Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
File:                     Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft (raw, json)
Hash identifier:          nYBv/byzd2J1XBQeMRdYvtJ6lVYaEZNDlKdJXPhmXvQ=
Subject key identifier:   CF:BB:81:50:67:AE:FE:9F:CD:E7:2B:48:1F:0A:DC:5F:84:C6:DC:58
Authority key identifier: 53:1F:24:7D:4B:C7:02:14:60:6D:07:D6:59:31:9E:C3:F3:47:97:06
Certificate issuer:       /CN=531f247d4bc70214606d07d659319ec3f3479706
Certificate serial:       019D265F3E1CBDE01522EA765C3D871D47DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
Manifest number:          1887
Signing time:             Wed 25 Mar 2026 19:01:09 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:09 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:09 +0000
Files and hashes:         1: Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl (hash: fxUZL5kAHFm0SbyDrNuwru8IQz7k/USepRNN0G/+j/U=)
                          2: gasIi9uIBm_j6aD0r4hpEpXQM6k.roa (hash: Wp7nXb862KjRHfKzxWCc0lZMplvU3kmdQKf28f0j66g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:3e:1c:bd:e0:15:22:ea:76:5c:3d:87:1d:47:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=531f247d4bc70214606d07d659319ec3f3479706
        Validity
            Not Before: Mar 25 19:01:09 2026 GMT
            Not After : Mar 26 19:01:09 2026 GMT
        Subject: CN=cfbb815067aefe9fcde72b481f0adc5f84c6dc58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d8:6f:6f:ad:73:cd:b3:51:10:60:b9:b5:70:
                    f0:06:6d:ce:26:12:ef:80:f5:c3:5f:d5:65:c0:a5:
                    f1:66:3a:ce:ff:0c:d7:a8:85:a6:87:ff:ab:3e:d4:
                    a3:1e:4a:4f:19:f8:7a:4a:95:45:e3:63:c7:2c:dc:
                    fc:c5:dc:5e:eb:9c:17:8c:a2:8d:39:b6:9d:c1:82:
                    fd:5a:9d:ca:5c:b0:ad:0f:92:91:1b:6d:1b:b9:d8:
                    11:41:69:52:01:6f:92:03:93:0b:7e:9c:01:f4:ea:
                    01:28:b8:b3:b5:61:b0:1f:93:1a:c3:74:e3:5b:ff:
                    b5:d6:9a:c4:06:74:25:ef:1f:42:fa:63:37:87:eb:
                    ca:90:f0:6e:9e:50:ab:7b:fa:9a:a4:8c:ad:af:da:
                    ac:f8:89:40:24:ca:83:33:d2:18:0f:ab:6b:d8:51:
                    99:7e:95:ce:d7:86:67:94:24:92:da:8e:b4:bf:db:
                    43:96:42:8f:83:1d:f5:7d:1c:f2:4f:4b:06:d1:ba:
                    2b:e5:62:15:2f:30:75:66:13:5b:d4:79:2a:56:da:
                    a8:65:34:dc:7d:cc:5f:8b:02:f5:41:d7:89:1d:6d:
                    0b:1d:94:b2:51:1a:f0:dc:26:6a:78:ff:7f:53:ea:
                    96:2e:53:41:72:b8:18:aa:a5:04:be:55:4a:52:e6:
                    1e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:BB:81:50:67:AE:FE:9F:CD:E7:2B:48:1F:0A:DC:5F:84:C6:DC:58
            X509v3 Authority Key Identifier:
