Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
File:                     UxR_m8-R0qz49DW6ULgFBUXNH48.mft (raw, json)
Hash identifier:          XyDZj+0C1Z93vyAgakd3PfFmxJfA5mIOpX+5rzLnAno=
Subject key identifier:   DD:BD:B6:1F:22:28:64:AB:E5:0B:4A:C7:BD:F4:65:BA:1D:7A:76:EE
Authority key identifier: 53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F
Certificate issuer:       /CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f
Certificate serial:       019D2771E423D00A6C4EEC328DF5B3FF0386
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
Manifest number:          0496
Signing time:             Thu 26 Mar 2026 00:01:08 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:08 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:08 +0000
Files and hashes:         1: 5Q7N-3fXWN3xn29Fyqm_IsIQro0.roa (hash: 5S1tBvFwi+gvAdb/PmkhPOQ/g472ZvTYAltGyhI7l3o=)
                          2: UxR_m8-R0qz49DW6ULgFBUXNH48.crl (hash: 4NvgVRT2FO7LhRhQJZ/yZAW2RdBB8HErhYq8uCX7cBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:71:e4:23:d0:0a:6c:4e:ec:32:8d:f5:b3:ff:03:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f
        Validity
            Not Before: Mar 26 00:01:08 2026 GMT
            Not After : Mar 27 00:01:08 2026 GMT
        Subject: CN=ddbdb61f222864abe50b4ac7bdf465ba1d7a76ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a1:1a:23:c4:45:e9:9d:78:9b:2b:cf:bf:0b:
                    bb:c4:54:0e:0b:f8:a2:79:1a:c8:91:53:54:97:61:
                    65:7b:4a:da:34:54:ce:1e:ea:e2:f8:14:0c:7b:58:
                    4c:35:bb:29:5e:2c:70:53:cf:1c:5d:28:4e:88:6c:
                    1e:75:ba:99:e1:58:4f:2e:21:08:3d:fd:62:08:4d:
                    89:95:67:06:71:b7:7a:f8:63:f5:78:8b:bd:6c:74:
                    42:b8:89:c1:d8:74:77:5f:75:83:b5:5e:0d:64:6c:
                    9a:cb:17:91:cb:40:7a:9f:3e:aa:a1:99:39:c4:59:
                    0a:87:9d:3f:64:52:71:b5:63:10:6a:85:a3:46:b8:
                    c2:e1:9f:b7:ae:e3:e4:50:e9:81:bf:a2:53:03:ea:
                    bd:da:46:2e:15:ad:08:bf:6d:2a:24:1b:71:f1:2d:
                    92:86:7b:b1:2d:0f:45:b1:06:8a:32:fc:37:e4:d4:
                    76:8b:ac:58:56:36:4f:9f:fd:33:e7:c8:7d:a8:41:
                    95:1d:c7:8d:17:55:47:48:64:94:84:3a:4a:68:08:
                    6f:a5:94:2b:ee:96:e6:9c:c7:62:f0:ab:3a:1e:03:
                    ec:0b:61:30:d7:b7:f3:e9:2c:b4:17:62:cd:cb:6a:
                    58:9c:c7:c3:9c:77:26:e1:85:60:c1:0d:6c:10:d5:
                    a4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:BD:B6:1F:22:28:64:AB:E5:0B:4A:C7:BD:F4:65:BA:1D:7A:76:EE
            X509v3 Authority Key Identifier:
