Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft
File:                     UhqgJHWNjRBOEXnFUDmBZjav4pg.mft (raw, json)
Hash identifier:          DE151noySak5tRiJ6e8ao8n3QIaocREGaGU3fc7dtwc=
Subject key identifier:   1B:61:09:64:00:7C:88:48:5E:1B:D9:F4:52:4A:D5:70:BA:B8:81:CC
Authority key identifier: 52:1A:A0:24:75:8D:8D:10:4E:11:79:C5:50:39:81:66:36:AF:E2:98
Certificate issuer:       /CN=521aa024758d8d104e1179c55039816636afe298
Certificate serial:       019D28F27467370BE48E6B4E48A8B42C9D57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UhqgJHWNjRBOEXnFUDmBZjav4pg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft
Manifest number:          1886
Signing time:             Thu 26 Mar 2026 07:01:11 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:11 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:11 +0000
Files and hashes:         1: AEJIsDrd-VO6hWNQVrQjeNSN6Ag.roa (hash: 8FBS9Nlb+Rowhs3MjT22J5QkyFI/YJdlfJfTWvJU2Dk=)
                          2: UhqgJHWNjRBOEXnFUDmBZjav4pg.crl (hash: fm1Ayfdm03/Ub2a+B+aHf5sda2otrWRSDPsYF7HF0oI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UhqgJHWNjRBOEXnFUDmBZjav4pg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:74:67:37:0b:e4:8e:6b:4e:48:a8:b4:2c:9d:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521aa024758d8d104e1179c55039816636afe298
        Validity
            Not Before: Mar 26 07:01:11 2026 GMT
            Not After : Mar 27 07:01:11 2026 GMT
        Subject: CN=1b610964007c88485e1bd9f4524ad570bab881cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:24:c5:3a:35:93:c3:07:3a:17:e6:11:e1:ec:
                    32:91:6f:ea:91:07:db:95:24:a6:26:99:15:cc:41:
                    88:72:f6:73:36:77:35:4c:74:1a:9f:e4:e7:b1:68:
                    7f:dd:17:86:19:70:7d:63:69:28:a2:55:15:9f:88:
                    0f:80:23:ee:e6:3b:08:dc:fe:8d:32:af:60:80:cd:
                    53:ac:84:3b:a9:e3:23:8c:78:78:29:49:f6:5d:74:
                    3c:70:11:6d:b0:a8:0c:0b:5c:23:36:b0:e3:ea:1e:
                    cb:5a:60:b5:81:71:4c:4d:4d:ab:e2:5b:ec:72:04:
                    27:75:23:93:ae:50:5d:80:42:db:c5:0f:25:d8:0f:
                    46:98:52:f8:a2:dd:af:bc:8d:2b:52:29:d1:d4:ff:
                    24:0a:07:76:d7:c7:dc:66:bd:e0:f0:5d:e7:88:65:
                    a1:cd:8d:e6:c1:43:fe:b4:18:97:88:4d:52:28:26:
                    bd:bd:cb:57:ed:98:30:54:6c:00:ea:61:46:c2:bb:
                    ac:69:57:92:95:05:01:f6:7b:1b:93:67:2b:20:aa:
                    71:c5:07:1d:8d:cd:67:81:c8:e5:cb:6a:6a:3c:c4:
                    93:35:8b:94:22:c4:0c:f2:c3:6b:9a:e7:f0:23:cb:
                    20:de:e0:2f:68:7c:f7:cf:90:58:d6:38:51:1c:76:
                    71:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:61:09:64:00:7C:88:48:5E:1B:D9:F4:52:4A:D5:70:BA:B8:81:CC
