Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft
File:                     Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft (raw, json)
Hash identifier:          xPxWlNbYOdqznRVcTrcRA8d4T5DM/jhPRpoLmF8kz4Y=
Subject key identifier:   C5:60:E4:CB:5B:8B:79:24:CA:67:DB:B3:F5:07:58:6C:84:6D:6F:F7
Authority key identifier: 51:EE:1A:67:72:5E:B4:A7:64:A5:87:BC:37:07:9D:EB:BE:81:FB:64
Certificate issuer:       /CN=51ee1a67725eb4a764a587bc37079debbe81fb64
Certificate serial:       019D25BAD2AFC84E9F607A64FE1F9B44B739
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft
Manifest number:          1788
Signing time:             Wed 25 Mar 2026 16:01:33 +0000
Manifest this update:     Wed 25 Mar 2026 16:01:33 +0000
Manifest next update:     Thu 26 Mar 2026 16:01:33 +0000
Files and hashes:         1: Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl (hash: n5OHmCytRHJji/EOJHib3rqF3kpkf/P3pBIamukANTk=)
                          2: fyLOdege7rISvKwS6nzptMD3TJw.roa (hash: XupWMossyhFCVMRDOrwvQeOId6GsqZ/55zk7+a6M/A4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:d2:af:c8:4e:9f:60:7a:64:fe:1f:9b:44:b7:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ee1a67725eb4a764a587bc37079debbe81fb64
        Validity
            Not Before: Mar 25 16:01:33 2026 GMT
            Not After : Mar 26 16:01:33 2026 GMT
        Subject: CN=c560e4cb5b8b7924ca67dbb3f507586c846d6ff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cc:27:a9:56:d7:cf:a2:56:a2:df:98:dc:54:
                    7c:35:d8:97:90:d7:31:0e:02:6b:cf:95:84:b3:7f:
                    f4:5f:6f:0c:c8:15:0d:9e:2d:ee:8b:0b:20:c3:43:
                    68:fb:f7:09:51:e3:44:64:27:20:aa:16:45:51:95:
                    4b:39:d3:5d:52:7a:d5:b0:02:98:24:22:4b:a6:44:
                    52:f8:c2:d9:2f:77:35:d8:27:82:48:3c:70:0d:78:
                    c2:26:b3:c6:b8:1f:c6:f9:c8:5e:f5:9a:18:50:8a:
                    d2:d8:c2:9b:93:00:bd:8d:fe:8c:81:49:8b:56:d2:
                    f8:30:d5:4b:4c:5a:b9:75:89:7b:97:64:86:0b:ac:
                    ff:ec:0d:21:ec:2c:80:db:07:21:a1:f0:0e:65:b4:
                    aa:fe:6f:9a:17:df:b9:34:73:03:9f:a8:79:59:5f:
                    be:5d:b7:03:bf:70:a8:82:cf:c2:2d:0c:87:6b:10:
                    5d:d5:c7:c9:79:97:d3:21:35:15:22:ca:2f:eb:82:
                    cc:ab:1a:63:81:d3:b0:0d:91:70:e7:ff:4a:b8:38:
                    c3:c4:7c:57:48:83:65:ff:3a:7d:7e:97:d1:9c:d2:
                    89:f7:f8:fd:5a:22:a7:e6:97:68:76:e2:58:b6:49:
                    66:7b:39:68:b8:2e:8c:1a:c7:66:d5:7c:21:03:a1:
                    3b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:60:E4:CB:5B:8B:79:24:CA:67:DB:B3:F5:07:58:6C:84:6D:6F:F7
            X509v3 Authority Key Identifier:
                keyid:51:EE:1A:67:72:5E:B4:A7:64:A5:87:BC:37:07:9D:EB:BE:81:FB:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:c3:1c:75:4c:da:23:27:b9:b2:1a:3d:92:b5:2c:34:f6:04:
         39:39:04:2a:19:15:46:71:55:a5:5b:10:2b:a5:58:44:6e:f8:
         d1:58:9d:0b:76:e4:b4:64:19:35:d5:53:e1:9d:7d:44:20:dc:
         34:9a:cd:0d:ab:92:1f:c1:48:31:1c:9b:ee:24:e6:ee:2e:5a:
         97:19:3b:00:57:d3:c5:30:f3:f2:10:40:0b:81:1c:5b:68:5b:
         52:62:79:0d:1f:c4:fa:30:e2:20:17:27:a7:5f:50:e6:a3:36:
         fb:b1:a6:cd:aa:c7:b1:27:63:80:f7:ba:55:87:ce:8b:e0:8d:
         37:42:79:65:88:c5:9f:4d:7a:94:f2:ce:17:c6:00:80:d5:2a:
         03:5d:fb:f0:23:1f:c8:61:20:25:ec:27:04:f0:df:f3:7e:6b:
         0d:50:28:58:34:73:da:5b:d8:5f:43:28:45:f6:84:a9:dc:4e:
         b9:2c:24:ff:0f:fc:29:1d:a0:c9:8b:bf:6a:4f:1c:0c:3f:6a:
         1d:4a:94:a9:53:8f:33:b0:e1:a4:f4:d5:40:90:2d:78:98:10:
         be:c3:9a:ee:a6:01:89:e3:d2:5a:f7:2d:2b:13:4f:3e:41:59:
         ec:da:ab:63:f1:e9:5a:b4:82:35:67:f7:b3:c8:02:17:95:1b:
         1b:43:a8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:51 2026 by rpki-client