Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
File:                     ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft (raw, json)
Hash identifier:          Za3sfXJka5wjGN6c0c2d2bWsIOf4/YLuqJNYLm85Fkk=
Subject key identifier:   83:01:4A:21:EF:28:E7:F7:44:23:B3:A5:EF:05:33:08:0C:32:86:F7
Authority key identifier: B9:EA:A9:9B:1B:55:B4:E5:0B:5D:9E:CC:DE:EC:DF:38:92:47:35:39
Certificate issuer:       /CN=b9eaa99b1b55b4e50b5d9eccdeecdf3892473539
Certificate serial:       019D270431695547B80F13A1C8B955C35D16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
Manifest number:          1889
Signing time:             Wed 25 Mar 2026 22:01:19 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:19 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:19 +0000
Files and hashes:         1: MyMck_OWz-rJpmQgWGb6jlbkutw.roa (hash: 5JHTiUXVtXyR9bkNJgqG0siIzJTx3VY+ufE9EFCZFgY=)
                          2: ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl (hash: YDShVHWDhtA+QmEPWmeFDk44wWWxvWK+D5khQ+i0qiQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:31:69:55:47:b8:0f:13:a1:c8:b9:55:c3:5d:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9eaa99b1b55b4e50b5d9eccdeecdf3892473539
        Validity
            Not Before: Mar 25 22:01:19 2026 GMT
            Not After : Mar 26 22:01:19 2026 GMT
        Subject: CN=83014a21ef28e7f74423b3a5ef0533080c3286f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:74:91:d5:2d:95:46:15:ce:ff:a5:cc:1e:f3:
                    b6:e9:a6:25:36:bb:95:4b:db:30:54:53:db:a1:fd:
                    af:ba:87:11:21:dd:31:e6:8a:ea:6f:bb:a5:3e:0f:
                    08:fe:e3:10:86:2b:b2:06:ac:5e:cc:46:c4:fb:6a:
                    8a:a2:dc:e9:74:77:b8:b0:00:85:5a:dc:35:6f:66:
                    ab:6d:98:35:e5:03:62:e2:f1:1c:fa:21:e3:da:46:
                    53:a8:df:09:67:5c:ab:f6:bc:67:32:91:1e:11:e9:
                    ff:a0:14:b7:62:a8:65:10:cf:a8:00:ba:b0:2b:13:
                    ef:8d:24:44:1c:1b:44:54:fc:eb:45:29:38:f1:f8:
                    4f:94:c0:04:0b:f7:fc:cb:eb:cd:ed:63:f2:16:b7:
                    5c:a7:f5:7b:5d:c8:c4:74:d5:4a:21:c5:6e:f4:93:
                    49:39:ca:bf:bc:0f:ee:0b:93:38:ed:0a:43:df:a0:
                    c2:2d:f8:38:2a:3f:1c:01:e3:08:28:e2:7c:a0:f0:
                    48:15:d4:42:bf:d6:2e:5c:7a:8a:21:9b:ab:8f:c7:
                    13:b0:58:92:f0:2b:58:57:e3:74:92:64:b7:78:80:
                    f1:2b:65:59:cf:09:f6:d7:ca:6d:50:fb:d3:24:cf:
                    a6:b7:b7:f3:0d:04:ea:4a:5d:03:de:1a:d2:0b:e1:
                    e9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:01:4A:21:EF:28:E7:F7:44:23:B3:A5:EF:05:33:08:0C:32:86:F7
            X509v3 Authority Key Identifier:
                keyid:B9:EA:A9:9B:1B:55:B4:E5:0B:5D:9E:CC:DE:EC:DF:38:92:47:35:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:64:72:14:e3:ad:d4:ec:b6:df:c3:30:72:14:15:ce:83:f7:
         f2:30:a2:db:58:97:50:13:f7:0d:1a:91:fa:fb:4f:ef:e2:2d:
         34:f3:bb:5e:52:37:0f:ce:58:cd:00:f0:f3:b3:40:bd:56:d6:
         f5:c3:c4:ef:3d:3f:4a:e4:bf:63:ac:7f:a0:38:2f:a0:32:59:
         93:af:a9:0f:a8:b5:9e:dc:7a:7a:74:9f:dd:01:ca:9c:79:73:
         75:64:57:de:a4:dd:98:7c:f8:f1:35:f5:4c:68:3c:f4:37:c4:
         25:76:e4:b6:d6:c4:3b:48:c4:6a:a2:8e:44:ca:4d:03:d4:5e:
         d4:46:ec:e9:16:10:6b:f6:f9:92:16:3f:80:89:a7:bb:55:6c:
         9b:ec:1b:50:24:b8:f1:50:29:57:c0:9e:92:3b:af:53:dd:70:
         e0:97:5a:87:4a:44:1a:5f:8a:23:c1:13:24:d6:01:85:29:96:
         98:2e:dd:2b:d0:aa:e0:b1:c8:42:bc:4f:ce:15:0e:1c:d2:1b:
         be:e0:90:87:32:6a:f3:59:47:58:09:15:23:18:58:6c:4d:8b:
         c2:2c:06:39:a8:44:98:37:ac:05:37:c4:cd:44:d2:2b:6d:89:
         32:4e:4e:9f:32:01:96:18:fd:0d:00:ca:eb:f8:cb:2c:e2:3d:
         88:05:43:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:32 2026 by rpki-client