                keyid:53:1F:24:7D:4B:C7:02:14:60:6D:07:D6:59:31:9E:C3:F3:47:97:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:5c:89:39:c1:4c:66:ef:47:ef:95:7a:5a:e9:ac:6d:c9:60:
         6a:51:dd:8b:a9:67:76:3d:54:fa:d1:6a:a3:8f:79:44:9e:d4:
         2e:2a:6c:5f:ba:31:31:b7:7f:c6:dd:46:d7:ec:5a:20:ed:2f:
         03:1a:39:8e:39:fe:63:89:23:38:d6:70:cf:ae:ac:46:52:e7:
         e0:81:a4:7a:27:52:f4:b8:0b:3d:d7:4d:e1:df:b5:f0:5e:20:
         16:00:7f:e1:4d:2c:a2:aa:d1:14:65:32:34:e5:aa:c9:fc:8a:
         8e:9a:2f:4d:22:4c:b6:5e:cb:5e:b4:22:6a:e2:9b:48:4f:52:
         5a:46:56:41:b7:a3:b1:df:9d:a6:20:0a:70:bf:34:05:1c:a2:
         5f:eb:e3:66:ab:8a:f7:78:32:2d:1e:66:4a:59:86:af:95:dc:
         3f:4d:17:a5:18:a3:51:c3:2b:f8:c6:1e:8d:8a:05:76:bd:ca:
         5b:ab:9c:69:c8:4e:d7:ac:da:28:db:f0:74:ca:7c:49:1d:30:
         a7:4e:2c:d5:b3:0e:55:68:67:67:14:43:7f:16:9a:27:c1:e4:
         2b:2e:03:45:e4:1e:95:41:7a:ab:a5:61:40:49:cf:c3:05:a1:
         e5:ce:af:46:7c:67:11:25:38:9b:ea:e1:f2:0e:96:78:0f:9e:
         75:a3:0a:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXz4cveAVIup2XD2HHUffMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMWYyNDdkNGJjNzAyMTQ2MDZkMDdkNjU5MzE5ZWMzZjM0
Nzk3MDYwHhcNMjYwMzI1MTkwMTA5WhcNMjYwMzI2MTkwMTA5WjAzMTEwLwYDVQQD
EyhjZmJiODE1MDY3YWVmZTlmY2RlNzJiNDgxZjBhZGM1Zjg0YzZkYzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNhvb61zzbNREGC5tXDwBm3OJhLv
gPXDX9VlwKXxZjrO/wzXqIWmh/+rPtSjHkpPGfh6SpVF42PHLNz8xdxe65wXjKKN
ObadwYL9Wp3KXLCtD5KRG20budgRQWlSAW+SA5MLfpwB9OoBKLiztWGwH5Maw3Tj
W/+11prEBnQl7x9C+mM3h+vKkPBunlCre/qapIytr9qs+IlAJMqDM9IYD6tr2FGZ
fpXO14ZnlCSS2o60v9tDlkKPgx31fRzyT0sG0bor5WIVLzB1ZhNb1HkqVtqoZTTc
fcxfiwL1QdeJHW0LHZSyURrw3CZqeP9/U+qWLlNBcrgYqqUEvlVKUuYenQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+7gVBnrv6fzecrSB8K3F+ExtxYMB8GA1UdIwQY
MBaAFFMfJH1LxwIUYG0H1lkxnsPzR5cGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXg4a2ZVdkhBaFJnYlFmV1dUR2V3X05IbHdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS83NTQ1MmItYTRlYS00MTEyLWFmMDMt
OGVkODQzM2QzOGM0LzEvVXg4a2ZVdkhBaFJnYlFmV1dUR2V3X05IbHdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS83NTQ1MmItYTRlYS00MTEyLWFmMDMtOGVkODQzM2QzOGM0
LzEvVXg4a2ZVdkhBaFJnYlFmV1dUR2V3X05IbHdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOFyJOcFM
Zu9H75V6WumsbclgalHdi6lndj1U+tFqo495RJ7ULipsX7oxMbd/xt1G1+xaIO0v
Axo5jjn+Y4kjONZwz66sRlLn4IGkeidS9LgLPddN4d+18F4gFgB/4U0soqrRFGUy
NOWqyfyKjpovTSJMtl7LXrQiauKbSE9SWkZWQbejsd+dpiAKcL80BRyiX+vjZquK
93gyLR5mSlmGr5XcP00XpRijUcMr+MYejYoFdr3KW6ucachO16zaKNvwdMp8SR0w
p04s1bMOVWhnZxRDfxaaJ8HkKy4DReQelUF6q6VhQEnPwwWh5c6vRnxnESU4m+rh
8g6WeA+edaMKnw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:15 2026 by rpki-client