Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
File:                     UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft (raw, json)
Hash identifier:          JzfVDRzRsYg+jnGgnkmt1ZMSao0ykXmsiBNwP+CYLio=
Subject key identifier:   7E:D9:A3:F9:B8:22:E9:FA:CF:95:32:17:AE:6C:FD:AE:BA:D1:FC:4F
Authority key identifier: 50:26:4C:3F:09:83:1C:CD:88:97:12:F4:FA:B5:C5:B1:BE:0C:AD:56
Certificate issuer:       /CN=50264c3f09831ccd889712f4fab5c5b1be0cad56
Certificate serial:       019D2C2AAF0D106393FEAFBB42642CA8E668
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
Manifest number:          188B
Signing time:             Thu 26 Mar 2026 22:01:27 +0000
Manifest this update:     Thu 26 Mar 2026 22:01:27 +0000
Manifest next update:     Fri 27 Mar 2026 22:01:27 +0000
Files and hashes:         1: UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl (hash: qVIrxGiDzy5jdMm1xeA3U3G+fFeffNEZLJhdpEIT+cE=)
                          2: yh2X2ozTLX2jv3i-6zTP4fuQL0s.roa (hash: 3DAmw+iwLLlUS0HsEZXB/476bZhxozUVUrUhXhghaeA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2c:2a:af:0d:10:63:93:fe:af:bb:42:64:2c:a8:e6:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50264c3f09831ccd889712f4fab5c5b1be0cad56
        Validity
            Not Before: Mar 26 22:01:27 2026 GMT
            Not After : Mar 27 22:01:27 2026 GMT
        Subject: CN=7ed9a3f9b822e9facf953217ae6cfdaebad1fc4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:27:40:2f:6f:7d:67:a9:03:eb:49:aa:0f:c9:
                    30:92:97:e7:21:ce:9d:69:e7:57:ac:bd:2a:4c:19:
                    a9:6f:7e:f3:00:ef:86:70:56:00:c1:95:bb:db:8c:
                    60:cd:b1:ef:d0:f8:b8:7b:56:37:36:76:eb:21:04:
                    04:f9:b7:b3:d8:f3:ce:8e:28:c6:ad:61:eb:a1:a4:
                    8b:72:57:a1:fb:49:dd:20:d8:23:dc:2b:ad:9b:99:
                    bb:50:f6:b7:b9:2f:43:e4:be:5c:d6:e6:87:e6:00:
                    14:e4:12:8a:6d:fc:16:55:ff:36:01:d9:32:10:49:
                    d6:5a:01:c9:ef:c4:94:bd:6b:3b:7a:84:7e:08:a3:
                    dd:c4:83:14:d3:05:5a:19:54:21:48:c2:53:ab:58:
                    ef:ea:f2:8d:95:25:70:a6:00:72:92:56:76:e6:48:
                    22:5f:f7:42:64:e9:23:18:bf:29:9b:36:f5:ed:3d:
                    7a:74:71:fb:69:cb:64:dd:0d:9f:52:68:85:8e:58:
                    73:ff:7e:95:f8:95:42:3f:15:44:62:06:dc:0a:16:
                    bc:11:53:2b:63:d3:fe:2c:82:1b:1a:17:57:10:ec:
                    1a:d1:b1:8f:7e:89:dc:a9:c8:93:88:b9:b0:2c:f8:
                    af:c9:11:a2:95:9b:8c:4b:d7:bd:a4:c4:c9:bc:ea:
                    87:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D9:A3:F9:B8:22:E9:FA:CF:95:32:17:AE:6C:FD:AE:BA:D1:FC:4F
            X509v3 Authority Key Identifier:
                keyid:50:26:4C:3F:09:83:1C:CD:88:97:12:F4:FA:B5:C5:B1:BE:0C:AD:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:f2:fd:18:40:26:f1:83:44:1f:8c:1d:c6:a5:d7:7e:9e:5b:
         c2:af:12:6c:dd:33:cb:af:ae:ce:05:4c:7f:39:40:0c:87:b9:
         9a:f7:88:e2:fe:04:af:1e:ed:9f:c2:a4:aa:44:a3:b3:03:fc:
         25:ab:b3:86:fb:bc:fc:ca:d1:29:d8:8b:7c:78:dc:ad:c8:c1:
         28:fc:06:70:83:ba:1c:79:47:8b:4a:84:d1:8c:4a:69:55:20:
         05:5c:99:a4:e9:96:b4:32:aa:20:ba:c7:a9:1f:9b:c9:c2:7e:
         25:0b:64:40:47:fc:de:e7:ca:bf:84:4d:78:aa:86:28:58:00:
         9b:30:49:82:00:e3:9e:8a:0b:eb:27:91:0d:31:84:fa:a1:7b:
         60:d5:fa:f0:a3:06:90:32:6f:bb:42:55:60:cf:b2:e9:a3:7a:
         73:fd:9f:2d:4b:3e:54:00:c5:4b:4e:ef:3b:92:98:c5:df:84:
         92:d5:16:c4:53:0a:4f:89:5c:48:ac:3a:19:36:d4:7e:52:56:
         63:0f:22:11:40:28:ef:be:8f:0c:f9:0e:20:54:f0:d5:5c:e0:
         09:d6:66:8f:bb:27:0b:af:ea:ef:13:14:96:45:73:77:07:9a:
         c2:c7:aa:bd:f4:ba:cb:8d:09:d1:27:4d:c6:75:bd:ce:9d:b4:
         18:02:a6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:03:35 2026 by rpki-client