Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.mft
File:                     UDLyl3iaGUqLUHgF811C7njA1MM.mft (raw, json)
Hash identifier:          rgnCxeVFVVwWsOKZe6gur6A7ECKfuLTfL4sLQ++ZK3I=
Subject key identifier:   61:85:09:BE:82:AB:AD:52:31:83:81:93:F4:46:44:A8:DC:26:46:87
Authority key identifier: 50:32:F2:97:78:9A:19:4A:8B:50:78:05:F3:5D:42:EE:78:C0:D4:C3
Certificate issuer:       /CN=5032f297789a194a8b507805f35d42ee78c0d4c3
Certificate serial:       019D2816F146B674F49F4D1B78962E451079
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UDLyl3iaGUqLUHgF811C7njA1MM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.mft
Manifest number:          1818
Signing time:             Thu 26 Mar 2026 03:01:25 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:25 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:25 +0000
Files and hashes:         1: 0bOx0YvZLkBR8StVldUHmaMUt5w.roa (hash: pVplZjzT+88YgEabA8GOmB3FR2v0rED8d9SRhfrU2/E=)
                          2: UDLyl3iaGUqLUHgF811C7njA1MM.crl (hash: AzmISPUL9iFPBzDktMrY8z7P26uhnaA6ckj6XfKNlWo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UDLyl3iaGUqLUHgF811C7njA1MM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:f1:46:b6:74:f4:9f:4d:1b:78:96:2e:45:10:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5032f297789a194a8b507805f35d42ee78c0d4c3
        Validity
            Not Before: Mar 26 03:01:25 2026 GMT
            Not After : Mar 27 03:01:25 2026 GMT
        Subject: CN=618509be82abad5231838193f44644a8dc264687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:86:45:6c:5c:3c:9e:25:a0:66:bd:1c:96:81:
                    c8:7e:cf:ff:ee:3c:c5:67:56:fa:48:9e:c1:23:46:
                    1a:87:ef:7c:07:10:70:63:0d:df:18:b8:f9:68:c2:
                    6d:8f:66:29:ef:9e:61:0e:98:40:12:a3:f4:95:b3:
                    29:db:1b:12:7f:1e:70:f1:0d:5f:52:1e:0a:f7:cc:
                    d9:70:dc:06:98:17:e2:4f:58:52:2a:8a:cb:50:1d:
                    b2:41:e6:cd:e1:11:b8:98:97:95:b6:69:27:1f:9d:
                    7c:58:e8:4d:54:17:13:5b:e1:8d:d1:5d:e3:d0:79:
                    f1:b9:99:c7:a8:ad:1f:eb:5c:36:1a:b9:71:fc:80:
                    8a:8d:96:89:7f:af:88:e4:8c:5f:fd:10:c9:d1:bc:
                    93:75:d1:cb:6b:ff:24:6f:bb:f1:50:70:3a:2e:8a:
                    15:79:7e:b1:88:ff:5b:93:23:71:64:66:0f:36:d2:
                    eb:c7:31:cb:db:28:c5:ca:c6:dc:ed:45:92:6b:5f:
                    33:b5:95:3b:00:f4:8a:a6:94:45:e5:03:cf:23:97:
                    34:f5:e1:b8:22:a6:60:fe:5a:4d:fc:c1:48:0e:19:
                    01:6d:7f:6f:36:fd:c7:73:78:07:f7:c2:78:34:e1:
                    d6:85:dd:ed:ce:07:7e:26:81:08:6e:7e:ec:c9:86:
                    4e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:85:09:BE:82:AB:AD:52:31:83:81:93:F4:46:44:A8:DC:26:46:87
