Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft
File:                     UVGCTBK9Pir3qYdSSnozqPGdgec.mft (raw, json)
Hash identifier:          entDzZyM+b2Wd2F332N6qSs/kGm/ZMCpESgylrb0oLY=
Subject key identifier:   93:CB:F6:B4:4B:B4:56:54:AD:A6:B7:C6:C2:0C:67:7A:14:B4:20:E2
Authority key identifier: 51:51:82:4C:12:BD:3E:2A:F7:A9:87:52:4A:7A:33:A8:F1:9D:81:E7
Certificate issuer:       /CN=5151824c12bd3e2af7a987524a7a33a8f19d81e7
Certificate serial:       019D058A3679CB204C1024942120DEEDC105
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UVGCTBK9Pir3qYdSSnozqPGdgec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft
Manifest number:          0708
Signing time:             Thu 19 Mar 2026 10:00:37 +0000
Manifest this update:     Thu 19 Mar 2026 10:00:37 +0000
Manifest next update:     Fri 20 Mar 2026 10:00:37 +0000
Files and hashes:         1: 3TqJFN82Ou6cnj7WZNmB53ds8d4.roa (hash: t6g92VZ+NxfWvf9Aux0ZfBmHd6Qz4U2PHoGnC8Owa3k=)
                          2: UVGCTBK9Pir3qYdSSnozqPGdgec.crl (hash: tpxrFFw2ihzqYjKQ8hZUhJ/JkbPpOFTod0Bhurt0Ruw=)
                          3: xuWwl1BgKwPOCVw1Rz6hhY_T8g0.roa (hash: NHfKK1fHeYkhRnZLWNEvRWzPkzzE4p2I2B1Y78FJZF0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UVGCTBK9Pir3qYdSSnozqPGdgec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Mar 2026 08:03:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:05:8a:36:79:cb:20:4c:10:24:94:21:20:de:ed:c1:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5151824c12bd3e2af7a987524a7a33a8f19d81e7
        Validity
            Not Before: Mar 19 10:00:37 2026 GMT
            Not After : Mar 20 10:00:37 2026 GMT
        Subject: CN=93cbf6b44bb45654ada6b7c6c20c677a14b420e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:94:76:c8:f2:0f:37:6b:d1:46:16:00:9e:d6:
                    15:b3:fb:ba:56:ef:53:ee:26:fb:56:01:3c:2f:31:
                    33:d3:90:51:62:92:3e:a9:3f:27:04:08:ee:37:85:
                    37:26:f6:28:aa:9c:35:a4:33:2e:8f:23:c8:07:73:
                    8c:8c:d1:9d:02:d8:5d:b5:af:7e:08:52:be:6c:f7:
                    6a:4c:49:c6:4e:49:92:a5:cc:65:e1:55:ec:cb:11:
                    70:c9:e8:88:4f:2d:eb:ae:7a:51:44:59:36:8e:65:
                    6c:36:fd:80:e8:82:12:3e:ab:b8:5a:b8:11:83:a8:
                    eb:a8:1e:2c:d6:ec:6b:1f:3b:4f:4a:8f:04:ae:e6:
                    4a:7e:6a:63:22:4a:0f:99:10:ac:14:38:1e:4e:b6:
                    ab:08:8c:7a:33:49:94:88:ff:6f:9b:f6:b6:da:2c:
                    86:7b:d5:9b:04:d6:3c:d5:66:fc:8d:76:0b:dd:24:
                    6d:f5:c3:4c:bb:df:24:29:40:78:5b:46:95:b2:03:
                    f6:36:7a:75:cb:93:50:26:4f:4f:07:0f:10:82:36:
                    90:8b:37:c6:4d:91:45:1e:cf:e9:95:3e:26:8e:3a:
                    8c:77:c5:06:3c:b8:09:55:cd:64:80:aa:13:97:36:
                    e4:4f:12:a1:60:31:c1:31:c0:76:d9:97:7f:63:1a:
                    f7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:CB:F6:B4:4B:B4:56:54:AD:A6:B7:C6:C2:0C:67:7A:14:B4:20:E2
            X509v3 Authority Key Identifier:
                keyid:51:51:82:4C:12:BD:3E:2A:F7:A9:87:52:4A:7A:33:A8:F1:9D:81:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVGCTBK9Pir3qYdSSnozqPGdgec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:84:c1:e8:1d:6c:85:3e:f4:27:9d:eb:57:9e:ac:62:10:b2:
         1e:af:0b:53:66:69:5c:33:b5:87:31:e2:41:00:4f:30:ff:6b:
         a3:b4:44:e1:cb:e8:99:2d:3e:c8:66:be:66:52:6e:0a:e8:ea:
         d3:8f:85:18:a8:11:bc:79:d6:10:6a:cd:94:87:fd:90:42:58:
         ee:6e:c7:52:8f:8c:f6:c6:7d:b7:8e:fe:6e:6f:78:10:39:af:
         0a:64:e7:03:19:65:91:32:7a:df:74:c0:bb:4e:df:b2:ee:f9:
         57:62:2a:1c:23:ac:a2:ef:14:96:94:c4:dc:f4:6c:63:ab:ae:
         1a:61:3d:eb:ad:34:2e:17:d1:70:24:27:3f:65:8d:7a:e0:8f:
         d9:c3:4a:67:47:a5:b3:47:74:b0:18:4b:fa:a7:cb:7f:e1:89:
         5f:e1:0b:ab:8f:62:85:f3:ed:dd:dc:79:44:fa:64:1b:2b:76:
         4f:24:17:1b:ba:5c:57:69:c2:be:ec:1a:9a:5c:1f:8e:db:7d:
         33:82:20:24:7f:b9:d6:29:36:d1:a1:00:2d:60:2a:27:50:48:
         85:19:4b:de:c1:68:34:22:a9:18:87:6b:3a:0a:c4:2b:38:5f:
         e3:0e:e9:30:74:60:31:63:ab:0a:32:07:97:61:8d:2a:d8:be:
         1c:8e:46:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 13:47:53 2026 by rpki-client