Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
File:                     UPiOBciYeWyC_wFHVogW6TNCDhg.mft (raw, json)
Hash identifier:          Dk/1FkxPmSd43e2rCkRlS1qcSWVSZ+Fm4glydhxzr5s=
Subject key identifier:   8C:BD:DF:C5:3C:61:AC:7A:D2:0E:9D:2C:08:A3:C3:F6:B7:0C:57:DB
Authority key identifier: 50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18
Certificate issuer:       /CN=50f88e05c898796c82ff0147568816e933420e18
Certificate serial:       019D273AB8BE9677E63F1292FD84781F91DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
Manifest number:          1886
Signing time:             Wed 25 Mar 2026 23:00:52 +0000
Manifest this update:     Wed 25 Mar 2026 23:00:52 +0000
Manifest next update:     Thu 26 Mar 2026 23:00:52 +0000
Files and hashes:         1: BTr2Bc99DKi4PYk5BqGlyVPBOtg.roa (hash: maZYRfEl0/BLOYS89UUlLOXtRggKxupS0Wn4TM8HfvQ=)
                          2: UPiOBciYeWyC_wFHVogW6TNCDhg.crl (hash: Gta1zFKcPBeIBF7LWoWrIpHMxacOO7rumT+laYTnr+A=)
                          3: mwdbhh4MkK3UW3MoUj-OSpitJtg.roa (hash: 73ZzUx+ayS9nz0SZi6BSEwxRgJ3onIVJGwZYT4nKqtA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:b8:be:96:77:e6:3f:12:92:fd:84:78:1f:91:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50f88e05c898796c82ff0147568816e933420e18
        Validity
            Not Before: Mar 25 23:00:52 2026 GMT
            Not After : Mar 26 23:00:52 2026 GMT
        Subject: CN=8cbddfc53c61ac7ad20e9d2c08a3c3f6b70c57db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c7:30:f0:de:f6:6e:46:7e:18:c3:38:e6:73:
                    8b:2b:26:63:8e:c5:2c:e9:d3:e6:b5:04:30:bb:4a:
                    fe:ce:40:85:d1:29:32:c0:f8:73:2c:c4:e6:56:71:
                    db:cc:7e:5d:b9:7d:28:2c:f9:21:a8:34:13:48:e8:
                    e2:d1:04:e6:c4:a9:72:7d:15:bf:06:a6:f0:43:66:
                    26:55:5e:41:64:da:54:13:2c:f9:62:4c:1d:01:a0:
                    1b:78:97:9d:d7:d3:44:97:c1:bc:18:8b:0c:27:e7:
                    bb:ae:26:46:cf:24:a5:19:de:65:c0:b6:ad:0d:38:
                    6d:05:e8:79:0a:98:17:10:8a:1a:97:ad:cd:fd:0a:
                    e8:66:2d:25:8d:6e:9e:a6:06:7c:b5:29:3c:43:ef:
                    da:58:77:a0:70:53:a1:02:23:96:4a:54:80:ac:45:
                    6f:c6:80:f0:41:d2:bd:a5:04:d3:f5:7c:da:54:97:
                    13:c6:fb:77:d6:50:3e:2a:5b:58:79:06:7c:85:0e:
                    ff:c8:94:4b:55:e2:de:3a:2d:95:14:0e:5c:f5:de:
                    1d:f9:a3:2b:81:24:cf:58:fc:92:6e:00:5f:e6:09:
                    ed:83:c4:4b:c1:93:a5:ca:07:4c:1f:c7:0f:68:8a:
                    c9:be:42:31:c0:1d:63:9f:93:83:e0:02:9f:b4:ca:
                    e7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:BD:DF:C5:3C:61:AC:7A:D2:0E:9D:2C:08:A3:C3:F6:B7:0C:57:DB
            X509v3 Authority Key Identifier:
                keyid:50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:d5:16:e6:97:3c:fb:86:73:e3:65:0e:ae:c5:00:14:b0:47:
         d9:75:06:ca:1b:92:80:24:a6:2e:8c:42:6e:0f:8f:6f:36:51:
         4e:bb:94:cb:ba:b6:fd:95:b8:56:40:93:78:09:86:c5:05:bb:
         63:72:aa:1f:5b:0e:7f:37:ff:97:5f:1b:74:9d:f5:d3:db:96:
         7b:81:0f:eb:e8:73:19:08:4f:10:5c:4c:69:48:da:ee:5b:1d:
         67:88:58:c5:86:90:36:02:7b:82:dd:58:eb:3b:56:fc:21:e9:
         6a:9b:3d:e2:68:b9:5b:cb:df:77:6a:9b:fa:ef:b5:fb:3b:d5:
         65:60:14:66:06:23:6a:70:9a:df:cd:fc:c1:9d:9a:f5:0e:02:
         45:35:e8:a9:7b:16:e5:6f:ee:b3:f8:8b:53:27:85:96:64:15:
         16:dd:63:dd:81:32:2b:4e:ac:a9:d3:ba:cf:48:c5:a7:bc:3f:
         bf:a8:0d:d7:a9:73:94:f9:89:07:c6:69:34:66:6f:bb:39:db:
         f3:3f:0e:4d:a7:c2:a1:1c:b5:af:8a:40:75:5a:b7:ec:7d:7f:
         2e:f5:47:24:71:a4:fa:0b:b0:22:ae:2a:91:88:19:83:74:06:
         bd:78:4a:ac:7b:2a:2f:59:60:e1:c0:ed:cb:e3:7f:ff:06:34:
         df:b2:e1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:00 2026 by rpki-client