Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
File:                     UfSwsEaesNBxmUzYI480vvAMb74.mft (raw, json)
Hash identifier:          ax/gfvfaE/3Stho+bVwNKYYu7ytgVuVTKIZRsQXjyRA=
Subject key identifier:   9C:48:E3:2B:45:F2:87:E4:25:83:A4:C9:5B:59:BC:7F:12:4C:20:D1
Authority key identifier: 51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE
Certificate issuer:       /CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe
Certificate serial:       019D284D5C31A1BD4B24D0853FEA0C6D6C94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
Manifest number:          0806
Signing time:             Thu 26 Mar 2026 04:00:51 +0000
Manifest this update:     Thu 26 Mar 2026 04:00:51 +0000
Manifest next update:     Fri 27 Mar 2026 04:00:51 +0000
Files and hashes:         1: 1Z9CK4rPbzAMA97TMp2bKUfntRw.roa (hash: LpR7I8xQuFg1r5Rgn2WWeCosLxa5m8Ntho2zm0Of2+c=)
                          2: BLM9s6E3uNgLbo5hUAJYzpxbAgk.roa (hash: 5Ht0651estCzoETFmaG2dTMoJGv16B5IZmwbZaHDuac=)
                          3: UfSwsEaesNBxmUzYI480vvAMb74.crl (hash: vxwWXsja81RnUN43bj2LofxhVVLxj6YM7/npkesIyS0=)
                          4: eUcCe3j-6gC5ZMWiIQvI8X1Qdj0.roa (hash: Bg7I63KBUVK3mes1NGcs2kjKVt9Lb2dV0zwtKFKQ+co=)
                          5: gGdMWhv2-eyLZOF6_Y3Kn2Ptw4E.roa (hash: ir9QpJ+cZprHCM1364jhyll9k4egUSonINRA6eynL5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:5c:31:a1:bd:4b:24:d0:85:3f:ea:0c:6d:6c:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe
        Validity
            Not Before: Mar 26 04:00:51 2026 GMT
            Not After : Mar 27 04:00:51 2026 GMT
        Subject: CN=9c48e32b45f287e42583a4c95b59bc7f124c20d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a7:41:5b:7a:2d:1e:3e:90:13:06:4a:d7:de:
                    a5:1f:da:13:31:af:88:63:49:16:13:a5:fb:a4:c4:
                    3d:90:39:36:34:96:22:9d:4d:90:cb:ca:34:fe:3d:
                    de:87:28:ff:db:a2:c1:56:42:bc:27:06:60:3d:f7:
                    32:d8:5a:de:69:de:d3:99:4c:bf:39:d1:43:23:c4:
                    a5:a2:25:9e:99:fb:7d:1b:0c:ef:ad:12:2a:cc:80:
                    4c:be:98:87:ec:98:80:0d:62:69:6a:18:02:d2:2c:
                    4f:07:3b:45:d8:7f:5e:b4:35:48:ae:56:3f:f8:ba:
                    9b:5f:c6:dd:c8:74:c5:ec:fe:95:93:d2:21:51:4e:
                    52:fb:21:75:6c:78:94:d2:7e:bb:82:ef:c0:bd:72:
                    20:3b:26:88:b6:25:99:af:ba:ea:4a:a1:ba:32:b5:
                    0a:ee:1f:65:cb:dd:c3:89:78:4d:f6:63:8a:60:d0:
                    6f:c1:91:4b:f3:76:d7:6f:19:58:7c:89:5a:38:b2:
                    f7:bc:b6:3c:15:4c:15:1b:33:f0:83:69:dc:d8:14:
                    69:8e:56:06:b8:df:f5:b6:66:17:c6:5a:62:62:f8:
                    b3:5b:d0:40:54:98:43:8a:de:90:99:83:cb:17:4e:
                    ab:c6:b5:67:7c:70:89:86:1d:a5:e9:73:7c:06:46:
                    98:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:48:E3:2B:45:F2:87:E4:25:83:A4:C9:5B:59:BC:7F:12:4C:20:D1
            X509v3 Authority Key Identifier:
                keyid:51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:1b:20:3b:a1:be:a1:3f:b1:0f:9f:3b:1b:c3:ba:30:68:55:
         22:f3:5e:e9:b2:5b:b7:73:bd:f0:ca:b8:ad:3f:2c:ff:47:3d:
         a4:0a:5f:7b:b2:a0:18:3d:c1:5d:80:d2:84:b4:8d:3d:1c:18:
         01:b1:44:7f:88:f1:8a:3e:07:92:ce:37:dd:54:cc:5b:93:25:
         43:33:87:64:ae:9d:fe:22:38:a8:95:3f:44:a1:76:e5:0a:fd:
         69:72:1b:dc:7e:25:3b:16:d1:24:4d:20:f7:d2:5f:7d:b3:77:
         f5:e7:fb:62:2c:23:94:b3:9e:72:73:cb:d7:8f:ba:cd:ab:38:
         09:1a:cb:a6:c9:5f:c4:06:47:cd:f4:d2:f5:ac:46:2e:b0:28:
         5c:cb:c8:e7:c3:97:d2:b9:c1:1b:44:36:52:e6:e5:c1:3d:a8:
         d1:70:11:f8:55:a3:32:a9:ee:c1:6b:f8:f0:0d:20:06:27:70:
         9d:e5:ee:d1:5d:7b:8b:51:d1:cc:6d:ed:66:33:17:88:7a:bd:
         a1:54:c7:8e:9c:d1:bc:de:a4:6d:95:94:f0:90:6b:16:71:be:
         b3:1b:b0:20:e4:b4:c9:8d:4e:6d:d1:c1:49:c7:69:c4:5a:50:
         7f:9e:aa:00:f2:34:cc:c8:30:2e:4a:ee:c4:7f:cb:dd:34:d6:
         d5:45:8c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:38:52 2026 by rpki-client