Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.mft
File:                     UPLWshZg-tH2Di350L18bM-VwxE.mft (raw, json)
Hash identifier:          1Trlz23UlxWxKkvDDZt1z0+3OjPAb5i9AkAEiar42mI=
Subject key identifier:   6B:F4:47:89:D4:71:E1:FD:FB:D1:5E:43:A1:BA:49:16:46:04:77:51
Authority key identifier: 50:F2:D6:B2:16:60:FA:D1:F6:0E:2D:F9:D0:BD:7C:6C:CF:95:C3:11
Certificate issuer:       /CN=50f2d6b21660fad1f60e2df9d0bd7c6ccf95c311
Certificate serial:       019D26CCC9BC4704798F4DFF29C2F33C1FB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UPLWshZg-tH2Di350L18bM-VwxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.mft
Manifest number:          188E
Signing time:             Wed 25 Mar 2026 21:00:48 +0000
Manifest this update:     Wed 25 Mar 2026 21:00:48 +0000
Manifest next update:     Thu 26 Mar 2026 21:00:48 +0000
Files and hashes:         1: IMC0JhT3CPr4PULzb0b2VZaM62w.roa (hash: vnqL1BI8gdGA6/70Y7+bnJZNmD+VOE8s50wFo3pwRSQ=)
                          2: UPLWshZg-tH2Di350L18bM-VwxE.crl (hash: 3/KMVjtIVyOuL3srHFhw2mpLAmB0rsNYEhS8OAOVkNw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UPLWshZg-tH2Di350L18bM-VwxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cc:c9:bc:47:04:79:8f:4d:ff:29:c2:f3:3c:1f:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50f2d6b21660fad1f60e2df9d0bd7c6ccf95c311
        Validity
            Not Before: Mar 25 21:00:48 2026 GMT
            Not After : Mar 26 21:00:48 2026 GMT
        Subject: CN=6bf44789d471e1fdfbd15e43a1ba491646047751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:75:31:b4:89:d6:fa:5c:7a:fd:0d:22:4e:2c:
                    a3:54:ab:ee:bd:b3:fe:0c:9d:38:0d:a2:28:25:c9:
                    94:78:6f:dc:f0:f1:99:90:b8:7c:7e:60:0a:eb:7c:
                    f7:f5:17:7f:b5:d7:75:0d:c5:9c:fc:fc:0c:33:a9:
                    9c:fb:a9:27:0e:25:d6:e9:1f:f5:3d:2a:26:42:67:
                    cb:fa:50:08:7a:6a:14:f4:57:4b:90:e0:e7:f7:9c:
                    82:eb:be:8c:96:10:c5:26:77:ff:7c:84:98:d7:98:
                    c3:3e:d6:5d:82:46:6f:b6:ac:1d:94:7b:3c:25:e1:
                    b4:fc:f8:12:99:7d:ae:45:43:e8:40:73:15:fa:4b:
                    72:49:62:96:3c:13:e5:fa:14:6d:49:30:70:f1:4f:
                    33:0c:4a:23:b3:73:72:38:bd:07:64:f5:6c:73:5e:
                    80:a2:7b:3b:34:5a:a6:f7:f6:6c:06:43:99:55:27:
                    fd:7f:84:f3:df:90:36:6b:e6:c5:f3:44:f9:be:38:
                    56:e3:91:7b:e1:1e:5d:39:14:cf:7b:1f:39:c6:eb:
                    b2:47:69:9c:41:42:86:d3:5b:d6:1d:2c:e7:2f:b7:
                    a1:c9:3a:ac:6d:19:df:c6:fc:ac:b7:c8:1b:c3:9e:
                    99:b6:3a:06:b4:77:3d:ec:4e:df:ed:e8:bc:af:90:
                    fa:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F4:47:89:D4:71:E1:FD:FB:D1:5E:43:A1:BA:49:16:46:04:77:51