            X509v3 Authority Key Identifier:
                keyid:50:32:F2:97:78:9A:19:4A:8B:50:78:05:F3:5D:42:EE:78:C0:D4:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDLyl3iaGUqLUHgF811C7njA1MM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:78:04:3f:0c:41:fe:8f:cd:60:70:7d:4a:dc:bc:a2:3b:4c:
         56:c9:bc:d5:99:3e:c8:1a:a8:2c:f5:90:55:27:67:60:7b:08:
         8e:a9:28:1c:55:7f:38:51:ae:d2:54:d2:e1:7e:db:bc:e6:d4:
         c7:a3:55:c8:f5:de:d3:40:07:69:6e:ed:e2:8b:3b:94:cc:75:
         b7:42:ec:5e:7c:e4:99:43:7d:8c:e6:db:03:1d:07:94:74:3e:
         a0:28:a7:c7:41:ed:8f:09:8d:80:3e:9c:1b:ea:9d:47:76:db:
         df:ba:53:01:c7:18:ad:4e:ca:14:ba:3f:06:c5:be:25:4f:5b:
         f3:47:b0:05:75:c2:9c:96:77:d0:cf:46:46:c7:a8:e9:4b:23:
         79:2c:ee:1a:c1:06:1c:e2:5a:2c:93:ff:fb:26:ac:30:74:0a:
         42:78:10:06:be:3c:d9:26:c2:85:d7:c5:6a:ac:b1:03:74:65:
         28:8e:56:24:28:dd:dc:7b:fe:59:49:73:d6:fd:b2:20:9b:90:
         17:ad:5c:14:04:73:4e:60:5b:2a:7a:ca:26:fb:6c:22:05:85:
         38:41:c1:68:35:41:a8:61:08:ec:cd:f5:82:53:e9:e5:fd:50:
         e2:95:8e:df:fb:01:f4:14:c1:1d:c3:33:ea:49:66:cb:e9:e1:
         a3:8a:dc:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFvFGtnT0n00beJYuRRB5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMzJmMjk3Nzg5YTE5NGE4YjUwNzgwNWYzNWQ0MmVlNzhj
MGQ0YzMwHhcNMjYwMzI2MDMwMTI1WhcNMjYwMzI3MDMwMTI1WjAzMTEwLwYDVQQD
Eyg2MTg1MDliZTgyYWJhZDUyMzE4MzgxOTNmNDQ2NDRhOGRjMjY0Njg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4ZFbFw8niWgZr0cloHIfs//7jzF
Z1b6SJ7BI0Yah+98BxBwYw3fGLj5aMJtj2Yp755hDphAEqP0lbMp2xsSfx5w8Q1f
Uh4K98zZcNwGmBfiT1hSKorLUB2yQebN4RG4mJeVtmknH518WOhNVBcTW+GN0V3j
0HnxuZnHqK0f61w2Grlx/ICKjZaJf6+I5Ixf/RDJ0byTddHLa/8kb7vxUHA6LooV
eX6xiP9bkyNxZGYPNtLrxzHL2yjFysbc7UWSa18ztZU7APSKppRF5QPPI5c09eG4
IqZg/lpN/MFIDhkBbX9vNv3Hc3gH98J4NOHWhd3tzgd+JoEIbn7syYZOjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGFCb6Cq61SMYOBk/RGRKjcJkaHMB8GA1UdIwQY
MBaAFFAy8pd4mhlKi1B4BfNdQu54wNTDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVURMeWwzaWFHVXFMVUhnRjgxMUM3bmpBMU1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lOGZjOWEtM2I5Mi00Nzk4LThjZmQt
YzZiZGIxODMwNjk0LzEvVURMeWwzaWFHVXFMVUhnRjgxMUM3bmpBMU1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9lOGZjOWEtM2I5Mi00Nzk4LThjZmQtYzZiZGIxODMwNjk0
LzEvVURMeWwzaWFHVXFMVUhnRjgxMUM3bmpBMU1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg3gEPwxB
/o/NYHB9Sty8ojtMVsm81Zk+yBqoLPWQVSdnYHsIjqkoHFV/OFGu0lTS4X7bvObU
x6NVyPXe00AHaW7t4os7lMx1t0LsXnzkmUN9jObbAx0HlHQ+oCinx0HtjwmNgD6c
G+qdR3bb37pTAccYrU7KFLo/BsW+JU9b80ewBXXCnJZ30M9GRseo6UsjeSzuGsEG
HOJaLJP/+yasMHQKQngQBr482SbChdfFaqyxA3RlKI5WJCjd3Hv+WUlz1v2yIJuQ
F61cFARzTmBbKnrKJvtsIgWFOEHBaDVBqGEI7M31glPp5f1Q4pWO3/sB9BTBHcMz
6klmy+nho4rcfQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:34 2026 by rpki-client