Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.mft
File:                     UVWFrKQjaXxiI24rX5G0Hkvnrlg.mft (raw, json)
Hash identifier:          kd4j8HLR0wljxQeXFP+9vHpoIA4ghK0pDD6p1Sl4w7M=
Subject key identifier:   97:71:CE:A8:42:6F:6F:A1:04:C4:FA:9D:A3:40:C3:01:D0:53:B4:46
Authority key identifier: 51:55:85:AC:A4:23:69:7C:62:23:6E:2B:5F:91:B4:1E:4B:E7:AE:58
Certificate issuer:       /CN=515585aca423697c62236e2b5f91b41e4be7ae58
Certificate serial:       019D29CEB2E5846E70E5F75B212CE49D89E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UVWFrKQjaXxiI24rX5G0Hkvnrlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.mft
Manifest number:          11BC
Signing time:             Thu 26 Mar 2026 11:01:45 +0000
Manifest this update:     Thu 26 Mar 2026 11:01:45 +0000
Manifest next update:     Fri 27 Mar 2026 11:01:45 +0000
Files and hashes:         1: 8W1T1Tey0DN17K0BTFxuuLhoWIM.roa (hash: sAFYlRtYOx7SVyMnvJVTJDjRkAVggKjajJqD2AFqcuA=)
                          2: UVWFrKQjaXxiI24rX5G0Hkvnrlg.crl (hash: bBHSHPgiu5vsS4AKI1WUHhDAzGb3NVcbbg7UY/h0aKg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UVWFrKQjaXxiI24rX5G0Hkvnrlg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:ce:b2:e5:84:6e:70:e5:f7:5b:21:2c:e4:9d:89:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=515585aca423697c62236e2b5f91b41e4be7ae58
        Validity
            Not Before: Mar 26 11:01:45 2026 GMT
            Not After : Mar 27 11:01:45 2026 GMT
        Subject: CN=9771cea8426f6fa104c4fa9da340c301d053b446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:04:44:12:15:63:50:96:db:6f:5b:25:28:46:
                    06:69:86:ff:85:ad:82:67:c3:a5:c2:6f:74:03:f7:
                    9a:96:56:0d:1a:1b:af:0e:58:88:d6:09:f2:c1:9e:
                    00:ea:6d:1d:59:98:cd:d8:31:12:1f:ec:6f:c5:b1:
                    77:ae:83:da:22:b2:7e:99:a4:2a:44:72:1d:d4:8a:
                    51:00:81:74:30:a3:c7:6a:da:a5:0d:c8:37:c9:a8:
                    9b:2d:50:74:48:a3:21:4f:75:c1:b2:c9:ac:95:92:
                    97:22:29:fb:2b:cd:a0:de:fb:93:21:cf:7e:6f:ff:
                    1e:38:dd:e8:35:1f:ae:b2:67:d0:08:fd:a5:7e:7c:
                    48:5d:9a:78:36:5e:dc:5f:27:d4:47:98:b1:1c:c8:
                    d9:aa:19:8e:ce:50:20:0c:b5:9e:5f:01:b0:2f:c8:
                    b5:a2:69:5a:5b:94:a6:3d:65:2b:14:da:12:a6:f3:
                    c3:85:9d:e7:ad:ff:9e:f6:c4:35:96:e7:5f:3d:e2:
                    dd:0e:85:13:1f:4a:24:75:a1:ac:7a:eb:d2:79:fa:
                    69:6c:a2:e2:c2:b1:33:39:cc:35:0e:8f:fb:a9:e6:
                    c1:a2:82:59:8c:87:14:25:f2:a9:59:77:9a:cf:4e:
                    13:7a:99:e9:1f:6a:72:9e:03:21:d8:c7:68:62:bf:
                    d6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:71:CE:A8:42:6F:6F:A1:04:C4:FA:9D:A3:40:C3:01:D0:53:B4:46
            X509v3 Authority Key Identifier:
                keyid:51:55:85:AC:A4:23:69:7C:62:23:6E:2B:5F:91:B4:1E:4B:E7:AE:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVWFrKQjaXxiI24rX5G0Hkvnrlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:90:a2:4c:d7:fd:dd:db:4a:00:a4:75:38:e0:55:78:89:67:
         f6:2b:28:6a:76:a8:62:46:5b:c5:97:fc:80:d1:9e:40:b1:2c:
         75:bc:7e:39:78:19:07:37:e3:90:9d:f1:6e:a0:96:a6:88:d3:
         d0:52:ad:b9:e5:f2:20:24:6e:c3:8a:63:5c:0a:f8:4e:e0:c0:
         81:6f:29:e7:89:6e:d0:7d:42:70:58:20:c6:49:20:87:ff:3d:
         29:a5:a8:f9:99:b7:28:52:d6:aa:57:92:8a:de:fd:69:5d:88:
         5c:2d:fc:aa:52:66:82:6b:ee:b5:d5:b1:b5:ee:be:07:5f:48:
         dd:a7:a6:2d:fd:95:af:5b:ca:93:dd:1d:87:5a:49:74:8a:85:
         cf:26:5a:0c:ec:e7:16:54:19:97:3b:89:44:3d:48:19:6d:60:
         21:b0:e6:61:92:4b:cd:4a:1d:5a:39:5f:c6:f7:05:ef:07:f7:
         e9:df:c5:8d:9d:c9:0a:43:cd:db:b6:19:af:cb:4a:3e:37:a5:
         34:48:2d:b7:d2:81:26:03:3c:65:c2:0c:80:83:78:df:bd:4e:
         54:a7:59:59:66:d1:d8:f2:c5:34:43:05:2c:03:de:2f:93:be:
         dc:34:b2:f3:7e:01:53:e0:36:ab:5c:16:ff:8b:fa:03:cc:1b:
         3b:44:6d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:25:24 2026 by rpki-client