Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft
File:                     uMFf4eGcuByzRp_KpcYCOmxcRaM.mft (raw, json)
Hash identifier:          7lHhFoBTDQPBeuuR4qRsnRXsRv/cb4YeTQujcya3rUM=
Subject key identifier:   C5:36:04:EF:08:78:C6:F6:41:53:5C:BE:F7:5F:3A:67:B9:DE:5D:67
Authority key identifier: B8:C1:5F:E1:E1:9C:B8:1C:B3:46:9F:CA:A5:C6:02:3A:6C:5C:45:A3
Certificate issuer:       /CN=b8c15fe1e19cb81cb3469fcaa5c6023a6c5c45a3
Certificate serial:       019D29975C05B8778C374A55A569CD06DC38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMFf4eGcuByzRp_KpcYCOmxcRaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft
Manifest number:          140F
Signing time:             Thu 26 Mar 2026 10:01:18 +0000
Manifest this update:     Thu 26 Mar 2026 10:01:18 +0000
Manifest next update:     Fri 27 Mar 2026 10:01:18 +0000
Files and hashes:         1: Xhfwll5qzBdYOfcH7sdtSZRD6CY.roa (hash: dBSrIB5LILMeGbKYxJ0D2gUZb3pLhSoSBLpMIfDMmlo=)
                          2: uMFf4eGcuByzRp_KpcYCOmxcRaM.crl (hash: j9uuwpbuuXL/uK1OYkHJndYRFP/J5pkiAVERAG8dBNU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uMFf4eGcuByzRp_KpcYCOmxcRaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:97:5c:05:b8:77:8c:37:4a:55:a5:69:cd:06:dc:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8c15fe1e19cb81cb3469fcaa5c6023a6c5c45a3
        Validity
            Not Before: Mar 26 10:01:18 2026 GMT
            Not After : Mar 27 10:01:18 2026 GMT
        Subject: CN=c53604ef0878c6f641535cbef75f3a67b9de5d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bc:cc:d1:8b:5c:e0:d7:d3:22:a6:c4:42:2d:
                    ff:d9:3e:99:eb:f8:60:7d:3c:1d:91:59:08:f6:94:
                    b0:e1:d6:50:7d:1b:c6:4d:32:d8:3a:8e:3e:43:d8:
                    fa:2a:a8:5f:8b:d0:0b:24:fa:6f:f5:e5:e1:98:47:
                    e3:cb:52:03:96:98:1f:92:7f:98:b6:8a:c4:64:3c:
                    0a:65:e0:52:1c:c3:aa:a7:d1:1a:9a:cb:e8:6a:14:
                    62:b4:34:c8:3b:12:55:e0:75:0a:a1:47:69:75:4f:
                    77:c5:73:22:a5:42:61:13:82:fe:ce:41:e1:a1:82:
                    d8:00:df:85:2f:63:8d:db:a3:c2:32:ab:ae:b6:57:
                    51:1b:56:6a:b3:73:40:b4:ca:8a:fa:05:74:aa:04:
                    df:d6:a8:8a:a6:ad:65:c2:cf:7e:28:6c:82:44:69:
                    66:81:3c:3c:ec:e2:b7:3c:92:0e:58:37:f3:76:60:
                    fc:49:2a:0b:82:b6:f6:df:48:fc:c7:bb:39:b1:57:
                    94:2a:07:43:47:9e:f1:bf:6d:1b:13:a4:73:58:ff:
                    6d:3b:ce:48:53:35:6c:d0:ff:85:d0:37:66:72:3f:
                    2c:2f:91:58:66:51:c2:04:cb:27:99:3c:b6:6f:be:
                    4b:12:b0:65:3d:46:5a:47:3a:cf:bb:f5:68:26:b5:
                    4c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:36:04:EF:08:78:C6:F6:41:53:5C:BE:F7:5F:3A:67:B9:DE:5D:67
            X509v3 Authority Key Identifier:
                keyid:B8:C1:5F:E1:E1:9C:B8:1C:B3:46:9F:CA:A5:C6:02:3A:6C:5C:45:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMFf4eGcuByzRp_KpcYCOmxcRaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:66:7d:32:f6:30:37:46:46:16:fd:d9:15:4a:cf:19:aa:4a:
         a5:85:17:8c:d4:79:64:8e:bf:20:35:5a:e5:d8:3a:80:e6:9b:
         47:b1:0c:e0:18:b2:4a:3b:2e:db:c7:0d:dd:0b:5d:e1:0a:1d:
         8d:02:2f:e3:59:94:27:54:8c:79:fe:da:21:1b:80:41:8b:00:
         04:8b:82:cf:2f:14:d3:0a:c9:46:c3:4b:e4:0c:ac:ce:60:95:
         44:1f:77:43:01:08:5a:3e:c4:c2:c7:f3:1c:ea:37:c3:07:1e:
         7a:17:c2:ad:b1:09:82:d0:e3:9f:0e:cc:8d:8d:0e:04:fd:66:
         e8:c0:23:1d:e4:91:09:d1:8f:cb:4f:bb:64:ee:75:bc:96:68:
         40:b5:7b:e4:f7:d8:82:6d:5a:f7:5d:77:c4:75:3a:b7:2c:b0:
         42:9b:9f:52:be:82:38:38:c8:4f:8d:11:db:8a:e8:92:b5:66:
         20:b3:04:99:23:19:91:a6:28:62:a8:87:2a:0d:cd:bb:b4:62:
         6f:87:c7:57:64:7c:1e:60:4b:83:3a:87:7f:35:9b:f4:cf:57:
         87:de:47:50:84:54:4e:d3:95:83:b6:03:50:d7:96:ee:83:b9:
         76:5f:4a:b5:67:51:27:31:7a:e9:d9:f1:0b:e6:bf:ab:ea:47:
         1f:b8:8d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:27 2026 by rpki-client