Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft
File:                     UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft (raw, json)
Hash identifier:          pHcr15Gd2g0ZYKtiv2KVZK6gMLS7MvE0rJ0M6Yn5lYQ=
Subject key identifier:   2D:F6:E9:B2:AD:71:92:48:A3:E5:9F:03:81:15:8E:49:53:AA:3F:EE
Authority key identifier: 52:A1:65:DC:3A:AF:BE:2C:62:E2:65:FF:10:43:27:A3:E6:75:F8:9F
Certificate issuer:       /CN=52a165dc3aafbe2c62e265ff104327a3e675f89f
Certificate serial:       019D27DFE98C9A82C4F5A3199352343AE664
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UqFl3Dqvvixi4mX_EEMno-Z1-J8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft
Manifest number:          11EB
Signing time:             Thu 26 Mar 2026 02:01:18 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:18 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:18 +0000
Files and hashes:         1: MA1FZ0Kd9wdwMtmBadU0hhtttm0.roa (hash: QAEnbojUEEoHhXNLCPe+Qwxb4hVhw+T32YK80jDjtFM=)
                          2: RnXeifK4Zy4z7Hr-0Qy9PPM8URc.roa (hash: HgjgyZAigQ/nEaAqI1161JCp8LT44pVwgm+Zp8Usqxs=)
                          3: StMbJtvRlQO14wUNmurXIGj_dCc.roa (hash: nRl9T6KCGuQWggl4v4cSteE2c3YQrGkaeT7wlEMK0FI=)
                          4: UqFl3Dqvvixi4mX_EEMno-Z1-J8.crl (hash: Cu6tuguzAra981LI+/PabTvGl1Stv6fe7zkFwpoZAWw=)
                          5: Z8pxDWhAuztTIIzKExdxnSnHjTs.roa (hash: 1hBbd5uxBcduETbV3q1xDGuzk2oS13nrjozvxJvpvno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UqFl3Dqvvixi4mX_EEMno-Z1-J8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 02:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:e9:8c:9a:82:c4:f5:a3:19:93:52:34:3a:e6:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52a165dc3aafbe2c62e265ff104327a3e675f89f
        Validity
            Not Before: Mar 26 02:01:18 2026 GMT
            Not After : Mar 27 02:01:18 2026 GMT
        Subject: CN=2df6e9b2ad719248a3e59f0381158e4953aa3fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7c:07:47:84:b3:c9:5c:60:17:49:5c:bb:2e:
                    8f:7d:d8:c6:0b:05:82:ff:82:0f:00:5b:30:41:af:
                    56:72:e0:a6:2d:41:87:c9:5e:54:ef:e9:28:2e:47:
                    75:52:9b:f3:57:bd:02:fd:e6:c9:f0:55:72:9d:4b:
                    ab:7d:5c:96:26:c2:07:ca:db:2d:74:ec:48:1b:d6:
                    d0:6f:22:a9:ff:f3:2e:14:64:bf:46:70:4b:2d:6a:
                    44:48:e8:7c:1e:d0:2e:28:f5:98:f3:73:6b:ec:61:
                    82:23:c6:d3:81:57:ca:c1:55:24:cc:c1:d0:6c:46:
                    fa:f5:2f:66:56:ed:aa:1e:99:71:a8:09:59:8d:fb:
                    bc:5e:58:bd:bb:52:a1:cf:75:3d:cb:be:eb:f1:9f:
                    18:58:60:07:04:f7:79:71:3b:fa:ee:e2:11:56:0a:
                    86:d1:97:26:d0:fb:16:b0:56:1f:0d:b5:e8:f3:f8:
                    0b:77:5c:38:04:43:68:a4:4c:1f:1a:3a:b7:c9:0e:
                    d8:4e:b3:cc:6e:4f:a8:60:58:b5:a4:33:84:1b:38:
                    0c:0b:1f:e4:1d:c3:0f:02:55:79:e7:20:29:65:d7:
                    30:78:06:20:16:90:f0:a8:e5:3c:d3:c9:9b:ea:e0:
                    a4:3a:1a:72:f9:2e:0c:c5:9f:1b:86:b7:94:5e:ff:
                    7d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F6:E9:B2:AD:71:92:48:A3:E5:9F:03:81:15:8E:49:53:AA:3F:EE
            X509v3 Authority Key Identifier:
                keyid:52:A1:65:DC:3A:AF:BE:2C:62:E2:65:FF:10:43:27:A3:E6:75:F8:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqFl3Dqvvixi4mX_EEMno-Z1-J8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:3f:a6:b0:38:fe:fc:a7:8d:a0:d6:2e:77:8d:40:2a:8f:af:
         d3:ed:5c:45:21:6d:c7:c5:e7:df:1c:f6:70:f9:e4:5f:c5:3e:
         84:99:58:d2:f0:4c:d0:e8:c4:6f:8a:68:2e:87:78:2f:21:d6:
         57:9d:80:c9:6e:cb:70:2f:25:c6:ec:d1:d8:5c:0d:fc:81:08:
         81:65:b2:a5:6f:e7:4b:89:d2:35:2b:1a:6f:98:99:63:2e:73:
         4e:11:b9:dd:44:fc:01:fe:47:1d:1d:4c:3c:29:74:f8:18:99:
         19:a9:db:9e:12:60:62:52:3c:8f:bb:d9:6c:9f:63:1c:20:fb:
         67:2c:07:2c:16:1c:60:ce:50:60:41:9e:c6:a6:d7:87:8d:f3:
         11:34:a3:bd:a9:92:2b:8b:18:49:8b:6a:ac:0c:ba:89:c7:c7:
         f4:ef:04:ee:41:bb:7a:32:e7:df:0c:59:ac:70:06:6e:58:dd:
         6d:21:e2:b7:27:cc:a2:d8:5f:b6:0c:86:eb:e8:2c:cb:58:ff:
         6d:48:16:26:63:a1:b3:bc:b1:5a:29:e2:49:7d:dc:66:48:cd:
         49:70:7c:0a:e6:41:68:60:13:b6:42:37:1a:1c:ee:e2:28:50:
         43:d4:41:a1:b0:02:8a:e9:51:e9:34:68:52:47:6f:35:13:21:
         e8:66:3e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:18:39 2026 by rpki-client