Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.mft
File:                     uqs_CIW1VmubFTPSCW32jlSf7D4.mft (raw, json)
Hash identifier:          LiWSUtbraoColnUhNjAxjFnb5j2BprAfyAnnARkCrpQ=
Subject key identifier:   E0:78:C7:3E:C1:CC:C4:67:0E:AE:C8:82:71:1A:25:70:81:2F:FB:51
Authority key identifier: BA:AB:3F:08:85:B5:56:6B:9B:15:33:D2:09:6D:F6:8E:54:9F:EC:3E
Certificate issuer:       /CN=baab3f0885b5566b9b1533d2096df68e549fec3e
Certificate serial:       019D265EDC466D58EB970C18EE52181D4CA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqs_CIW1VmubFTPSCW32jlSf7D4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.mft
Manifest number:          15C7
Signing time:             Wed 25 Mar 2026 19:00:43 +0000
Manifest this update:     Wed 25 Mar 2026 19:00:43 +0000
Manifest next update:     Thu 26 Mar 2026 19:00:43 +0000
Files and hashes:         1: uqs_CIW1VmubFTPSCW32jlSf7D4.crl (hash: e4wRZjDVzAJqLT0dzaQAI2+oU2gxz+tXTTAau8py5Yk=)
                          2: vUVrsBxk_ZUy0s2IP3gA1vQjVcc.roa (hash: jdQIPt1Uhbi952qXzHWO2e5b80hHvTs1H8idT8nlc+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqs_CIW1VmubFTPSCW32jlSf7D4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5e:dc:46:6d:58:eb:97:0c:18:ee:52:18:1d:4c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baab3f0885b5566b9b1533d2096df68e549fec3e
        Validity
            Not Before: Mar 25 19:00:43 2026 GMT
            Not After : Mar 26 19:00:43 2026 GMT
        Subject: CN=e078c73ec1ccc4670eaec882711a2570812ffb51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:cc:63:1c:c1:ef:34:cf:76:40:d3:e9:92:f2:
                    ef:ba:6c:d7:be:5a:57:1f:b8:94:44:c5:68:50:6a:
                    5c:39:12:bf:c9:79:d7:f7:cb:e6:6c:0a:0e:33:07:
                    f3:89:22:f7:99:6a:2e:6f:5f:20:5f:8b:c8:38:f1:
                    5a:6b:df:56:ee:05:6f:4e:82:9a:20:1d:72:7c:96:
                    4b:d1:73:32:7d:db:56:8f:04:27:34:18:f0:06:ec:
                    a5:06:77:e3:bc:ce:d4:06:0c:a4:73:68:24:c8:fb:
                    69:c9:cd:22:1f:40:87:b4:c7:a3:d6:00:d4:50:1d:
                    4b:57:f6:19:78:ca:7d:9a:f5:7b:d9:d8:e2:29:bb:
                    98:d6:9e:0f:da:15:de:a0:29:66:1f:72:c8:25:fe:
                    00:bd:e8:96:b2:61:3f:64:29:f6:72:05:d7:a7:78:
                    e3:5d:e2:e3:65:ac:d7:85:26:22:9a:1e:74:c6:28:
                    9a:d0:a4:e5:b2:a5:aa:b4:53:64:38:19:42:96:36:
                    e7:3b:7f:60:b0:b0:27:98:a8:57:e2:4f:72:79:5c:
                    bd:66:ec:6d:07:97:24:41:c8:bd:35:e2:b6:78:02:
                    f2:ba:e7:78:3d:7d:66:87:fa:e5:cd:7d:f2:62:15:
                    fa:43:1b:64:1e:e3:4d:eb:e2:07:2d:5a:4f:b5:d8:
                    eb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:78:C7:3E:C1:CC:C4:67:0E:AE:C8:82:71:1A:25:70:81:2F:FB:51
            X509v3 Authority Key Identifier:
                keyid:BA:AB:3F:08:85:B5:56:6B:9B:15:33:D2:09:6D:F6:8E:54:9F:EC:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqs_CIW1VmubFTPSCW32jlSf7D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:48:35:2f:44:89:dd:fc:6c:6f:4a:6a:c3:fa:2c:01:6f:c5:
         49:b6:74:0c:71:33:92:78:5c:f1:e4:5a:92:02:47:e3:cc:99:
         e2:db:b6:67:3b:ec:c1:55:9b:15:91:4e:09:2b:aa:93:08:02:
         ed:b6:e9:a6:e2:86:5c:0a:31:a3:41:71:13:45:8a:db:3b:00:
         0c:77:62:ed:f6:22:32:9f:77:84:b4:25:8d:df:03:bc:c3:13:
         c8:8d:a8:39:87:fc:09:ce:bb:05:a3:f6:d8:5d:48:a6:47:77:
         51:1e:69:71:b2:a3:b5:49:2c:11:6c:d8:91:17:f3:b3:d0:16:
         81:b2:8b:f7:4b:7b:cd:7a:3d:bb:37:65:4e:bb:03:14:e7:2e:
         95:79:4e:2e:05:81:cd:51:72:fa:a9:e5:96:ce:4c:ff:88:1f:
         e6:ea:3e:2f:7c:f6:b3:5e:c5:19:66:15:0a:85:c1:69:0c:47:
         e5:5c:b6:98:09:8b:b6:02:2d:f5:71:30:bb:76:f6:69:c1:6b:
         f7:68:e1:0b:1a:79:f3:63:f9:98:92:c1:c6:8a:96:2c:fa:3d:
         cb:ca:53:56:60:06:cf:72:57:db:ae:ef:73:93:31:25:48:09:
         ae:f4:ec:4e:0d:83:11:34:96:5f:ab:0e:ee:c9:c5:7b:9e:33:
         27:46:be:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:07 2026 by rpki-client