                keyid:53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:21:65:d9:9a:71:b1:7d:ac:fe:5f:15:dd:d2:f5:64:f0:b1:
         ab:cc:78:2a:91:52:b0:fc:58:44:90:b3:e0:b5:8f:05:36:d9:
         18:4f:9a:3b:e4:3c:99:0b:ef:e8:17:a3:4e:37:cf:42:80:8a:
         36:04:16:8d:b3:f6:2f:38:76:cb:bd:ff:6e:80:9b:0a:06:a3:
         96:b9:cb:c6:28:b7:0c:63:a5:68:40:21:52:be:a3:c3:42:da:
         ee:fe:f1:1b:87:4a:c3:61:87:f9:60:ef:77:a2:6f:24:23:c5:
         b0:12:c4:bf:77:8d:88:e5:23:24:bc:d3:03:02:e4:49:32:37:
         b7:cd:ec:2b:88:1d:c7:2d:4b:3d:45:d5:2d:82:64:6a:de:86:
         f8:b3:44:7e:ff:32:bb:25:d7:34:a5:9a:cd:0c:af:70:f6:6f:
         55:5f:25:75:e7:59:24:b7:1d:8e:2c:60:d9:95:23:fc:3f:01:
         37:f6:21:6a:9b:48:ef:7f:16:68:ef:fd:e2:47:5c:4b:66:7e:
         2e:a7:28:23:76:fa:b6:5f:40:14:31:72:7a:eb:1d:3d:8f:d4:
         ad:a7:5c:19:1f:c7:e0:2d:6e:6f:6a:9c:0c:4d:5a:d2:4b:03:
         36:23:71:7f:81:96:1c:61:64:c0:4e:8e:7f:c1:51:13:79:1a:
         40:85:08:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nceQj0ApsTuwyjfWz/wOGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMTQ3ZjliY2Y5MWQyYWNmOGY0MzViYTUwYjgwNTA1NDVj
ZDFmOGYwHhcNMjYwMzI2MDAwMTA4WhcNMjYwMzI3MDAwMTA4WjAzMTEwLwYDVQQD
EyhkZGJkYjYxZjIyMjg2NGFiZTUwYjRhYzdiZGY0NjViYTFkN2E3NmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6EaI8RF6Z14myvPvwu7xFQOC/ii
eRrIkVNUl2Fle0raNFTOHuri+BQMe1hMNbspXixwU88cXShOiGwedbqZ4VhPLiEI
Pf1iCE2JlWcGcbd6+GP1eIu9bHRCuInB2HR3X3WDtV4NZGyayxeRy0B6nz6qoZk5
xFkKh50/ZFJxtWMQaoWjRrjC4Z+3ruPkUOmBv6JTA+q92kYuFa0Iv20qJBtx8S2S
hnuxLQ9FsQaKMvw35NR2i6xYVjZPn/0z58h9qEGVHceNF1VHSGSUhDpKaAhvpZQr
7pbmnMdi8Ks6HgPsC2Ew17fz6Sy0F2LNy2pYnMfDnHcm4YVgwQ1sENWkLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN29th8iKGSr5QtKx730ZbodenbuMB8GA1UdIwQY
MBaAFFMUf5vPkdKs+PQ1ulC4BQVFzR+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXhSX204LVIwcXo0OURXNlVMZ0ZCVVhOSDQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9iNDU3YmItYjVjNy00YjU0LTg5NmYt
ZWIwMDkyYTk0ZmNhLzEvVXhSX204LVIwcXo0OURXNlVMZ0ZCVVhOSDQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9iNDU3YmItYjVjNy00YjU0LTg5NmYtZWIwMDkyYTk0ZmNh
LzEvVXhSX204LVIwcXo0OURXNlVMZ0ZCVVhOSDQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJSFl2Zpx
sX2s/l8V3dL1ZPCxq8x4KpFSsPxYRJCz4LWPBTbZGE+aO+Q8mQvv6BejTjfPQoCK
NgQWjbP2Lzh2y73/boCbCgajlrnLxii3DGOlaEAhUr6jw0La7v7xG4dKw2GH+WDv
d6JvJCPFsBLEv3eNiOUjJLzTAwLkSTI3t83sK4gdxy1LPUXVLYJkat6G+LNEfv8y
uyXXNKWazQyvcPZvVV8ldedZJLcdjixg2ZUj/D8BN/YhaptI738WaO/94kdcS2Z+
LqcoI3b6tl9AFDFyeusdPY/UradcGR/H4C1ub2qcDE1a0ksDNiNxf4GWHGFkwE6O
f8FRE3kaQIUIfA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:05:12 2026 by rpki-client