Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft
File:                     uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft (raw, json)
Hash identifier:          p2PCWSqq8/ecrLk6lx1VCCH1wj09/ZOC70IZx3JX1wo=
Subject key identifier:   32:31:B3:E6:24:B1:AF:64:A0:AE:29:AB:E2:89:36:7C:0D:DA:B0:26
Authority key identifier: B8:C8:F2:3D:0C:48:C6:2E:18:E2:8F:56:0C:C9:15:98:93:D4:E4:2F
Certificate issuer:       /CN=b8c8f23d0c48c62e18e28f560cc9159893d4e42f
Certificate serial:       019D2928E7F6E9ED077E1FCA1247F6F479FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft
Manifest number:          1538
Signing time:             Thu 26 Mar 2026 08:00:39 +0000
Manifest this update:     Thu 26 Mar 2026 08:00:39 +0000
Manifest next update:     Fri 27 Mar 2026 08:00:39 +0000
Files and hashes:         1: kGHJ-8rZWO54aj3tYcGMYD_2TqQ.roa (hash: cYqFt+Ygq2GVWtReyVY63qsFOpbAunakWaQ4n67Z65Y=)
                          2: uMjyPQxIxi4Y4o9WDMkVmJPU5C8.crl (hash: AoBQBAPAeSRBkvGMl7m3eycJtuYpWIdejZ2ad96+3ns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:28:e7:f6:e9:ed:07:7e:1f:ca:12:47:f6:f4:79:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8c8f23d0c48c62e18e28f560cc9159893d4e42f
        Validity
            Not Before: Mar 26 08:00:39 2026 GMT
            Not After : Mar 27 08:00:39 2026 GMT
        Subject: CN=3231b3e624b1af64a0ae29abe289367c0ddab026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:47:8d:32:46:58:50:d8:5a:40:96:b1:fe:7b:
                    b2:24:17:95:07:91:09:05:98:f2:a6:8a:9b:c9:25:
                    0c:45:d8:88:b1:31:e8:a3:fb:fe:3b:ec:6a:ae:2b:
                    ef:f5:1e:1d:95:68:eb:a1:4e:eb:06:e2:4e:61:bd:
                    46:ae:62:cf:b0:73:f2:b7:29:63:0d:50:c6:1b:5a:
                    fa:67:d0:be:84:d2:a5:89:82:6f:cf:d0:7c:6c:dd:
                    49:cc:31:b8:81:a7:f6:bd:c8:04:4d:26:f8:d5:7c:
                    e5:9c:cb:c5:1c:55:8e:21:a7:b4:db:b9:92:dd:9e:
                    49:fd:32:8f:78:7c:18:50:c8:3b:19:b2:e8:34:4e:
                    75:d4:a4:29:97:1f:88:d5:f9:30:67:8a:2f:34:a5:
                    ed:e0:a6:db:a7:6c:8e:ef:7c:68:9d:b2:20:80:37:
                    ec:32:b8:fb:ea:68:e2:e9:65:b4:db:a7:10:34:63:
                    46:4b:15:2f:16:36:a9:62:3b:37:33:6a:39:f7:a6:
                    82:99:8e:47:8d:e8:6a:1b:92:91:b0:b3:b6:30:43:
                    03:68:07:72:fc:ca:d4:56:44:8b:2b:80:df:84:0f:
                    d3:94:1d:78:25:f6:9e:62:fa:3c:68:a4:67:76:6f:
                    8b:32:0b:45:4d:f2:3f:cf:30:91:c6:26:5c:63:49:
                    d8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:31:B3:E6:24:B1:AF:64:A0:AE:29:AB:E2:89:36:7C:0D:DA:B0:26
            X509v3 Authority Key Identifier:
                keyid:B8:C8:F2:3D:0C:48:C6:2E:18:E2:8F:56:0C:C9:15:98:93:D4:E4:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:5e:c6:75:4b:cb:e5:a2:2d:d9:28:c3:9c:1e:c1:ec:ed:3f:
         be:1e:0d:c0:b2:79:f5:be:5e:f3:65:23:da:0a:11:03:66:85:
         79:3c:f0:c2:29:90:af:32:2c:17:82:16:10:20:e5:5a:c3:41:
         60:6a:6b:94:49:34:0f:44:52:6d:df:9a:88:7b:09:d6:88:1c:
         bd:13:19:73:cc:b0:28:88:91:8b:87:d3:d3:02:f4:69:0d:a7:
         2f:f8:63:86:7f:42:16:08:bf:24:6b:ca:5b:e2:92:3d:7a:fa:
         d9:5a:cb:54:b1:bf:37:95:4a:44:4b:84:49:e8:72:85:25:46:
         11:a1:98:51:3c:fe:27:2c:ba:c4:41:38:ad:63:89:ff:47:85:
         2c:e9:2d:dc:fe:a4:a7:43:c3:40:c2:30:e9:75:e6:9d:e7:a0:
         16:96:11:8d:ad:5b:ff:17:dc:f7:b7:2e:86:c6:4f:6e:e2:ac:
         99:ea:db:5a:60:f4:e8:ad:e7:2f:9c:2f:85:50:76:e2:5a:6e:
         09:98:55:da:16:82:ba:d7:bb:a6:9c:0e:24:d5:83:e6:fa:6e:
         22:06:82:47:5e:b7:33:12:3c:64:bf:8b:90:db:d5:91:8f:b5:
         40:1e:85:f2:21:04:68:74:46:0f:70:79:62:a2:58:6f:49:2d:
         40:74:a4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:20:27 2026 by rpki-client