Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.mft
File:                     Uev2DyIajjHTawfqptLlP20GS20.mft (raw, json)
Hash identifier:          vjqjQcqNIplRLeCthQ8XJkJ75AiWoI2AIu9dbqJL7Jo=
Subject key identifier:   82:78:84:1F:46:69:2C:E6:A1:B4:26:FD:34:48:2D:FB:A9:3D:58:B6
Authority key identifier: 51:EB:F6:0F:22:1A:8E:31:D3:6B:07:EA:A6:D2:E5:3F:6D:06:4B:6D
Certificate issuer:       /CN=51ebf60f221a8e31d36b07eaa6d2e53f6d064b6d
Certificate serial:       019D27A8EC831304BF5378388026A7F49542
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uev2DyIajjHTawfqptLlP20GS20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.mft
Manifest number:          0351
Signing time:             Thu 26 Mar 2026 01:01:15 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:15 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:15 +0000
Files and hashes:         1: MPq8iza6WIhB1o1xVKox7Pzo9Kk.roa (hash: RL0GK8JPuvsKiHzOav85apDuZHO/yene+gQ6QpASIMk=)
                          2: Uev2DyIajjHTawfqptLlP20GS20.crl (hash: BJRRPzyFKo5Vxmd907KsfDBTAvyekWC36JhgW+4JX/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uev2DyIajjHTawfqptLlP20GS20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:ec:83:13:04:bf:53:78:38:80:26:a7:f4:95:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ebf60f221a8e31d36b07eaa6d2e53f6d064b6d
        Validity
            Not Before: Mar 26 01:01:15 2026 GMT
            Not After : Mar 27 01:01:15 2026 GMT
        Subject: CN=8278841f46692ce6a1b426fd34482dfba93d58b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9f:31:dc:89:b6:4a:40:39:86:61:c1:ed:7f:
                    2f:a1:e1:39:d4:ae:d6:87:9f:28:6f:1e:2a:d1:c9:
                    3a:27:f9:f3:a2:55:84:92:72:bb:71:e4:63:28:34:
                    7c:70:a8:91:6e:03:5d:95:ef:a7:ad:9e:43:20:2c:
                    c2:70:53:d6:e8:95:c3:c3:45:43:74:a1:64:83:93:
                    56:7b:47:ce:fd:1f:e7:47:f7:4e:0b:bb:b0:af:6e:
                    64:93:34:1a:47:54:68:25:dd:a4:d5:d4:48:3e:80:
                    c4:b0:1a:09:5e:0e:4f:56:4e:06:30:d8:70:a1:7a:
                    8f:25:92:8f:7d:fe:8d:d3:3f:01:c6:b7:14:83:80:
                    90:57:d9:f8:31:5f:34:86:87:af:5b:d4:8f:a8:7f:
                    b5:11:a4:78:b0:f4:f6:de:1d:df:60:8d:c6:ac:34:
                    5c:5f:a3:6f:97:cf:0b:5a:35:5a:2a:97:95:b8:47:
                    70:7a:f2:cc:8a:7a:0e:28:0b:93:3e:f2:c9:b4:c7:
                    7a:f5:41:f9:22:1f:6f:09:ef:ca:c6:47:de:e3:26:
                    76:80:ad:9e:87:1f:4d:f4:08:c8:2f:1c:83:5d:78:
                    64:d9:5e:2b:92:7a:4d:c9:72:dc:b0:0c:32:5a:ff:
                    b7:da:49:c1:a4:af:42:df:3a:39:e9:69:92:18:4e:
                    f0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:78:84:1F:46:69:2C:E6:A1:B4:26:FD:34:48:2D:FB:A9:3D:58:B6
            X509v3 Authority Key Identifier:
                keyid:51:EB:F6:0F:22:1A:8E:31:D3:6B:07:EA:A6:D2:E5:3F:6D:06:4B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uev2DyIajjHTawfqptLlP20GS20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:d0:f0:03:07:c2:76:f5:b4:fe:ff:68:99:a6:60:80:7c:ee:
         19:ab:f3:e9:2a:ae:64:bb:a1:7f:bd:8f:d7:59:11:bc:28:d2:
         4c:79:79:79:dc:bb:fe:3c:56:88:ce:a9:46:31:47:28:7e:b3:
         0b:e1:e7:e4:83:c0:d9:f3:69:33:4c:f4:60:1b:c4:de:e7:12:
         e6:69:b9:ea:e9:39:c7:a8:5b:0d:e6:ed:28:ac:e0:d6:28:b3:
         77:cb:0e:69:85:3f:df:64:81:47:61:61:ef:1f:81:b3:eb:c1:
         7a:f0:fd:0e:92:ab:9f:6f:6c:76:c8:72:88:c1:b2:e1:e0:d1:
         d9:72:86:e2:66:3b:54:56:a8:0e:07:a5:65:99:41:3c:d0:af:
         04:80:fc:7f:20:da:02:ca:37:4b:73:ac:81:fe:e1:dd:5b:fd:
         9a:80:1f:1d:55:0e:09:58:18:80:c6:4d:ef:f3:a5:4d:a0:52:
         32:5f:10:38:f2:c1:eb:34:a4:8b:8d:f7:f9:95:d8:89:6c:d5:
         f7:85:14:a2:d0:e0:0d:84:bf:12:2f:31:85:ec:8f:24:d8:a1:
         a3:0a:5b:5e:e1:32:2b:d5:e0:e3:f4:61:6f:2c:00:33:9c:a4:
         33:a6:97:bc:3c:a8:74:72:dd:ef:9e:bd:f9:b9:b2:20:c7:76:
         83:a3:bd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:34:17 2026 by rpki-client