Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft
File:                     UuAiJP-5cRcuSTXtfdll0RVQibY.mft (raw, json)
Hash identifier:          YA6Nx873m1btPqUm/ueha3hQXDeb3vI3ofRkympYUKs=
Subject key identifier:   E2:4B:BD:1E:6A:7C:CE:51:B3:F5:DC:44:51:2E:56:17:A7:AA:71:2E
Authority key identifier: 52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6
Certificate issuer:       /CN=52e02224ffb971172e4935ed7dd965d1155089b6
Certificate serial:       019D27DFD3356D7D0D4A92C448455D2E34B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft
Manifest number:          1213
Signing time:             Thu 26 Mar 2026 02:01:13 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:13 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:13 +0000
Files and hashes:         1: Ej04tqIea-55QGqR9P8U_IWSz5E.roa (hash: 56Ay1dz7+2/hrBe1gefM4Z9MpRY5OP2aiLGQZC5nqmk=)
                          2: UuAiJP-5cRcuSTXtfdll0RVQibY.crl (hash: iV1wxHfLIJoS/T/swNrG8bQAxaWl+vqAaHxYYwvvJ1w=)
                          3: bKZux_GRyhQisliOyg0o3pomUGE.roa (hash: UT5otdZIy6+fjq+k6mHMr69f+BiRVOr2Dbn8liI5eMU=)
                          4: eed8-v0DQQsIlGh_LdKlEMEvsTw.roa (hash: ryiQISgXOOgfkizItwqCf8st8jseYCZTQbYCWpyKpsM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:d3:35:6d:7d:0d:4a:92:c4:48:45:5d:2e:34:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e02224ffb971172e4935ed7dd965d1155089b6
        Validity
            Not Before: Mar 26 02:01:13 2026 GMT
            Not After : Mar 27 02:01:13 2026 GMT
        Subject: CN=e24bbd1e6a7cce51b3f5dc44512e5617a7aa712e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e4:fc:bd:c9:8f:61:6d:b2:d6:6c:e4:3b:78:
                    ca:e1:11:87:08:a8:57:74:82:1e:e6:d4:ff:dc:be:
                    44:f1:52:05:67:78:01:74:93:4d:65:49:8a:c1:70:
                    f0:bc:87:d2:9d:07:41:ab:9f:35:c7:84:4a:45:0d:
                    1d:1e:c9:96:e1:3b:c8:de:d3:b8:ac:e4:b3:b9:6b:
                    07:ee:81:08:34:da:0a:93:e9:9d:37:72:7b:47:e5:
                    fa:d4:a5:9a:49:02:c9:c8:3f:53:47:ae:90:a4:5a:
                    df:75:63:59:ae:ff:77:cf:86:91:1a:7d:39:08:dc:
                    a5:5c:5b:d7:55:43:29:7f:8f:46:39:7b:b8:4f:3d:
                    27:ad:2c:b0:02:af:42:e8:1d:6d:49:f4:8a:9b:8b:
                    05:17:b9:f5:54:7c:41:0f:60:5e:fe:ed:b0:7f:3b:
                    82:df:ba:5d:61:11:ac:43:08:47:ae:35:2c:f4:ae:
                    ce:9d:b2:c3:57:aa:9c:84:e6:0e:87:ef:9a:87:d6:
                    01:ae:b5:36:08:f9:5b:59:88:f3:bc:6a:88:26:00:
                    03:6d:b0:23:82:be:19:4a:97:c5:5c:68:10:4c:7f:
                    f9:cc:3e:ef:bf:87:9e:3e:25:b4:b8:72:62:3a:dd:
                    46:fa:bf:e2:ed:5f:d0:fe:2f:b3:3b:bc:48:b5:28:
                    3c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:4B:BD:1E:6A:7C:CE:51:B3:F5:DC:44:51:2E:56:17:A7:AA:71:2E
            X509v3 Authority Key Identifier:
                keyid:52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:80:2a:47:c8:68:01:01:34:eb:7f:c8:9d:d4:8b:79:24:1b:
         f6:07:54:17:28:2c:00:a1:b9:da:ae:8e:6f:80:53:6f:c0:d8:
         12:39:a2:cd:c3:d6:59:bd:22:5f:cb:f7:e0:61:74:5e:54:f5:
         9d:42:23:ae:14:34:31:d8:51:8e:a9:d5:27:cb:b5:49:f1:8d:
         8d:b7:f0:6c:db:f1:fd:f5:c9:be:e9:c3:c5:df:6e:f3:57:53:
         00:0a:02:79:bf:aa:18:61:72:49:af:f0:47:52:29:b7:e5:5d:
         6b:8d:48:2e:d3:42:40:a0:71:9c:23:3a:96:f8:9c:aa:e1:e4:
         e9:76:1e:66:d4:df:94:80:d9:b8:25:b9:c9:9e:90:e4:84:41:
         2c:62:2e:d1:7b:4b:87:9a:cb:f4:44:a4:8c:cd:15:e5:2f:da:
         59:08:2a:90:48:01:f9:05:40:7f:fc:82:f1:db:ce:82:36:ab:
         3c:b1:6a:3a:9e:98:bc:62:cd:11:69:07:60:93:5b:2a:07:73:
         66:59:f3:62:1e:5d:a2:d1:cb:2b:18:e6:a0:e2:b8:1e:05:b0:
         d5:fe:0b:f3:9e:d3:03:00:0d:e9:ed:9d:70:ec:84:69:5f:92:
         9c:10:62:5e:41:c2:db:42:b5:09:bf:a3:5e:01:8a:e1:4a:4f:
         73:a9:08:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:49 2026 by rpki-client