Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft
File:                     UWJgaJQlhs6VcCEDusiZ0j_PckI.mft (raw, json)
Hash identifier:          IHwaQw7fWO0Qhd9MPUEzwZBNVWJUDjqPs9+FIg0viFg=
Subject key identifier:   4E:D0:EA:53:A8:5D:D3:33:A9:18:09:6A:1F:53:B9:F5:98:09:A8:7B
Authority key identifier: 51:62:60:68:94:25:86:CE:95:70:21:03:BA:C8:99:D2:3F:CF:72:42
Certificate issuer:       /CN=51626068942586ce95702103bac899d23fcf7242
Certificate serial:       019D38D2B6B702FFE1A7B225B349E25FFAAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft
Manifest number:          1891
Signing time:             Sun 29 Mar 2026 09:00:26 +0000
Manifest this update:     Sun 29 Mar 2026 09:00:26 +0000
Manifest next update:     Mon 30 Mar 2026 09:00:26 +0000
Files and hashes:         1: H962oq62C4HZ1q-2ZR6ka9i7iTk.roa (hash: BBJJ5WWdTfXTRvB9xlvrZCxW2c0xyH6m419fkAsKFyU=)
                          2: UWJgaJQlhs6VcCEDusiZ0j_PckI.crl (hash: Q21u7DTqZfkFfcnZLAp/yiVUE9tiZ1WniozX4zUxSuo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d2:b6:b7:02:ff:e1:a7:b2:25:b3:49:e2:5f:fa:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51626068942586ce95702103bac899d23fcf7242
        Validity
            Not Before: Mar 29 09:00:26 2026 GMT
            Not After : Mar 30 09:00:26 2026 GMT
        Subject: CN=4ed0ea53a85dd333a918096a1f53b9f59809a87b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d9:33:8e:dd:cc:58:f1:e0:f7:6d:cb:ef:25:
                    85:64:ad:a8:ac:71:c6:1b:6f:eb:e0:8b:2f:18:35:
                    07:a3:55:4f:6f:ca:56:26:c2:db:54:74:db:77:39:
                    e7:b4:32:db:5a:a0:e5:69:46:db:53:37:d7:d1:e9:
                    e9:eb:d1:d2:50:f6:f2:9b:84:d8:f3:6a:d6:cc:43:
                    22:86:ca:2b:1a:ed:da:9f:38:93:1d:0a:fa:c5:cf:
                    62:a6:af:06:48:63:7b:7b:ce:9c:42:de:0f:08:8a:
                    0e:22:26:5e:1a:86:97:ca:d0:9a:a8:f6:fd:84:d3:
                    47:95:22:72:1e:6b:59:ac:25:fe:fd:69:95:08:57:
                    29:74:a8:9c:a1:6f:53:d4:f2:a6:de:f3:7c:cd:73:
                    45:d8:4a:b3:07:ce:eb:8e:82:ce:27:1d:3e:cc:76:
                    b0:a9:b3:03:8d:cb:6b:cd:82:0b:33:57:a6:07:3d:
                    a9:d7:c6:ff:0e:ae:09:14:5b:85:c5:91:48:94:69:
                    6a:6e:d7:24:f2:46:f9:9c:ef:6f:e7:78:55:de:8b:
                    fd:fc:d5:33:2d:be:b2:e9:02:4b:7f:3a:de:f6:bc:
                    9b:30:f8:aa:af:3e:74:68:ca:a6:23:bc:9e:91:5f:
                    5c:37:c1:9d:e7:28:f4:d8:c8:37:a1:43:81:63:a6:
                    3d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D0:EA:53:A8:5D:D3:33:A9:18:09:6A:1F:53:B9:F5:98:09:A8:7B
            X509v3 Authority Key Identifier:
