Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft
File:                     UioivM096CZa_VX5gw_8Acg69yY.mft (raw, json)
Hash identifier:          vqqs7ktPw5G08mLtwbH5usIqk1N2vFcFp8vW3t5tqFc=
Subject key identifier:   07:BF:B0:DE:17:1F:6C:EC:FC:17:AD:3E:EB:26:7E:A9:1F:B2:64:ED
Authority key identifier: 52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26
Certificate issuer:       /CN=522a22bccd3de8265afd55f9830ffc01c83af726
Certificate serial:       019D27721D74D2C417A3D1B5AC5255958021
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft
Manifest number:          1749
Signing time:             Thu 26 Mar 2026 00:01:23 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:23 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:23 +0000
Files and hashes:         1: UioivM096CZa_VX5gw_8Acg69yY.crl (hash: 4SP7rVBwM+MTk7emAxpvNwEh60h+ZTTAulrgYb1kPeg=)
                          2: _-cN-sAbrViLwmycVeqjqlvUMm4.roa (hash: noKzUYWAtrL71gb87r5bxvuWL2VHpxYOGDrkOQNEG/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:1d:74:d2:c4:17:a3:d1:b5:ac:52:55:95:80:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522a22bccd3de8265afd55f9830ffc01c83af726
        Validity
            Not Before: Mar 26 00:01:23 2026 GMT
            Not After : Mar 27 00:01:23 2026 GMT
        Subject: CN=07bfb0de171f6cecfc17ad3eeb267ea91fb264ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:95:5d:fc:f1:2b:f7:ff:c2:be:98:70:bb:15:
                    20:f5:d4:a8:82:d6:6d:55:26:93:d3:d5:27:9f:b7:
                    a6:14:10:08:23:f1:e6:e7:11:c7:e4:99:95:1a:e3:
                    65:26:5d:a7:05:70:82:83:0e:c4:61:21:7a:32:d2:
                    3c:e4:9e:a9:62:27:b7:e1:c6:19:2b:f2:a6:9b:e7:
                    0f:bd:d9:dd:c1:93:1a:64:31:3b:40:e6:8c:88:a6:
                    6b:1d:df:9a:f9:90:cf:c6:26:49:9a:4b:db:4c:16:
                    17:77:9a:32:93:80:0d:8a:61:9b:2c:3c:1f:94:73:
                    ad:01:31:21:0d:df:ae:80:df:5a:e5:b8:9e:48:27:
                    0a:eb:87:9b:35:bf:68:c0:00:a3:6a:a0:4f:f8:18:
                    70:f1:dd:f8:6d:4d:5d:e1:5f:ef:ed:a5:f5:81:bb:
                    39:5b:a9:42:8a:0d:43:c5:ba:04:08:7d:3e:0d:c0:
                    c3:04:fb:ea:42:3a:43:21:df:3e:15:ba:eb:e4:8e:
                    c9:5f:ed:51:fd:f7:42:21:95:4b:d4:61:0a:52:35:
                    96:8c:ae:f8:6b:72:10:fc:1d:62:2f:5a:d8:ae:7c:
                    6d:6c:4b:ee:91:3b:39:1b:17:07:b7:b4:47:06:30:
                    56:6b:db:1e:8c:ae:b2:41:3b:f0:70:73:ff:ab:af:
                    41:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:BF:B0:DE:17:1F:6C:EC:FC:17:AD:3E:EB:26:7E:A9:1F:B2:64:ED
            X509v3 Authority Key Identifier:
                keyid:52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:c8:f0:d7:ac:34:72:8f:8c:8e:b9:77:cc:69:17:8b:ec:57:
         11:14:73:7a:17:a0:e3:36:42:c5:2d:a9:d7:72:00:ad:84:cb:
         9e:1c:79:b7:ac:09:b8:86:7d:1a:a3:3c:63:b5:19:74:36:f9:
         c8:f3:d3:d5:60:07:7a:87:c8:e8:c8:53:e6:29:ea:d7:f9:88:
         6a:93:02:5f:8e:70:67:4f:ee:ac:5c:91:b3:8a:8d:60:f5:86:
         3a:01:df:8e:70:de:b5:60:ec:12:5e:33:66:51:b4:60:81:cd:
         d1:80:d4:66:db:14:1d:f8:b6:c0:0f:2f:67:e2:82:13:0f:f9:
         01:eb:4c:21:39:d5:6d:80:89:bb:2a:09:82:4a:48:68:16:c5:
         c7:93:59:84:5d:83:aa:de:ea:cd:f4:73:55:39:26:a9:83:94:
         b4:38:93:93:1c:a6:82:4c:db:ae:74:21:e2:62:57:9e:1a:c4:
         60:8b:19:d5:fc:8f:6b:bd:68:91:c1:3a:5f:35:57:e0:36:9a:
         eb:76:76:d9:3a:69:1c:8e:d5:4d:33:be:7a:af:4e:3d:eb:4d:
         88:68:89:9c:2e:8d:b7:1b:18:a2:23:78:2a:90:39:92:6d:1f:
         23:de:d5:d7:87:79:78:02:97:fc:80:eb:76:b0:a1:e3:a3:43:
         d9:a0:e4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:43:20 2026 by rpki-client