Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft
File:                     UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft (raw, json)
Hash identifier:          gv23QadyAgsb9dL16k9ZjnG80VEnLPUPFh8jtC6Oi1M=
Subject key identifier:   AB:61:00:F9:20:22:A8:E1:7A:C0:62:5D:42:07:8A:DA:3B:D2:F8:1C
Authority key identifier: 50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98
Certificate issuer:       /CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
Certificate serial:       019D29CDB817388FFB2A895ACEB918F60B9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft
Manifest number:          188E
Signing time:             Thu 26 Mar 2026 11:00:40 +0000
Manifest this update:     Thu 26 Mar 2026 11:00:40 +0000
Manifest next update:     Fri 27 Mar 2026 11:00:40 +0000
Files and hashes:         1: MQJyHdCQqrR49YtqfP5n2nCmdBc.roa (hash: tayylzbDzrQ2vAXY3YULZKX+Mr7ci8knVpJFx/AOaaM=)
                          2: UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl (hash: 7P/s6PkcAPJVUpOo3w8RB0dn8waTBBO/aBajClKtEUY=)
                          3: VDLlDzAUnpp3yY9jYEhslsSDEio.roa (hash: U4N6I7gKlIzNINdJyuTqu3g1hmT4TUUCZ4OMW8ayoD4=)
                          4: jSW60U-IDuUsjOlqZECJM6Mt8QM.roa (hash: wz6ZP0fktYKLcRgNv3R96YBySJmIs8qgZe1Q2mMxP04=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:cd:b8:17:38:8f:fb:2a:89:5a:ce:b9:18:f6:0b:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
        Validity
            Not Before: Mar 26 11:00:40 2026 GMT
            Not After : Mar 27 11:00:40 2026 GMT
        Subject: CN=ab6100f92022a8e17ac0625d42078ada3bd2f81c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2a:dd:b1:a4:3c:d0:0c:bd:1f:a0:ab:7b:01:
                    c1:bb:a5:83:95:bc:8a:04:e4:32:ca:90:02:62:26:
                    b2:30:0a:65:95:33:9f:92:d5:66:b5:10:fd:30:e4:
                    7a:65:16:87:2b:3d:3a:4c:ca:62:12:f9:d2:d4:e6:
                    37:89:27:52:0e:b4:44:44:4c:e2:3e:89:0c:0e:bb:
                    20:5d:72:34:8e:00:14:1b:47:02:6c:11:2e:fa:00:
                    66:eb:a7:6f:6e:ba:3a:43:67:4d:da:f2:17:5a:9b:
                    be:5b:74:fe:92:4b:0c:4f:1d:80:05:cd:2c:41:3a:
                    f5:a7:58:e9:6d:c7:15:0b:a4:e3:97:1b:1f:5b:ba:
                    00:8d:4c:ed:68:73:2e:8a:d5:f1:b0:3d:b2:9d:69:
                    5b:e8:70:85:40:0f:22:e4:21:20:65:64:75:02:ce:
                    fa:67:d2:a1:9d:23:4c:85:2d:89:e1:23:79:6a:5c:
                    27:5a:6c:75:45:76:33:78:ca:b0:84:58:c9:75:d4:
                    0c:fd:be:1f:b8:98:91:01:c7:be:6a:b4:4c:97:df:
                    d5:23:00:5d:c3:13:df:96:ec:8d:38:c2:50:b8:93:
                    4a:c1:ef:d0:29:a8:42:bf:24:db:ad:2b:96:3b:47:
                    6c:69:63:33:53:d5:31:03:19:3c:eb:94:9e:fa:19:
                    c7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:61:00:F9:20:22:A8:E1:7A:C0:62:5D:42:07:8A:DA:3B:D2:F8:1C
            X509v3 Authority Key Identifier:
                keyid:50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:7e:e6:c5:10:02:a2:c2:c8:67:89:f7:ec:85:67:f3:33:ed:
         be:24:51:f2:58:77:38:b4:b6:6d:3d:36:64:c0:c9:b6:f9:d6:
         bf:cb:f8:fb:c6:f2:7c:47:d4:13:de:b9:8a:3d:27:eb:f0:f8:
         48:59:f0:06:8a:f0:90:8d:6c:b7:b9:4e:76:1e:98:eb:93:a3:
         b2:c3:43:a1:ef:7e:83:af:af:b4:79:6d:e0:21:82:9e:80:04:
         ae:4e:81:e0:30:d4:79:0d:1e:c1:2d:3c:c5:bf:4e:b5:c6:fa:
         1b:e5:3b:75:6a:64:2d:98:24:f9:6d:34:cf:a9:d0:04:9c:37:
         f8:14:67:29:ef:5d:ea:e0:96:27:e2:5f:1f:70:e3:37:51:ec:
         bf:25:52:85:83:42:65:11:a7:52:ff:21:83:6d:ad:4d:b1:5b:
         f9:e8:01:42:35:f1:c1:3e:01:3a:c0:2a:a9:75:87:6b:fe:62:
         9c:65:0e:fa:6e:8a:32:e1:50:ea:77:af:60:25:cd:f7:11:bb:
         73:1e:63:ff:7b:d9:70:f6:e0:0d:86:7b:da:96:6b:2c:9a:78:
         db:15:5c:cb:2b:f8:77:56:1b:62:8b:5c:ae:51:76:ab:c3:62:
         f8:ef:6f:e4:d3:83:4b:06:25:8a:07:ff:91:2e:59:69:07:a7:
         54:bd:62:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:26:24 2026 by rpki-client