Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft
File:                     Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft (raw, json)
Hash identifier:          UH3jSih4hfo+HhdWMla8YRDmGlR0RK+4mryeXpRwCa4=
Subject key identifier:   F0:2E:7D:9D:92:2B:02:14:CC:CE:4A:7C:C6:CE:39:14:37:E0:6A:97
Authority key identifier: 52:2F:98:79:CC:FA:DE:E5:D0:4A:9A:99:73:F5:B2:79:52:97:1B:FB
Certificate issuer:       /CN=522f9879ccfadee5d04a9a9973f5b27952971bfb
Certificate serial:       019D29CE97339BF761FF1E454E275D8A156C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft
Manifest number:          1449
Signing time:             Thu 26 Mar 2026 11:01:38 +0000
Manifest this update:     Thu 26 Mar 2026 11:01:38 +0000
Manifest next update:     Fri 27 Mar 2026 11:01:38 +0000
Files and hashes:         1: Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl (hash: KwK1Oe6n/mAThj7qjQNgozr6tbwfuqbW4GUVNHb7pdA=)
                          2: oOmlfKVzpMVENSLkIqqHr9oYYIg.roa (hash: /1cGoeAjRc1hP5Tzk5VY4ttcaNmL4WoxJgl5UoSxmIg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:ce:97:33:9b:f7:61:ff:1e:45:4e:27:5d:8a:15:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522f9879ccfadee5d04a9a9973f5b27952971bfb
        Validity
            Not Before: Mar 26 11:01:38 2026 GMT
            Not After : Mar 27 11:01:38 2026 GMT
        Subject: CN=f02e7d9d922b0214ccce4a7cc6ce391437e06a97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:78:30:90:ab:a2:78:33:54:c6:d9:e6:70:94:
                    f3:05:9c:f3:39:6e:b0:5d:ad:6b:ee:75:fc:08:4d:
                    5e:e5:19:c4:41:ca:fd:9e:21:d8:d6:f9:56:1f:4f:
                    b5:1e:7c:7f:87:bd:0e:cc:10:6e:04:38:35:fb:00:
                    a1:63:2e:3d:65:f0:e0:a5:cd:1f:6e:fe:7f:20:68:
                    56:77:95:82:b3:7d:05:34:af:d0:39:86:40:57:b2:
                    d8:82:8a:60:cb:56:c8:96:c6:11:81:99:ff:af:b8:
                    3f:bf:64:2d:74:b8:84:6e:41:eb:00:f7:48:e8:0a:
                    c3:0c:17:f3:82:3c:24:62:31:ca:ae:67:67:54:a1:
                    74:b0:ea:97:be:a9:0e:97:f5:6c:69:fe:a8:98:1c:
                    da:f0:ea:a8:db:ab:00:54:45:ab:72:0f:05:65:d4:
                    f4:3c:fe:73:d6:da:95:89:f1:b0:53:49:41:e9:06:
                    71:9f:2b:b7:67:c0:7e:6f:a6:ef:66:00:9a:29:0e:
                    b5:ae:d0:b8:ca:a5:a5:4d:99:8d:d9:6a:da:05:7b:
                    2f:a8:8d:b1:98:58:a0:81:c7:48:39:42:ee:e8:e6:
                    31:bd:4e:c4:f5:c5:f0:02:16:a4:cf:6c:c1:14:81:
                    5f:ca:af:a2:0a:f3:41:a6:58:8c:0d:20:35:a0:f1:
                    6e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2E:7D:9D:92:2B:02:14:CC:CE:4A:7C:C6:CE:39:14:37:E0:6A:97
            X509v3 Authority Key Identifier:
                keyid:52:2F:98:79:CC:FA:DE:E5:D0:4A:9A:99:73:F5:B2:79:52:97:1B:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:2f:d4:9e:ea:70:51:ce:61:7e:31:6f:4b:0b:c0:4d:ef:4f:
         b9:43:7f:64:80:68:d2:7c:11:0f:31:9f:44:d9:f9:18:93:fd:
         31:6c:1e:ae:55:e2:4d:b8:d4:7e:1b:e8:04:10:92:b9:63:ce:
         52:cb:8c:cd:7f:4e:39:df:48:0f:d7:16:e4:82:86:16:89:87:
         e2:b4:ee:4e:4e:b8:bb:d8:a8:56:39:4a:b7:d2:f8:93:b1:6d:
         c8:44:c9:ad:62:5a:5a:fc:b9:54:b6:df:4f:c0:f7:a7:c4:0a:
         64:19:c6:01:12:cb:16:f3:d1:42:18:e9:a3:c3:c2:b8:ed:ae:
         eb:73:e8:f3:44:5b:14:5b:5e:13:aa:ed:6a:f7:d4:4e:31:3e:
         09:5d:17:a6:43:62:2c:66:34:86:1d:6e:f6:aa:2e:50:47:99:
         21:7c:52:63:a0:f7:dc:30:1e:de:07:ce:24:81:1e:1a:a7:34:
         66:90:44:78:f4:33:68:e8:19:f4:94:c6:86:a9:33:60:21:a4:
         d2:8b:42:16:2b:3b:37:22:f6:fe:6a:f4:36:b9:76:3b:d7:4d:
         c2:12:31:5c:9d:a4:7f:00:0a:47:98:57:c7:9e:8b:44:a0:27:
         b4:99:29:88:1f:d7:41:ac:de:60:31:79:76:b9:f3:e7:e5:d2:
         b8:9f:7a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:15:41 2026 by rpki-client