Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
File:                     UxIuA6hBuIeJY6__9pXKT5_QaCw.mft (raw, json)
Hash identifier:          zc88SKtvN7sbprSm2i+K4XMFH+2WM/rEmsHDkwyqswo=
Subject key identifier:   5F:C1:37:B0:78:C6:8F:11:BB:5A:BF:72:7F:DA:F8:FB:30:C4:48:4A
Authority key identifier: 53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
Certificate issuer:       /CN=53122e03a841b8878963affff695ca4f9fd0682c
Certificate serial:       019D10EA05E797ACCC5377F9D1D7A87868BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
Manifest number:          118F
Signing time:             Sat 21 Mar 2026 15:01:05 +0000
Manifest this update:     Sat 21 Mar 2026 15:01:05 +0000
Manifest next update:     Sun 22 Mar 2026 15:01:05 +0000
Files and hashes:         1: UjFdhEdt4WKlDSIUUurW21paKp4.roa (hash: fDRm4GJe+GCEFChs7oH68Gzn9XNFPr0wdWmaIX+37oo=)
                          2: UxIuA6hBuIeJY6__9pXKT5_QaCw.crl (hash: 0CRMUfC12xJH3or5zx9hoA1sGKaaNR3fBQI+wqZZMSE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 22 Mar 2026 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:10:ea:05:e7:97:ac:cc:53:77:f9:d1:d7:a8:78:68:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53122e03a841b8878963affff695ca4f9fd0682c
        Validity
            Not Before: Mar 21 15:01:05 2026 GMT
            Not After : Mar 22 15:01:05 2026 GMT
        Subject: CN=5fc137b078c68f11bb5abf727fdaf8fb30c4484a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d1:72:b6:fa:23:bb:be:89:f1:c2:41:c3:3d:
                    c5:4f:4c:32:8c:a0:1f:60:58:6c:66:7e:53:ac:f6:
                    1a:96:e0:93:fa:8a:4e:f9:f1:da:5c:60:2d:67:5d:
                    b3:ad:00:a5:da:e0:a6:10:d0:dd:bf:21:86:f0:68:
                    20:12:9d:0e:7b:62:12:22:ab:d5:1f:4b:24:ef:7b:
                    87:71:72:5a:49:66:5a:e3:95:12:29:a0:5e:ca:3b:
                    c0:05:2f:4e:b2:36:88:3d:43:c7:73:ea:18:44:63:
                    f9:2d:47:9f:8a:7d:ea:d2:10:a4:7a:58:0f:83:25:
                    f6:21:14:6f:cb:b4:53:99:cd:d7:65:aa:95:bb:2d:
                    9b:d8:60:6a:13:2b:d3:02:7d:18:da:3c:31:ad:d6:
                    17:5b:89:5f:ff:9e:91:77:60:73:f8:a2:23:34:c6:
                    58:4d:14:9a:be:a6:f5:fd:96:89:98:8e:07:3e:3c:
                    c8:b6:50:25:b0:c0:b1:66:2c:a1:f6:51:b9:bd:84:
                    c6:fa:44:7a:9f:9b:8a:bd:64:3e:6d:f6:11:37:94:
                    9f:b8:29:6d:a2:4d:1f:2d:3b:48:ae:ce:b4:1a:9b:
                    a1:44:af:78:14:a3:e0:bd:bc:d3:e6:f8:54:3b:5b:
                    33:0a:7d:1a:12:4d:50:44:48:33:8c:d2:36:13:64:
                    c5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C1:37:B0:78:C6:8F:11:BB:5A:BF:72:7F:DA:F8:FB:30:C4:48:4A
            X509v3 Authority Key Identifier:
                keyid:53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:ce:5a:a2:d4:5a:00:3e:f3:c7:65:2c:ee:a1:bc:f0:21:76:
         68:66:37:e4:3e:6f:c9:65:dd:29:80:51:be:ac:81:e0:ae:fa:
         43:f0:8f:59:1e:8a:7c:61:48:37:d9:8f:94:a2:ea:b6:33:f5:
         f3:5e:15:4b:4d:ff:6b:2e:dd:33:72:29:81:9a:59:23:39:08:
         a4:d3:0a:cb:fe:d6:02:fd:d5:17:7c:c0:c4:f8:6a:f2:0a:b3:
         49:9c:a5:e6:c0:91:b7:49:4e:e8:f0:1b:42:62:66:d9:c9:f4:
         af:71:7a:21:bb:3f:c1:c1:4a:98:5b:66:75:61:97:b8:79:ac:
         99:2b:1c:0e:65:05:cb:4f:2b:1e:42:ff:6e:07:ad:47:cf:31:
         2c:8c:4e:7c:24:95:8e:98:81:6a:b3:f0:43:11:7a:94:35:cc:
         de:83:55:bc:65:d9:7b:b0:bc:fe:a6:3c:b0:34:41:29:2e:98:
         23:a9:1a:82:80:c3:b9:13:77:7d:1e:ec:0e:25:62:e6:dd:88:
         12:32:1d:39:3a:f0:41:bc:67:70:af:a8:17:f0:a4:48:aa:b9:
         d7:5a:3f:87:ed:e8:a1:57:7c:62:e1:6c:aa:7b:90:77:ca:82:
         36:0b:e5:3f:94:3c:08:84:fe:dd:77:5c:72:95:fd:68:83:c3:
         e2:c8:97:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 18:45:33 2026 by rpki-client