Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
File:                     uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft (raw, json)
Hash identifier:          yvfDQJxZWZbYh55ehuAt6NCKiL+h5SVdSZD3Su5xLuI=
Subject key identifier:   FE:03:E9:DB:D1:D3:A6:ED:0A:31:70:DB:4E:DD:51:46:24:26:62:00
Authority key identifier: BA:E7:FA:77:F7:24:BB:46:73:25:AD:59:D7:DB:FC:63:39:9C:6E:79
Certificate issuer:       /CN=bae7fa77f724bb467325ad59d7dbfc63399c6e79
Certificate serial:       019D329B1D7821865B8612724FEDE4133A19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
Manifest number:          1837
Signing time:             Sat 28 Mar 2026 04:01:59 +0000
Manifest this update:     Sat 28 Mar 2026 04:01:59 +0000
Manifest next update:     Sun 29 Mar 2026 04:01:59 +0000
Files and hashes:         1: Lp4ADAtbUAnUUwmRXq0CRRE_xe4.roa (hash: /5OxQHC9qaJZIRED9fTxGtHMX/MOAtFVzPxTg7u1+8I=)
                          2: uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl (hash: zl8ZFhmVaIk1oEsMIxmKyOK7FSgOgbWtMB6tigWgu5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:32:9b:1d:78:21:86:5b:86:12:72:4f:ed:e4:13:3a:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bae7fa77f724bb467325ad59d7dbfc63399c6e79
        Validity
            Not Before: Mar 28 04:01:59 2026 GMT
            Not After : Mar 29 04:01:59 2026 GMT
        Subject: CN=fe03e9dbd1d3a6ed0a3170db4edd514624266200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e9:c2:ea:3f:e1:ee:c6:a2:48:03:22:e8:b1:
                    08:04:c0:0d:0b:18:1b:05:9f:f2:68:0f:6f:4e:ee:
                    71:53:07:40:b7:f5:df:3d:7b:34:44:21:b5:77:53:
                    2a:a6:06:19:d0:60:e2:63:e7:52:6f:07:89:75:ec:
                    89:26:6b:e8:35:39:91:e8:73:30:bc:3a:8a:e0:cc:
                    27:cd:06:c9:8a:89:d5:8d:e1:2a:b7:e5:2e:80:09:
                    c4:6d:77:38:b5:82:fb:c8:d3:ed:26:b1:f3:13:e8:
                    1d:b9:b8:0a:5b:5f:a1:c0:4b:e1:35:44:ea:7d:b4:
                    6c:35:48:08:6e:4b:45:67:65:40:95:90:d9:6c:72:
                    dc:38:81:0a:6d:2b:1c:e9:30:c1:ba:81:90:89:f6:
                    28:a2:15:db:04:56:58:e9:de:3a:c6:b9:27:87:17:
                    8b:56:7c:b7:5e:38:36:fc:6a:20:78:ed:9d:4e:41:
                    70:65:4e:af:56:82:7b:19:95:ff:72:a1:f5:ee:a6:
                    3a:f7:3e:67:54:99:95:ed:4f:2b:7c:b4:72:18:2c:
                    27:6b:f3:4e:74:20:1c:5e:ee:6f:ce:fa:9e:3e:8f:
                    93:b0:29:96:2d:fc:a3:7b:39:50:6e:5a:03:50:52:
                    53:7e:01:a8:3d:ce:5f:97:22:dc:78:9d:8f:e3:55:
                    f3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:03:E9:DB:D1:D3:A6:ED:0A:31:70:DB:4E:DD:51:46:24:26:62:00
            X509v3 Authority Key Identifier:
                keyid:BA:E7:FA:77:F7:24:BB:46:73:25:AD:59:D7:DB:FC:63:39:9C:6E:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:89:09:68:65:20:38:61:16:99:3d:a4:c8:df:b1:fc:68:2e:
         d5:e8:59:61:ef:1c:d1:43:34:eb:78:b8:5b:22:27:55:b2:a4:
         aa:cd:d7:b1:a5:eb:0f:eb:79:d1:18:17:25:c1:99:34:28:31:
         58:11:96:84:63:ac:1b:0a:ef:f8:6e:26:7b:bf:4b:c2:2f:6a:
         24:97:0c:f3:da:44:27:77:64:01:cc:fe:7c:54:0b:aa:db:b4:
         52:9d:84:f9:a0:88:97:c0:0b:fa:64:0e:6d:66:40:8e:9f:b6:
         cd:0c:78:77:a6:1d:5a:e3:d2:80:05:a9:b4:b0:43:fd:0a:c4:
         d5:9f:7f:30:4b:4b:da:a2:69:e1:0e:f7:32:a7:4a:df:7e:80:
         3a:42:2c:28:cb:5f:81:2f:3f:54:5d:ea:c2:7d:14:08:aa:fb:
         bc:da:33:8b:d6:1c:15:3e:5f:10:5b:4f:97:c5:b1:ef:54:02:
         53:02:93:b6:9b:be:3c:36:5f:b0:24:55:1f:c0:eb:18:c9:74:
         84:c9:2b:e4:62:5b:a1:ec:3a:68:cd:96:d4:3b:8f:bd:37:63:
         be:22:d1:22:aa:12:6f:bb:1f:91:1b:35:28:a0:36:e4:67:a4:
         af:88:e1:c3:77:fd:2f:b4:16:b5:0d:b3:be:dd:7c:bf:80:0f:
         c7:36:be:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:17:57 2026 by rpki-client