Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
File:                     ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft (raw, json)
Hash identifier:          +mqlOzBeTDDReXIdq6WqrVAxIGwO+3RO/gHxjMc+954=
Subject key identifier:   E4:63:26:48:26:D2:7D:1F:83:BA:1D:D9:5F:CE:F2:73:D8:A8:B2:86
Authority key identifier: B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
Certificate issuer:       /CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Certificate serial:       019D2BF2D5078C9A019300EC9698C1757CA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
Manifest number:          1899
Signing time:             Thu 26 Mar 2026 21:00:27 +0000
Manifest this update:     Thu 26 Mar 2026 21:00:27 +0000
Manifest next update:     Fri 27 Mar 2026 21:00:27 +0000
Files and hashes:         1: JxSMfmZSqI3JsHq7y-Q3lsW7V_k.roa (hash: LqYFlCxZmCemaTuAC/WiD/gTuuU0Q9CM+YPDQviSwnI=)
                          2: ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl (hash: EWjPEmv/LJOoBbLJAROsqR5j80PpSXgBaLec4p43yoI=)
                          3: zEeP9jNbHcrziM4NoTdt_uL6054.roa (hash: ub4Z+QcgKEhR/M0Z+CEOAnRu0nqsZI8hpuezxPH15Vo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:f2:d5:07:8c:9a:01:93:00:ec:96:98:c1:75:7c:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
        Validity
            Not Before: Mar 26 21:00:27 2026 GMT
            Not After : Mar 27 21:00:27 2026 GMT
        Subject: CN=e463264826d27d1f83ba1dd95fcef273d8a8b286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:64:69:85:af:a5:63:0f:09:db:91:23:43:da:
                    2a:c6:1a:ee:19:1a:ab:6a:52:d5:9a:5f:c0:41:f1:
                    e3:63:4f:17:a4:de:bb:09:10:96:06:58:a9:67:15:
                    36:14:6c:97:0f:07:d6:fb:58:a5:e3:a1:24:0a:1a:
                    39:cc:e4:36:dd:eb:2d:ef:ac:8f:63:99:d8:bf:fc:
                    00:e1:87:1a:37:1b:76:53:97:c1:ca:ff:56:5b:5d:
                    8d:e9:a8:63:4e:fe:86:31:4f:6b:f2:a4:3d:f0:4d:
                    53:cb:5f:be:90:d4:be:d5:91:c7:29:3f:0e:d3:a3:
                    d8:a0:b2:a3:1c:f7:46:9f:9b:e6:ad:b1:0f:19:98:
                    92:26:e8:c7:ea:49:b3:3e:90:50:82:cd:30:1b:46:
                    67:2b:cb:2b:de:a5:8a:6a:60:b5:f2:25:da:db:5e:
                    7a:86:ec:ef:3f:33:3e:cc:26:cd:13:a7:07:1a:c8:
                    57:ee:6a:e8:de:70:d4:f6:dc:3d:95:26:a6:74:92:
                    8f:2a:9a:1c:d2:51:b9:22:c4:70:ff:9e:8a:c7:a9:
                    d1:a2:7e:b9:4b:ad:65:87:c3:b7:e8:68:9b:b3:62:
                    8f:9e:68:eb:1b:5c:80:29:99:a3:41:f5:64:e1:75:
                    9a:f3:0b:04:fa:76:3d:66:39:b6:db:1f:f0:c9:4f:
                    23:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:63:26:48:26:D2:7D:1F:83:BA:1D:D9:5F:CE:F2:73:D8:A8:B2:86