            X509v3 Authority Key Identifier:
                keyid:52:1A:A0:24:75:8D:8D:10:4E:11:79:C5:50:39:81:66:36:AF:E2:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhqgJHWNjRBOEXnFUDmBZjav4pg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:65:84:26:c7:17:2a:72:28:d8:b8:46:64:77:6a:a1:97:64:
         ca:12:6d:13:db:ef:33:3e:00:6a:04:78:ee:b3:87:72:0c:dc:
         2f:32:19:34:1a:00:48:6f:77:a4:5e:4b:90:d1:5b:b3:ee:e6:
         a3:74:35:f5:fc:9e:7b:26:8b:47:cf:9b:9d:03:8e:fc:c0:48:
         51:fd:37:b4:76:ac:59:bc:c6:67:b7:b8:b9:0f:bc:42:2a:c5:
         2f:0f:80:7a:8d:2d:18:e1:96:dc:8b:f1:52:f0:b2:cf:17:80:
         ff:1d:ce:6a:ac:e5:2e:83:e7:24:c3:71:b5:4c:bb:eb:5b:c8:
         8b:68:05:e0:7f:f3:e8:7f:61:99:b1:15:86:f0:bb:76:4a:ad:
         3c:4d:01:cc:ad:19:f3:d9:e0:2c:41:85:88:05:90:9e:74:b0:
         44:32:2d:f3:d9:ae:aa:4e:23:e4:58:3a:b4:6b:d1:bb:01:56:
         99:c5:64:a0:b3:b2:4c:37:f6:16:87:7a:b1:87:d7:60:14:bf:
         33:16:4d:37:ed:15:0e:8c:c4:03:31:26:2f:f7:3f:3b:98:0b:
         af:48:e2:68:1e:e5:3b:16:3b:e2:4a:e4:c0:67:b1:e3:ff:65:
         16:42:6a:b2:70:e1:c1:ef:a9:0a:73:e1:aa:dc:67:24:63:88:
         88:23:16:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8nRnNwvkjmtOSKi0LJ1XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWFhMDI0NzU4ZDhkMTA0ZTExNzljNTUwMzk4MTY2MzZh
ZmUyOTgwHhcNMjYwMzI2MDcwMTExWhcNMjYwMzI3MDcwMTExWjAzMTEwLwYDVQQD
EygxYjYxMDk2NDAwN2M4ODQ4NWUxYmQ5ZjQ1MjRhZDU3MGJhYjg4MWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSTFOjWTwwc6F+YR4ewykW/qkQfb
lSSmJpkVzEGIcvZzNnc1THQan+TnsWh/3ReGGXB9Y2koolUVn4gPgCPu5jsI3P6N
Mq9ggM1TrIQ7qeMjjHh4KUn2XXQ8cBFtsKgMC1wjNrDj6h7LWmC1gXFMTU2r4lvs
cgQndSOTrlBdgELbxQ8l2A9GmFL4ot2vvI0rUinR1P8kCgd218fcZr3g8F3niGWh
zY3mwUP+tBiXiE1SKCa9vctX7ZgwVGwA6mFGwrusaVeSlQUB9nsbk2crIKpxxQcd
jc1ngcjly2pqPMSTNYuUIsQM8sNrmufwI8sg3uAvaHz3z5BY1jhRHHZx5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBthCWQAfIhIXhvZ9FJK1XC6uIHMMB8GA1UdIwQY
MBaAFFIaoCR1jY0QThF5xVA5gWY2r+KYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWhxZ0pIV05qUkJPRVhuRlVEbUJaamF2NHBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8wM2Y5ZWUtNTNlMy00ZjY5LWI4YjAt
YzEzOGU1YzI3YzJiLzEvVWhxZ0pIV05qUkJPRVhuRlVEbUJaamF2NHBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8wM2Y5ZWUtNTNlMy00ZjY5LWI4YjAtYzEzOGU1YzI3YzJi
LzEvVWhxZ0pIV05qUkJPRVhuRlVEbUJaamF2NHBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcGWEJscX
KnIo2LhGZHdqoZdkyhJtE9vvMz4AagR47rOHcgzcLzIZNBoASG93pF5LkNFbs+7m
o3Q19fyeeyaLR8+bnQOO/MBIUf03tHasWbzGZ7e4uQ+8QirFLw+Aeo0tGOGW3Ivx
UvCyzxeA/x3OaqzlLoPnJMNxtUy761vIi2gF4H/z6H9hmbEVhvC7dkqtPE0BzK0Z
89ngLEGFiAWQnnSwRDIt89muqk4j5Fg6tGvRuwFWmcVkoLOyTDf2Fod6sYfXYBS/
MxZNN+0VDozEAzEmL/c/O5gLr0jiaB7lOxY74krkwGex4/9lFkJqsnDhwe+pCnPh
qtxnJGOIiCMWbw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:38:50 2026 by rpki-client