Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.mft
File:                     ueJzyLoLCvsgXQCzFw5puBZ0M5c.mft (raw, json)
Hash identifier:          xNtMtarBSv09dnGyAowB12BRY/yTBFajRniqTHV8eos=
Subject key identifier:   F8:83:37:D5:C1:DA:59:2A:F0:65:46:AD:69:3B:01:42:7A:91:16:87
Authority key identifier: B9:E2:73:C8:BA:0B:0A:FB:20:5D:00:B3:17:0E:69:B8:16:74:33:97
Certificate issuer:       /CN=b9e273c8ba0b0afb205d00b3170e69b816743397
Certificate serial:       019D28BBAC5473A3026C03D6E6B7F5A4DA1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ueJzyLoLCvsgXQCzFw5puBZ0M5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.mft
Manifest number:          1574
Signing time:             Thu 26 Mar 2026 06:01:21 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:21 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:21 +0000
Files and hashes:         1: rFK8GjN2rJ85aojBVP2_PQQhy8o.roa (hash: gNBa3QSYdll6/GhpimLS6/sCTODaV0osUFe+WXDUhNU=)
                          2: ueJzyLoLCvsgXQCzFw5puBZ0M5c.crl (hash: WogL7RQC3wAeE0nvJjYLs7kPmb1pVVxJ8iWqaD2TwSI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ueJzyLoLCvsgXQCzFw5puBZ0M5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:ac:54:73:a3:02:6c:03:d6:e6:b7:f5:a4:da:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9e273c8ba0b0afb205d00b3170e69b816743397
        Validity
            Not Before: Mar 26 06:01:21 2026 GMT
            Not After : Mar 27 06:01:21 2026 GMT
        Subject: CN=f88337d5c1da592af06546ad693b01427a911687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7a:b7:ec:67:e6:17:ca:c7:b3:e1:8a:17:7b:
                    91:cb:d2:28:73:ba:f1:39:a2:42:85:2b:af:e4:d2:
                    3e:50:61:fe:41:f4:40:18:f1:50:00:06:a6:66:2f:
                    5e:7b:9b:9f:95:ba:f4:d8:ff:ac:8c:25:a2:0b:02:
                    49:c0:7b:ca:af:09:13:30:6e:ca:9d:07:b8:a3:cf:
                    16:ff:f2:00:bd:61:3b:d6:25:f8:49:1b:27:7b:d6:
                    47:cb:9a:7b:af:d9:c2:77:c1:9d:c4:22:fe:eb:6a:
                    5e:8d:63:4e:ac:f4:41:84:a0:f8:a2:52:20:8c:88:
                    9b:41:58:20:00:42:78:20:bd:da:11:ad:ff:5b:e9:
                    8d:bc:76:84:a3:a6:73:dc:58:f6:92:63:d5:a7:83:
                    ae:63:61:5b:99:e7:11:93:a5:48:1b:42:0a:d9:39:
                    24:65:51:e9:50:a3:44:58:ea:9e:5f:21:ed:21:ec:
                    83:a9:bd:cd:14:19:dc:0c:d4:71:42:14:d8:da:f3:
                    60:a1:be:f4:bc:e8:35:e8:a9:5e:ab:4a:d7:15:a4:
                    9d:c2:30:e4:8e:81:7f:b1:cd:9d:68:db:a3:74:7b:
                    13:f8:c9:cc:ca:e6:37:31:46:ee:20:80:51:7e:95:
                    3a:96:54:b0:92:38:67:6d:b5:51:f0:3d:1b:ee:2b:
                    af:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:83:37:D5:C1:DA:59:2A:F0:65:46:AD:69:3B:01:42:7A:91:16:87
            X509v3 Authority Key Identifier:
                keyid:B9:E2:73:C8:BA:0B:0A:FB:20:5D:00:B3:17:0E:69:B8:16:74:33:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueJzyLoLCvsgXQCzFw5puBZ0M5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:af:72:fe:08:1e:64:6e:87:b6:84:0a:3c:2b:4f:2a:7f:79:
         6b:2f:15:fc:88:86:d2:78:7c:2b:c2:ed:32:9d:8a:8e:5c:6e:
         f2:97:9e:f0:69:9d:65:12:88:b9:b3:3c:4b:91:74:3a:40:7d:
         69:0e:a9:93:f5:86:6c:90:45:8c:d3:03:57:38:17:2f:0e:3d:
         23:79:2b:56:08:5d:b8:04:22:29:9c:2d:63:8c:db:ba:c7:c9:
         47:8c:4f:94:18:88:d8:25:a4:be:45:8b:a6:19:ca:77:59:ef:
         c3:39:e9:11:5f:5b:3e:71:a6:4f:ea:33:33:cd:5d:8b:32:0f:
         9d:4d:4a:82:b8:14:23:6b:ad:10:bb:18:3d:af:35:79:dc:91:
         cf:58:ea:7a:c2:3f:83:b2:1f:60:43:5f:ec:1c:17:16:58:ac:
         39:4d:a0:85:60:0c:bc:8c:98:fb:21:1d:33:12:da:7a:9c:82:
         b2:27:00:ca:8e:e3:ca:df:2d:27:b5:41:28:c1:b2:31:f1:ee:
         e9:48:c4:f0:87:92:5a:cf:9c:8c:f4:fd:a6:05:36:dd:fa:b1:
         5e:e7:33:2f:43:94:c6:2d:aa:34:d8:ff:e2:f5:e8:3d:81:07:
         98:f3:ff:52:1f:f2:a4:30:ce:6d:8f:70:00:2b:14:88:47:5c:
         9d:c2:2f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:33 2026 by rpki-client