Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft
File:                     UHx3C7awjctNbqmwyWJyrzpvnHE.mft (raw, json)
Hash identifier:          8lL2mfHkvbHZG0K7sVkETcAtz4R35MbmToiRiT7Vktg=
Subject key identifier:   4F:41:2C:07:15:61:DE:27:F2:DB:1F:86:D8:BE:FF:7F:5C:36:7E:34
Authority key identifier: 50:7C:77:0B:B6:B0:8D:CB:4D:6E:A9:B0:C9:62:72:AF:3A:6F:9C:71
Certificate issuer:       /CN=507c770bb6b08dcb4d6ea9b0c96272af3a6f9c71
Certificate serial:       019D06665EE9126093CF79E2A8BFB1A1FBFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft
Manifest number:          0347
Signing time:             Thu 19 Mar 2026 14:01:05 +0000
Manifest this update:     Thu 19 Mar 2026 14:01:05 +0000
Manifest next update:     Fri 20 Mar 2026 14:01:05 +0000
Files and hashes:         1: 1-qOjuIvYGjckksNPHVjpgwpDL5c.asa (hash: IDU7S6qcZcLrhRpcWw7crD/aj5dTeMeZ0RTCJFumpRA=)
                          2: 9DLIgBG0jvfuH8ou8TZjKoDe-ho.roa (hash: HpaZI7kuC6hl/mDsBhvQTtPfFBQMuUpypzbtW9UHoK0=)
                          3: UHx3C7awjctNbqmwyWJyrzpvnHE.crl (hash: Hd+qWVInKGq45m+jiFif8YtYufiDxZcXnCfm+Vywbvo=)
                          4: WEtqNCrBdP1-xOqBUemEbeb1epY.asa (hash: HoM1BbtgBuk87uJLxu3lvRVRX6rEkL9yzf8EqEQYeqA=)
                          5: _rTEx-t_NdmfT_FVcasSap5SuvE.roa (hash: ENf9Zsg8pxzpa14iNxpPB+x6wfIxOC0IvZvTlmEuMS0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:06:66:5e:e9:12:60:93:cf:79:e2:a8:bf:b1:a1:fb:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=507c770bb6b08dcb4d6ea9b0c96272af3a6f9c71
        Validity
            Not Before: Mar 19 14:01:05 2026 GMT
            Not After : Mar 20 14:01:05 2026 GMT
        Subject: CN=4f412c071561de27f2db1f86d8beff7f5c367e34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4c:04:ae:8e:0e:2f:aa:4e:a9:45:91:a0:57:
                    88:04:46:ff:b8:67:98:d9:50:f4:bf:d7:a7:0a:62:
                    76:1f:34:34:1b:95:57:65:94:d4:8e:09:b4:f8:16:
                    f2:a3:1c:58:30:a4:e7:e1:e2:e6:fe:7e:b9:b2:f0:
                    80:06:a1:4a:c8:3e:02:1c:d6:36:cc:19:7d:a7:f0:
                    64:d1:5d:49:eb:7d:cd:34:cb:8a:27:b4:c1:80:5c:
                    e7:e6:8b:3c:cb:b7:3c:45:5d:e9:0b:a5:97:17:e9:
                    24:4a:01:5f:82:27:99:9b:c2:51:3a:88:bf:71:17:
                    3e:43:3b:d0:3e:34:f4:de:04:42:7a:6e:8b:bc:82:
                    ac:99:ef:77:4a:9f:72:12:a8:ca:67:b8:21:63:e6:
                    7f:a0:05:cd:95:b7:0d:dd:6b:3b:6b:ad:d1:e3:e1:
                    a5:7a:d9:bf:76:78:2f:f9:61:2b:08:a3:62:63:94:
                    7d:b9:75:6f:3a:fb:0a:9c:bd:b3:09:f9:23:51:ab:
                    54:69:32:1c:31:da:aa:06:8a:f3:0d:6a:d4:a7:bd:
                    38:e9:1b:ff:8d:d8:44:bc:5c:87:37:91:4b:49:e3:
                    b9:42:d2:12:56:2e:ab:d4:8c:60:0c:5c:eb:8d:63:
                    5d:f1:e9:44:1e:12:72:11:af:dc:cb:89:ca:47:38:
                    db:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:41:2C:07:15:61:DE:27:F2:DB:1F:86:D8:BE:FF:7F:5C:36:7E:34
            X509v3 Authority Key Identifier:
                keyid:50:7C:77:0B:B6:B0:8D:CB:4D:6E:A9:B0:C9:62:72:AF:3A:6F:9C:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:4e:70:71:f5:9e:68:ba:66:39:46:2c:75:b7:f8:db:20:6f:
         5d:f0:f4:44:71:1c:23:60:64:85:02:98:18:4a:2f:5f:f6:0a:
         24:bf:bb:74:99:cf:5e:a7:5f:fd:84:09:38:d1:ff:5c:2f:c2:
         29:68:6f:ab:61:de:6a:4e:5e:46:e0:f6:b1:f1:fa:26:81:31:
         99:ff:1c:fb:d8:bf:75:5c:94:c7:1c:33:c3:82:66:66:ba:55:
         8e:79:ab:83:6d:92:f0:6a:ad:8c:dc:de:ba:62:61:0a:1a:7d:
         e2:fa:87:6e:74:7a:98:c1:3f:15:a9:2d:d7:a4:9d:31:3f:c5:
         fe:8b:35:3c:5d:6c:5a:47:69:31:51:c0:30:4e:97:bd:9b:7e:
         59:d5:de:49:23:c0:9b:d5:10:4f:7b:1d:fd:f0:a8:6e:ee:22:
         d2:0e:be:c4:9d:e6:95:7b:aa:52:0a:87:a2:64:9a:0c:af:d9:
         81:d4:c1:26:ad:24:70:01:cd:00:eb:e1:e1:9c:44:b3:a9:b0:
         aa:d5:62:33:0f:3d:50:60:96:5c:ca:16:b6:1b:fd:bb:a6:cf:
         f2:11:80:50:26:c5:62:50:26:be:3a:55:48:44:32:5a:4f:89:
         11:01:6f:69:8c:b9:3c:28:af:ad:b5:f9:65:39:e7:a0:34:39:
         1a:70:57:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 23:11:33 2026 by rpki-client