
         62:63:3b:52:1c:0d:58:c3:f3:72:59:66:1c:e2:6f:ef:63:a8:
         b9:ae:bd:59:e5:14:d6:2f:05:7f:d1:e0:fe:65:eb:2b:4c:75:
         26:5c:8e:88:6c:99:e8:91:2e:00:f5:39:7b:a0:aa:dd:21:35:
         8b:34:c4:ba:97:2b:81:9d:f9:3e:5f:8a:37:e3:d1:ee:78:e5:
         f2:0e:fe:d4:66:49:5d:45:ef:97:93:a9:30:c4:a8:7c:3e:8c:
         9e:f9:d7:e9:3e:e0:54:c6:89:39:e2:75:29:ac:f3:b4:92:97:
         90:7a:72:93:bd:6b:85:01:58:22:18:f2:15:05:ef:78:81:c1:
         ea:34:f6:11:ea:a3:7a:fe:4c:8b:87:77:6a:8b:81:43:fd:91:
         e0:e0:d5:a7:d7:80:13:95:14:4e:c4:ac:a7:ac:c8:54:0b:95:
         cf:fb:01:1b:75:ed:14:9f:36:5d:ed:83:09:61:36:0c:b4:c3:
         02:e9:bf:fd:19:b0:72:52:d5:38:f9:da:27:18:b2:e0:d2:42:
         1b:4b:4a:0e:4f:ba:d3:d3:4d:8a:50:44:70:8f:ed:f7:cd:9c:
         4e:d2:06:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA/zl9RMdNHphDtXDyg9bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMjk2ZWUzMzE1M2VmNmU2OTM4ZDU3YTJhMTMyYzFlNTI2
ZGM0MzAwHhcNMjYwMzI1MjIwMTA1WhcNMjYwMzI2MjIwMTA1WjAzMTEwLwYDVQQD
Eyg5YzY1YWJjOGU4M2ZjMTdjNWY0ZGQyODgzZjhjZGVhODdjNzExN2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxDFrPmFfdesqRXX7a18E9K2rO6i
U7yUz2gdUQ1ybtAADgz2DRNl62pEc2VwB8Pw7ZPHN27NruRUIkKudLkaTfcuGGUC
ZViay/tnEUI8zYq9ATPj07Cv6+EUYorTq2Pa5/YdUv4+LHbP0cJ4UcNgboKvVVbY
rRi9QEKOcuwCSF6eRe+wYCBhnPiSNG8Wejgh2svFCK/KwGH0igJQXoNrCAyKD3Rj
ZkVVhvdit5dEyB8c3wk3xjGU++pJNLZRXeQK73r9MKEn4ZMv1qwvBSlKjuM9Dazy
v1TPJ6829S9T9eT25rRVrKJlnAd4bv6bHkU8pGYLMSxQC0Qb3P5pQbkeawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxlq8joP8F8X03SiD+M3qh8cRelMB8GA1UdIwQY
MBaAFFMpbuMxU+9uaTjVeioTLB5SbcQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXlsdTR6RlQ3MjVwT05WNktoTXNIbEp0eERBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mOGIzODEtNjkyYS00ODMwLThkN2Qt
MjFiZjcwOGYzY2FkLzEvVXlsdTR6RlQ3MjVwT05WNktoTXNIbEp0eERBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9mOGIzODEtNjkyYS00ODMwLThkN2QtMjFiZjcwOGYzY2Fk
LzEvVXlsdTR6RlQ3MjVwT05WNktoTXNIbEp0eERBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo6cdBlgE
XzI0kJgqBRlvecjEWmiH4r+T7kubd+v7Skt8PXOjYmM7UhwNWMPzcllmHOJv72Oo
ua69WeUU1i8Ff9Hg/mXrK0x1JlyOiGyZ6JEuAPU5e6Cq3SE1izTEupcrgZ35Pl+K
N+PR7njl8g7+1GZJXUXvl5OpMMSofD6MnvnX6T7gVMaJOeJ1KazztJKXkHpyk71r
hQFYIhjyFQXveIHB6jT2Eeqjev5Mi4d3aouBQ/2R4ODVp9eAE5UUTsSsp6zIVAuV
z/sBG3XtFJ82Xe2DCWE2DLTDAum//RmwclLVOPnaJxiy4NJCG0tKDk+609NNilBE
cI/t982cTtIGzA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:33 2026 by rpki-client