                keyid:51:62:60:68:94:25:86:CE:95:70:21:03:BA:C8:99:D2:3F:CF:72:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:30:ee:c1:4f:36:65:20:aa:2b:58:88:e4:ce:21:59:aa:54:
         62:de:4a:56:12:f7:b3:26:44:f8:d3:d5:0a:da:7e:84:f2:4c:
         19:34:ea:2a:24:fe:cb:58:3b:91:8d:2c:eb:97:ad:6f:e8:5a:
         69:18:b8:42:23:be:b6:af:db:f0:de:32:1d:67:33:c5:a7:68:
         be:4b:c6:e8:1a:42:43:10:ae:02:15:9a:92:03:89:00:57:7c:
         c9:e1:53:ee:50:6d:6b:61:a2:2c:a3:f2:0c:c1:fb:1b:cc:4a:
         04:e4:03:d7:22:92:dd:9b:ec:da:a5:f8:cb:87:fe:de:43:cf:
         24:6e:8e:05:21:95:7b:e9:df:6e:ed:00:04:1a:bd:61:a8:e4:
         e4:27:16:f6:71:38:b5:e8:c0:30:87:53:25:7e:e6:6f:5d:80:
         d4:62:58:2c:37:a7:62:7a:43:e8:b7:fd:f0:4d:7b:af:2e:04:
         d7:4a:b9:5b:1e:b8:1d:0a:19:ab:fb:64:1c:61:bb:01:ad:e9:
         88:49:ce:14:e3:e9:ee:64:00:2c:58:52:fe:db:86:84:05:91:
         a1:d3:f1:e0:6c:4d:1f:fa:c7:4b:db:f7:91:aa:63:3e:5a:72:
         0d:6a:f8:08:54:c5:c7:45:e7:3c:2b:e7:68:77:7b:da:dd:5d:
         c7:03:c4:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040ra3Av/hp7Ils0niX/qvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNjI2MDY4OTQyNTg2Y2U5NTcwMjEwM2JhYzg5OWQyM2Zj
ZjcyNDIwHhcNMjYwMzI5MDkwMDI2WhcNMjYwMzMwMDkwMDI2WjAzMTEwLwYDVQQD
Eyg0ZWQwZWE1M2E4NWRkMzMzYTkxODA5NmExZjUzYjlmNTk4MDlhODdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdkzjt3MWPHg923L7yWFZK2orHHG
G2/r4IsvGDUHo1VPb8pWJsLbVHTbdznntDLbWqDlaUbbUzfX0enp69HSUPbym4TY
82rWzEMihsorGu3anziTHQr6xc9ipq8GSGN7e86cQt4PCIoOIiZeGoaXytCaqPb9
hNNHlSJyHmtZrCX+/WmVCFcpdKicoW9T1PKm3vN8zXNF2EqzB87rjoLOJx0+zHaw
qbMDjctrzYILM1emBz2p18b/Dq4JFFuFxZFIlGlqbtck8kb5nO9v53hV3ov9/NUz
Lb6y6QJLfzre9rybMPiqrz50aMqmI7yekV9cN8Gd5yj02Mg3oUOBY6Y9HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7Q6lOoXdMzqRgJah9TufWYCah7MB8GA1UdIwQY
MBaAFFFiYGiUJYbOlXAhA7rImdI/z3JCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVdKZ2FKUWxoczZWY0NFRHVzaVowal9QY2tJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jNjJkMDAtZmZhOC00M2JlLWEyYmQt
N2JkOWU1ZjQ2N2FkLzEvVVdKZ2FKUWxoczZWY0NFRHVzaVowal9QY2tJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9jNjJkMDAtZmZhOC00M2JlLWEyYmQtN2JkOWU1ZjQ2N2Fk
LzEvVVdKZ2FKUWxoczZWY0NFRHVzaVowal9QY2tJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABjDuwU82
ZSCqK1iI5M4hWapUYt5KVhL3syZE+NPVCtp+hPJMGTTqKiT+y1g7kY0s65etb+ha
aRi4QiO+tq/b8N4yHWczxadovkvG6BpCQxCuAhWakgOJAFd8yeFT7lBta2GiLKPy
DMH7G8xKBOQD1yKS3Zvs2qX4y4f+3kPPJG6OBSGVe+nfbu0ABBq9Yajk5CcW9nE4
tejAMIdTJX7mb12A1GJYLDenYnpD6Lf98E17ry4E10q5Wx64HQoZq/tkHGG7Aa3p
iEnOFOPp7mQALFhS/tuGhAWRodPx4GxNH/rHS9v3kapjPlpyDWr4CFTFx0XnPCvn
aHd72t1dxwPEhA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:19 2026 by rpki-client