            X509v3 Authority Key Identifier:
                keyid:B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:05:74:a6:67:08:23:db:a9:2c:91:d6:5d:2a:de:9a:23:7a:
         07:24:a8:8f:c0:08:16:60:fc:b4:2f:41:7c:21:58:0c:74:b4:
         20:07:21:33:d5:a1:fb:79:7f:3e:f2:62:54:98:07:af:84:27:
         f2:ab:1e:e1:6d:ea:d6:d4:bc:30:ce:94:21:e5:6c:a7:42:58:
         1a:6a:33:bb:13:9a:a4:ac:4b:ef:05:a8:e5:c3:d4:bd:53:2c:
         46:10:db:81:78:7c:fc:65:68:57:4a:62:18:33:00:8f:a0:9a:
         9b:9c:0a:57:bc:c5:30:ff:a5:bc:fe:28:11:60:0e:51:fc:4d:
         f6:3c:c3:68:48:4d:6c:68:2f:3c:5c:a9:da:cf:89:c2:cf:77:
         29:4a:d9:93:35:34:dd:0b:97:79:14:3d:a5:4e:81:c6:5c:30:
         67:c0:bc:a6:a8:6f:2c:5a:db:c4:33:2b:08:51:a2:df:37:1f:
         a9:69:d1:e2:06:d4:8b:4d:bf:fc:25:cc:ad:dd:a7:10:d6:11:
         55:27:c5:78:93:60:30:65:2e:18:8d:5e:87:61:1e:58:50:03:
         c0:35:46:79:31:e9:02:eb:70:9c:9a:ee:90:ba:45:b3:d5:d0:
         a0:b4:b5:44:ed:9d:0d:5c:8a:2b:41:89:68:7a:3e:53:2d:3e:
         00:96:45:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0r8tUHjJoBkwDslpjBdXyhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZTY3ZmNiMGJkYzYwMDFkOGNmNzA3M2M2NDllYjk4MTlm
YzVlYjgwHhcNMjYwMzI2MjEwMDI3WhcNMjYwMzI3MjEwMDI3WjAzMTEwLwYDVQQD
EyhlNDYzMjY0ODI2ZDI3ZDFmODNiYTFkZDk1ZmNlZjI3M2Q4YThiMjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGRpha+lYw8J25EjQ9oqxhruGRqr
alLVml/AQfHjY08XpN67CRCWBlipZxU2FGyXDwfW+1il46EkCho5zOQ23est76yP
Y5nYv/wA4YcaNxt2U5fByv9WW12N6ahjTv6GMU9r8qQ98E1Ty1++kNS+1ZHHKT8O
06PYoLKjHPdGn5vmrbEPGZiSJujH6kmzPpBQgs0wG0ZnK8sr3qWKamC18iXa2156
huzvPzM+zCbNE6cHGshX7mro3nDU9tw9lSamdJKPKpoc0lG5IsRw/56Kx6nRon65
S61lh8O36Gibs2KPnmjrG1yAKZmjQfVk4XWa8wsE+nY9Zjm22x/wyU8jcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORjJkgm0n0fg7od2V/O8nPYqLKGMB8GA1UdIwQY
MBaAFLnmf8sL3GAB2M9wc8ZJ65gZ/F64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWVaX3l3dmNZQUhZejNCenhrbnJtQm44WHJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8wZGJlNTYtM2RhYS00YTY0LTkyNWEt
ZmE3MWFlMDVkYzNmLzEvdWVaX3l3dmNZQUhZejNCenhrbnJtQm44WHJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8wZGJlNTYtM2RhYS00YTY0LTkyNWEtZmE3MWFlMDVkYzNm
LzEvdWVaX3l3dmNZQUhZejNCenhrbnJtQm44WHJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuQV0pmcI
I9upLJHWXSremiN6BySoj8AIFmD8tC9BfCFYDHS0IAchM9Wh+3l/PvJiVJgHr4Qn
8qse4W3q1tS8MM6UIeVsp0JYGmozuxOapKxL7wWo5cPUvVMsRhDbgXh8/GVoV0pi
GDMAj6Cam5wKV7zFMP+lvP4oEWAOUfxN9jzDaEhNbGgvPFyp2s+Jws93KUrZkzU0
3QuXeRQ9pU6BxlwwZ8C8pqhvLFrbxDMrCFGi3zcfqWnR4gbUi02//CXMrd2nENYR
VSfFeJNgMGUuGI1eh2EeWFADwDVGeTHpAutwnJrukLpFs9XQoLS1RO2dDVyKK0GJ
aHo+Uy0+AJZFLA==
-----END CERTIFICATE-----
Generated at Fri Mar 27 03:38:20 2026 by rpki-client