            X509v3 Authority Key Identifier:
                keyid:50:F2:D6:B2:16:60:FA:D1:F6:0E:2D:F9:D0:BD:7C:6C:CF:95:C3:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPLWshZg-tH2Di350L18bM-VwxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:75:6c:ac:a0:cc:36:6e:01:90:35:9d:ae:d6:06:7f:88:66:
         bb:91:fe:e0:c8:fb:75:49:13:f5:0c:44:fd:23:6d:59:88:b5:
         ae:a3:ff:da:41:56:c1:fc:ee:f4:5c:5b:87:d3:37:92:b4:7c:
         64:e4:ac:9f:ba:40:8e:95:4b:52:05:ef:38:b6:3a:8d:3a:98:
         10:4c:62:0f:26:8f:0e:01:2a:f2:51:01:c7:07:60:37:6a:6d:
         06:2f:c2:fe:d6:c0:d3:38:cb:db:f4:86:0e:f7:c8:7c:0a:a5:
         3d:5d:d0:68:0b:d1:10:8d:52:e8:b0:82:78:dc:45:58:2b:5d:
         15:7f:03:2f:bd:98:a6:c8:86:dd:12:67:ec:ee:36:37:ed:f4:
         4e:44:ee:8a:63:09:31:a9:e6:6b:33:11:d2:f0:29:1a:71:06:
         4e:d5:85:3e:00:f1:bb:ae:5b:3c:e4:c0:25:57:bf:cd:cd:61:
         51:7f:fa:87:e0:c7:6a:a0:4b:72:48:6f:83:bd:09:cb:7b:5f:
         d6:cf:9f:0a:56:a0:e8:d3:c2:dc:d2:7b:b0:63:d3:24:27:99:
         28:1c:bf:d3:3c:9a:2e:dd:d6:17:1d:20:3f:87:5e:b8:59:e3:
         c7:48:5f:25:61:a6:64:81:b1:20:21:78:4b:12:57:cf:20:53:
         6a:69:d3:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzMm8RwR5j03/KcLzPB+1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwZjJkNmIyMTY2MGZhZDFmNjBlMmRmOWQwYmQ3YzZjY2Y5
NWMzMTEwHhcNMjYwMzI1MjEwMDQ4WhcNMjYwMzI2MjEwMDQ4WjAzMTEwLwYDVQQD
Eyg2YmY0NDc4OWQ0NzFlMWZkZmJkMTVlNDNhMWJhNDkxNjQ2MDQ3NzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnUxtInW+lx6/Q0iTiyjVKvuvbP+
DJ04DaIoJcmUeG/c8PGZkLh8fmAK63z39Rd/tdd1DcWc/PwMM6mc+6knDiXW6R/1
PSomQmfL+lAIemoU9FdLkODn95yC676MlhDFJnf/fISY15jDPtZdgkZvtqwdlHs8
JeG0/PgSmX2uRUPoQHMV+ktySWKWPBPl+hRtSTBw8U8zDEojs3NyOL0HZPVsc16A
ons7NFqm9/ZsBkOZVSf9f4Tz35A2a+bF80T5vjhW45F74R5dORTPex85xuuyR2mc
QUKG01vWHSznL7ehyTqsbRnfxvyst8gbw56ZtjoGtHc97E7f7ei8r5D6rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGv0R4nUceH9+9FeQ6G6SRZGBHdRMB8GA1UdIwQY
MBaAFFDy1rIWYPrR9g4t+dC9fGzPlcMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVBMV3NoWmctdEgyRGkzNTBMMThiTS1Wd3hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9kMGVkZDUtNjA4Ny00YmUxLWIzNmYt
YWIzZGQ1ZGM2NzA5LzEvVVBMV3NoWmctdEgyRGkzNTBMMThiTS1Wd3hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9kMGVkZDUtNjA4Ny00YmUxLWIzNmYtYWIzZGQ1ZGM2NzA5
LzEvVVBMV3NoWmctdEgyRGkzNTBMMThiTS1Wd3hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR3VsrKDM
Nm4BkDWdrtYGf4hmu5H+4Mj7dUkT9QxE/SNtWYi1rqP/2kFWwfzu9Fxbh9M3krR8
ZOSsn7pAjpVLUgXvOLY6jTqYEExiDyaPDgEq8lEBxwdgN2ptBi/C/tbA0zjL2/SG
DvfIfAqlPV3QaAvREI1S6LCCeNxFWCtdFX8DL72YpsiG3RJn7O42N+30TkTuimMJ
ManmazMR0vApGnEGTtWFPgDxu65bPOTAJVe/zc1hUX/6h+DHaqBLckhvg70Jy3tf
1s+fClag6NPC3NJ7sGPTJCeZKBy/0zyaLt3WFx0gP4deuFnjx0hfJWGmZIGxICF4
SxJXzyBTamnT1A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:32 2026 by rpki-client