Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
File:                     9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft (raw, json)
Hash identifier:          fxJT0MJzFlFh4C1Bmv/ZXO9EYhSXLLLtPSOk6Vv+U7k=
Subject key identifier:   0A:07:5A:C8:22:12:98:45:00:EC:77:04:81:45:E6:27:58:97:E9:04
Authority key identifier: F5:45:0C:63:76:65:5E:EC:1D:D2:DA:4B:D2:1D:5F:10:4A:96:D9:04
Certificate issuer:       /CN=f5450c6376655eec1dd2da4bd21d5f104a96d904
Certificate serial:       019CE4B60B6B41B01B50CA033740504B47B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
Manifest number:          1824
Signing time:             Fri 13 Mar 2026 01:01:01 +0000
Manifest this update:     Fri 13 Mar 2026 01:01:01 +0000
Manifest next update:     Sat 14 Mar 2026 01:01:01 +0000
Files and hashes:         1: 26DE9mwGulhT4dAnYga81faFL_0.asa (hash: mV7JHt6u/aewJ14E3UNG49W5RevaD1YiVI/wS+G92JQ=)
                          2: 9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl (hash: xu0HeA5RDsB8YpdE1DSXD9tbYLt9MGaqTSk6EZROYO0=)
                          3: IiBvNtte0BK03j32z9ol7pwqiRc.asa (hash: NG9cggSuQispY4seSaLXxlc9sBjRa+7fIOrlnoVlaFM=)
                          4: Jtnnu0fDCjNezLwZil_S7l9L48g.roa (hash: DILIlWzW8Mnq/43c0llI+/57QYnncukYSWm1Exl94Z8=)
                          5: M2d3XxtPV8U4RGwdl2KGyoS3tuE.roa (hash: DkLgJR/YV/FTpPRA6z+9XA1zLGuoZB5rGHsCK++smJM=)
                          6: smter7NQ29umjrWZnTKOoms7tGM.asa (hash: Nxv3g9K7Hwn853S+o5K2Svc8UNIF+3DDWPUR11aVzKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:b6:0b:6b:41:b0:1b:50:ca:03:37:40:50:4b:47:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5450c6376655eec1dd2da4bd21d5f104a96d904
        Validity
            Not Before: Mar 13 01:01:01 2026 GMT
            Not After : Mar 14 01:01:01 2026 GMT
        Subject: CN=0a075ac82212984500ec77048145e6275897e904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:72:c2:01:4f:26:c6:46:8c:e9:2e:a4:c3:b7:
                    9c:94:df:e2:cb:58:99:27:53:d3:bd:98:4f:79:6c:
                    5f:50:0a:83:af:5f:b2:51:b2:a9:ee:72:94:7d:05:
                    e6:33:df:be:2b:3f:70:bc:36:cd:d8:55:9f:04:65:
                    17:93:83:80:ab:98:f0:bd:c6:da:72:bd:74:8f:2d:
                    aa:96:ff:ec:53:47:12:6e:69:09:71:ef:73:f4:5b:
                    34:b6:c2:1b:54:12:ff:1c:cc:61:b7:eb:6d:48:39:
                    30:53:6c:f7:64:8a:fe:cd:c3:b7:e8:29:bc:b3:86:
                    db:77:41:af:bc:57:e9:07:09:a1:06:7a:af:20:70:
                    93:55:bf:4b:cb:5b:72:4f:2f:2a:f3:0f:6f:75:39:
                    b6:ab:11:76:4b:bb:e0:a5:74:94:54:50:3c:46:58:
                    05:28:bf:56:d8:9d:76:c0:ff:cc:ee:a4:46:12:d0:
                    fd:b0:25:b2:16:84:d8:d9:43:59:27:2e:7a:d2:82:
                    b6:64:ab:05:97:fa:4e:e7:d7:72:98:2d:03:99:14:
                    e6:59:d8:1f:2c:1f:74:48:b6:2c:91:40:4f:eb:bb:
                    73:90:a6:13:25:be:4f:6c:70:ce:77:c8:30:55:5d:
                    b1:23:7e:bd:fe:95:ab:6b:01:eb:fc:e4:b7:66:4c:
                    50:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:07:5A:C8:22:12:98:45:00:EC:77:04:81:45:E6:27:58:97:E9:04
            X509v3 Authority Key Identifier:
                keyid:F5:45:0C:63:76:65:5E:EC:1D:D2:DA:4B:D2:1D:5F:10:4A:96:D9:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:00:2f:e1:1c:73:4c:ed:cd:2e:cf:96:01:09:82:e1:62:17:
         7c:b2:42:80:fa:b3:e9:d2:81:d9:9d:57:36:88:ad:b9:c3:e5:
         ab:22:04:bf:19:1a:97:55:86:fa:47:49:b8:05:69:a9:0f:0c:
         13:44:a2:7d:f4:45:41:28:ab:ea:bf:c7:e7:5d:99:4e:df:a5:
         49:2e:6b:59:b5:d0:e0:93:8f:3d:f2:30:d9:99:df:44:60:b9:
         d0:b7:73:25:e4:a6:3c:c1:5f:85:46:38:9d:ab:bb:b3:6b:22:
         d7:27:dd:8b:f9:a2:a6:0d:65:6c:18:59:d3:31:e0:b9:e0:b9:
         f6:46:59:57:d3:a7:e1:b4:b1:f7:c5:43:1d:c0:e0:fc:86:b7:
         c5:5f:1e:98:d5:8a:34:6a:ac:a3:ef:06:7f:77:e4:62:3e:f3:
         bb:78:ce:4b:04:60:62:43:a4:ec:04:41:14:a4:91:f2:71:c2:
         c5:da:8e:37:79:4a:24:b2:81:22:e1:15:9b:3d:ad:31:22:5a:
         6f:95:f8:77:29:8a:cd:8d:eb:d4:0b:b1:24:d2:00:43:cf:16:
         a1:ba:ef:b2:01:16:f8:df:0f:4e:d3:b6:44:9e:02:18:95:b2:
         f0:c2:60:52:08:95:dd:a9:26:24:d2:d1:41:22:aa:66:e8:37:
         74:13:d6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 06:48:49 2026 by rpki-client