Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
File:                     uHLaD5xsVoaj257hJKmQQrCogtE.mft (raw, json)
Hash identifier:          BzGSavhOGYg875jEwfScQgei6Er57up5moBtgSx+fWo=
Subject key identifier:   A0:5A:C3:88:5A:14:EC:D2:3F:2B:6B:F7:E9:DD:91:0F:05:1D:5D:8D
Authority key identifier: B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1
Certificate issuer:       /CN=b872da0f9c6c5686a3db9ee124a99042b0a882d1
Certificate serial:       019D2AA9B14E376EB3F1CA0AC0039AF6290E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 15:00:57 +0000
Manifest this update:     Thu 26 Mar 2026 15:00:57 +0000
Manifest next update:     Fri 27 Mar 2026 15:00:57 +0000
Files and hashes:         1: 4i8l1Q-FIgnv4ElEMlL-rxdJK5Q.roa (hash: FSXcacLcS9NFl9QL5QX0dsKZrr4j/cA0RvIb9VXgClE=)
                          2: 5z2ugNN4RBvN-s8lDFfAdlsr0vM.roa (hash: +MFvjCgMQZKr4AK37XrGX62GkhpOrU8EW9hs8ZLbdbE=)
                          3: 91jzPpyhLA-PAXeNm7LV01McVYk.roa (hash: zVfFgQK9yW19axQR7Z9c3CenPU09qBELr2O2n+U7UAs=)
                          4: uHLaD5xsVoaj257hJKmQQrCogtE.crl (hash: JgQp+I5gYRV7Qm3ghYNvhisw0w44ZTfzQYQLO/mmDao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:a9:b1:4e:37:6e:b3:f1:ca:0a:c0:03:9a:f6:29:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b872da0f9c6c5686a3db9ee124a99042b0a882d1
        Validity
            Not Before: Mar 26 15:00:57 2026 GMT
            Not After : Mar 27 15:00:57 2026 GMT
        Subject: CN=a05ac3885a14ecd23f2b6bf7e9dd910f051d5d8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1a:df:68:1e:11:1f:55:ac:64:c1:ec:ab:a9:
                    6b:bc:20:e2:8a:12:01:48:9d:d4:d7:18:0f:84:d2:
                    49:ba:d1:39:1f:6b:1d:ec:a6:19:2b:0c:2c:31:c8:
                    2d:62:66:da:d4:34:f6:c0:2c:aa:71:d7:33:5b:72:
                    f9:bb:31:d6:5b:f5:0d:8c:e8:60:c5:82:29:9e:94:
                    c7:8f:2c:7c:e6:bf:8b:7c:02:65:87:07:27:ba:25:
                    81:df:6c:f0:0f:2a:3f:e5:c3:23:f0:8b:5b:55:ed:
                    d8:13:d9:6b:5b:c9:10:22:b5:ce:f5:c9:c8:ea:a6:
                    e9:82:fc:7f:1c:dd:19:9a:31:7a:6f:51:b7:9c:ec:
                    11:b5:7c:05:79:70:e4:c7:e1:8e:af:cd:51:8b:94:
                    77:22:9c:88:c6:80:60:e7:d9:30:fe:2a:ca:aa:be:
                    cc:4e:5f:c3:4e:d5:b7:72:4e:dc:87:8b:8a:c8:50:
                    92:18:23:76:bc:bb:ec:e8:84:3d:10:82:22:2c:75:
                    16:2d:f1:4a:c3:d6:4b:01:76:81:66:d0:64:2a:38:
                    89:58:d1:7c:69:15:15:94:c3:7e:68:ba:7f:c3:3a:
                    75:d2:8e:d9:6c:8f:81:ef:cd:11:72:13:18:7f:ab:
                    b5:8f:08:01:68:49:04:9d:b8:7c:58:e4:2a:3f:3e:
                    fb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:5A:C3:88:5A:14:EC:D2:3F:2B:6B:F7:E9:DD:91:0F:05:1D:5D:8D
            X509v3 Authority Key Identifier:
                keyid:B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:5a:25:42:d5:99:89:a7:22:97:d9:a9:ab:80:7c:a1:82:89:
         bf:e4:e0:d0:0b:06:2d:3d:55:9a:a4:89:69:f5:0d:c7:86:b0:
         7f:21:57:11:7d:ed:f8:b7:13:2c:3d:0c:d7:43:b6:57:09:4e:
         42:34:b2:35:de:f7:69:a1:fb:f7:7b:2c:ff:51:ed:0e:6b:2d:
         e2:3a:c0:26:54:47:4e:17:87:a6:62:ca:7b:89:6f:1c:db:f3:
         13:79:45:3a:8a:6e:44:94:eb:e3:b7:94:c5:64:2d:cf:ac:f0:
         64:32:68:e0:15:22:dd:67:09:da:0c:1a:b5:56:a3:ce:f5:76:
         63:6f:39:2b:57:cc:fa:ff:78:bd:33:75:28:a8:ec:60:57:e7:
         57:f7:48:65:30:48:a3:3d:3a:36:96:f6:94:6b:d8:9b:57:41:
         d4:e7:dc:a3:31:c6:9f:86:0d:72:ef:b2:1a:5c:64:95:a3:e1:
         10:6f:a3:a1:09:c4:06:2e:ee:7d:0d:bd:c7:6f:53:61:88:fb:
         31:c2:16:95:32:58:b5:9d:bb:56:b3:ca:1d:55:66:46:0f:a8:
         c2:a7:00:1d:58:3d:5a:b2:ee:52:30:69:ed:f9:f0:c3:34:31:
         f7:fc:f6:98:76:a5:07:e5:b0:ad:8c:81:5d:b3:4c:5f:c0:c9:
         fd:9e:d2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:09:57 2026 by rpki-client