Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.mft
File:                     UJVwBFEY_ttvz2G1lCDIc7cVh78.mft (raw, json)
Hash identifier:          kbjx5MaqWpECUArc82EVYzoqHxqCvpkw4EEqpmAw988=
Subject key identifier:   53:F8:7E:42:62:AD:FD:9D:5D:CF:C6:3F:44:3B:9D:AD:EF:C7:13:65
Authority key identifier: 50:95:70:04:51:18:FE:DB:6F:CF:61:B5:94:20:C8:73:B7:15:87:BF
Certificate issuer:       /CN=509570045118fedb6fcf61b59420c873b71587bf
Certificate serial:       019D27A93803C9527AAC0FEC66236B009D95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJVwBFEY_ttvz2G1lCDIc7cVh78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.mft
Manifest number:          1883
Signing time:             Thu 26 Mar 2026 01:01:34 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:34 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:34 +0000
Files and hashes:         1: UJVwBFEY_ttvz2G1lCDIc7cVh78.crl (hash: 3IPMLg9vRzU17gvWsYCf3Ri1VLfz/Wq9uMoIoZGIqoU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UJVwBFEY_ttvz2G1lCDIc7cVh78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a9:38:03:c9:52:7a:ac:0f:ec:66:23:6b:00:9d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509570045118fedb6fcf61b59420c873b71587bf
        Validity
            Not Before: Mar 26 01:01:34 2026 GMT
            Not After : Mar 27 01:01:34 2026 GMT
        Subject: CN=53f87e4262adfd9d5dcfc63f443b9dadefc71365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8a:83:bc:57:d7:ae:93:01:90:39:27:6e:f2:
                    75:1e:30:c5:28:29:38:ef:4a:d1:e3:b2:58:49:71:
                    bc:b5:ee:27:0c:1f:bc:71:74:76:3c:b9:13:4b:c4:
                    05:81:f5:59:a8:a1:27:a9:90:67:37:c6:df:f3:2a:
                    5c:05:00:d8:f1:1f:12:1b:42:7b:55:a0:4d:39:d9:
                    59:b9:81:e8:de:f2:48:fd:55:92:08:6c:98:73:5a:
                    36:75:0b:c4:d1:8c:5a:40:70:09:a5:1f:d6:c8:1e:
                    6a:5b:5b:fc:3e:ac:5a:53:7e:83:ff:5e:f5:56:58:
                    0a:bf:92:86:d1:39:bc:a6:89:32:2c:c2:8b:26:56:
                    a8:1a:d0:d4:dd:a4:8a:bd:04:50:d7:01:f5:13:0d:
                    ca:4a:a6:47:2f:93:c8:89:0c:cb:d4:7a:9f:53:59:
                    67:13:09:8c:bc:d7:2e:78:82:e0:7b:2e:62:fa:fd:
                    5a:7b:03:97:e2:4a:89:1c:ed:d5:38:e2:14:a7:9c:
                    ff:cf:9f:98:54:d9:ee:15:33:00:e9:5c:35:a8:34:
                    7e:04:95:31:10:90:b3:9e:47:21:90:03:a4:51:8c:
                    57:54:b3:45:07:02:5e:1e:da:71:b9:5d:6d:f1:f8:
                    68:aa:f9:cd:87:aa:35:32:f3:68:ca:4f:cb:03:04:
                    e1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F8:7E:42:62:AD:FD:9D:5D:CF:C6:3F:44:3B:9D:AD:EF:C7:13:65
            X509v3 Authority Key Identifier:
                keyid:50:95:70:04:51:18:FE:DB:6F:CF:61:B5:94:20:C8:73:B7:15:87:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJVwBFEY_ttvz2G1lCDIc7cVh78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:3b:2b:a3:73:96:2f:ab:31:6c:61:b5:1f:3c:ec:e6:55:b1:
         5c:1b:22:89:65:5c:31:65:66:a0:e9:9b:ba:be:c6:ad:59:a4:
         5f:00:3d:69:a9:39:83:19:a7:ca:c0:2a:48:63:02:54:2c:e1:
         ec:08:29:dd:4f:89:52:1c:59:f1:e5:9d:e0:eb:aa:b5:e8:c5:
         9c:ac:56:14:63:11:10:9a:be:0d:65:09:c2:f1:f9:75:f0:7a:
         50:88:ae:97:e7:98:79:8f:f9:15:ce:f1:3c:f3:7b:fa:7e:f6:
         a1:41:6e:11:5f:c4:fc:2e:99:3f:1c:98:90:ba:12:b7:39:e3:
         79:a3:19:4e:b0:d0:1a:d7:5f:db:e2:c2:f8:a4:9c:d3:f8:5b:
         8d:30:ca:00:4d:ba:3d:0d:03:22:6b:90:4f:5c:60:b2:60:4a:
         eb:29:8c:3e:d4:23:b3:ea:5c:2c:02:e4:7c:ab:77:2d:bc:a8:
         50:fe:43:a1:f4:b8:ec:62:ac:3b:6c:59:2d:0b:a8:37:3d:2c:
         f4:41:6e:95:79:75:0e:59:d9:66:d8:b4:19:fa:34:09:8e:ab:
         76:82:63:a1:ea:de:44:df:2f:9d:95:57:5d:a1:e7:2b:a6:c6:
         c3:2b:6d:46:fc:64:c8:51:aa:fd:c8:da:b4:dd:c5:fd:8e:b7:
         50:f0:b3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:48 2026 by rpki-client