Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
File:                     UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft (raw, json)
Hash identifier:          mVwvKKdqImQ6njp6o83NQkrRyGHW17pTzmNSEaRuSqY=
Subject key identifier:   14:E9:D6:A7:81:65:DA:BA:B5:6F:28:95:C4:48:C5:26:86:4A:EB:16
Authority key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
Certificate issuer:       /CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Certificate serial:       019D27DF9B4961C603DEC95179E04D463F06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
Manifest number:          1894
Signing time:             Thu 26 Mar 2026 02:00:58 +0000
Manifest this update:     Thu 26 Mar 2026 02:00:58 +0000
Manifest next update:     Fri 27 Mar 2026 02:00:58 +0000
Files and hashes:         1: 0d6SiGZ_3HskVJZrwW4LAUnPhVk.roa (hash: sH5j+6BmvxKro4kCtZa6p73msltGzoMgNQq57Mh0jXE=)
                          2: GBJMnjMbFvL5E-lL9i3lBFi6nWY.roa (hash: SL+iSObRv/yIgCUc1iePoCbQgwvJ0km8l952y/nYPkY=)
                          3: IY7fhcpZn8V1nFJzcjkAB2G_wy8.roa (hash: kypNUV6hOKnyhwHaYDOZf/jJOmWZK2acEUl1kQxKdoM=)
                          4: UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl (hash: 20xm7V0KZ0dw/4GMTyWkGAZ5+eAIPJixHXnOKBfF598=)
                          5: ZDSwaO2zu2qpiNoQdfHO9f__qXE.roa (hash: /yuwN8mjkUUOdBbxmmKWCbuEc9CKVHYeB+reIdnpnsM=)
                          6: qfnbY9JngbTP144k13tCg-IRl3w.roa (hash: 9MKZ2wZQrvJYgyQxGjaYnWmRu2eM+70F1EApasiltnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:9b:49:61:c6:03:de:c9:51:79:e0:4d:46:3f:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
        Validity
            Not Before: Mar 26 02:00:58 2026 GMT
            Not After : Mar 27 02:00:58 2026 GMT
        Subject: CN=14e9d6a78165dabab56f2895c448c526864aeb16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:53:8f:c6:fa:ec:6b:36:e6:b0:73:d4:07:75:
                    0d:84:65:7e:ed:85:3b:40:2c:3b:51:bd:28:87:46:
                    3c:ae:1f:3b:1e:53:af:02:62:9b:41:62:56:4c:58:
                    c9:0c:a8:cb:bf:66:d5:59:1f:9b:a0:eb:8b:f4:91:
                    e3:d2:65:32:4b:5e:70:fc:71:4f:ce:1c:27:2a:f9:
                    a1:ea:84:01:07:4a:82:7d:d7:56:0c:97:d2:74:da:
                    d8:82:6f:73:67:33:eb:6a:91:61:2b:80:c6:87:ce:
                    8a:26:5b:36:12:89:df:6d:f0:a8:ac:4a:e7:db:a0:
                    da:31:55:61:1d:6b:a0:f3:f5:1e:f1:28:82:11:d0:
                    f5:0d:67:5d:e3:2e:2a:67:d8:f6:77:44:97:80:79:
                    43:c2:5c:45:19:c2:32:1d:ae:44:2e:2a:54:68:57:
                    84:2a:59:b9:07:a4:19:15:99:f7:92:5a:39:40:c0:
                    9c:a8:3f:fe:49:c2:4c:03:71:4b:d2:b5:56:dd:30:
                    9e:d3:da:c5:f5:1c:0a:fc:b2:5b:34:c9:f6:1d:bc:
                    0a:4b:43:1b:07:27:13:2c:53:a9:04:e8:43:f4:34:
                    f1:9e:72:5f:b0:69:4d:58:cf:dd:39:f2:30:fa:2d:
                    da:2a:4e:c4:87:25:cd:78:68:83:e4:d4:b9:0d:d2:
                    14:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E9:D6:A7:81:65:DA:BA:B5:6F:28:95:C4:48:C5:26:86:4A:EB:16
            X509v3 Authority Key Identifier:
                keyid:52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:f4:f7:fe:82:74:c6:79:a1:8f:6f:82:6f:06:73:68:9d:7f:
         b0:9c:f9:3d:96:a8:fa:4e:3a:23:bb:df:6a:93:bb:c5:4b:bf:
         fa:83:59:1b:f4:69:1d:39:06:10:15:e6:6b:13:90:df:4e:a7:
         7d:4e:10:ca:cc:8a:a4:77:3c:a8:ce:49:a5:53:68:b4:fc:02:
         ee:96:7b:0e:4a:e8:70:03:d2:ed:c2:62:9e:5f:81:e1:82:29:
         a1:f4:26:79:35:5b:f4:6b:bb:c5:89:77:cb:97:b1:d1:66:98:
         71:57:bb:2f:8d:4f:9d:24:9b:0e:de:97:77:52:8a:87:b8:27:
         92:4b:b7:69:f9:d7:3b:56:2f:23:a6:83:f3:90:04:17:d0:b1:
         69:95:fb:cc:16:62:e8:be:d9:e5:78:28:d3:cf:15:61:62:80:
         c3:13:46:3f:36:6c:5c:14:44:7d:bc:67:9e:a9:b8:5a:ae:5b:
         4a:70:d5:fd:91:4a:02:c9:16:43:77:77:fb:6a:d1:35:28:9c:
         65:90:0e:50:99:bc:98:7c:0f:cb:b7:3b:d5:dd:f7:d9:52:7d:
         e5:0d:54:42:86:5f:91:35:aa:14:ed:2f:a5:ed:49:3e:33:42:
         96:1e:12:55:67:7c:1e:c6:99:83:ec:b6:da:87:ff:b0:de:85:
         0b:0e:d9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:56:07 2026 by rpki-client