Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
File:                     um1Gt2v9bUK71XXi8m_OE2ubam0.mft (raw, json)
Hash identifier:          FPfYhl7I0Yv0Ext32xPxvVeR38Ip41v9jx9Wc4wC6yQ=
Subject key identifier:   40:47:2E:B1:01:F1:22:22:5D:D3:0F:F0:CA:41:23:E8:8D:C1:3B:C6
Authority key identifier: BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D
Certificate issuer:       /CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
Certificate serial:       019CC8D0D6F88C644D45ABB7514C1825E5DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
Manifest number:          1857
Signing time:             Sat 07 Mar 2026 15:00:55 +0000
Manifest this update:     Sat 07 Mar 2026 15:00:55 +0000
Manifest next update:     Sun 08 Mar 2026 15:00:55 +0000
Files and hashes:         1: Bm7KXTZG-GzrmHMle85VbaK0lEc.roa (hash: eP4Z4Xyrl9duYpmeFr1kOXcCCxjk6AkZ57/buELWekE=)
                          2: YkorEnKm6LzRmwWsxcFNFH1cULo.roa (hash: r2RXMf3T6ozI4KhQ/ydf8YGQ149Sw8bA5XoNMW2hS0A=)
                          3: fpbZgKklTRGbUlBw5VfG2XolpT4.roa (hash: VEiVSo2qKOGnxDIsrhNTfOH5xMpm4xzV14ZuiE7aVXQ=)
                          4: fwb4YpE_ObhkPJOOtInq4VZSkFQ.roa (hash: ejLh2AtjPL3jxNb43Lf5+3Lqqs/Okt+3XnJA445dp+0=)
                          5: um1Gt2v9bUK71XXi8m_OE2ubam0.crl (hash: Okx898tDHHH5bXt+Mel7v2OMoXvsvy7pnHoxnEdI2gU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 10:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c8:d0:d6:f8:8c:64:4d:45:ab:b7:51:4c:18:25:e5:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
        Validity
            Not Before: Mar  7 15:00:55 2026 GMT
            Not After : Mar  8 15:00:55 2026 GMT
        Subject: CN=40472eb101f122225dd30ff0ca4123e88dc13bc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:af:ba:2c:53:09:0c:28:bf:17:eb:8c:1d:61:
                    38:19:68:39:bc:ba:9c:7a:d5:83:82:bf:62:5c:1c:
                    4a:a0:02:41:09:e9:fa:00:02:56:04:84:ed:8a:ce:
                    5e:d9:e2:5d:9a:ac:0c:a5:08:e9:48:a5:cc:61:42:
                    1b:2a:85:00:c9:fc:a0:dd:0b:fe:1d:4b:3b:7a:5c:
                    6e:1f:ce:41:60:bc:72:77:8d:f8:c4:5d:d9:0a:6f:
                    0a:f3:7e:c4:cc:35:a7:e7:24:b9:ee:bd:60:ad:52:
                    1b:53:3c:b5:cd:39:78:c4:54:41:20:e7:23:df:79:
                    8f:8d:bc:40:a0:83:b6:6c:33:87:c8:64:d0:07:8a:
                    f7:e2:b8:34:b8:a9:91:36:b3:74:0a:cf:28:e4:34:
                    0f:39:ea:a3:05:f6:c8:18:55:32:bb:8e:7f:e3:66:
                    b7:3b:b5:fd:2b:1f:0f:57:7d:b9:da:e8:cc:34:86:
                    3e:4a:7d:c4:43:ff:14:dc:3b:c5:cc:7d:11:d0:32:
                    5a:1f:2b:15:13:4f:58:66:18:e1:b5:5c:9b:f4:c5:
                    3a:0b:23:93:6b:cb:dc:6e:f2:d8:a2:f1:e6:54:45:
                    4b:48:55:61:28:00:be:1c:17:6b:27:39:97:dc:86:
                    b2:84:0c:e5:cd:87:d5:8c:6b:b7:de:44:a2:e5:12:
                    0f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:47:2E:B1:01:F1:22:22:5D:D3:0F:F0:CA:41:23:E8:8D:C1:3B:C6
            X509v3 Authority Key Identifier:
                keyid:BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:28:34:5e:11:6c:7d:ed:3e:b0:28:2e:63:50:5f:87:dc:1c:
         51:86:0d:f2:2c:0e:3a:63:b9:47:20:d7:07:d9:de:4f:46:9a:
         8f:99:15:2f:26:10:5a:bb:e8:72:c5:5a:fe:71:4c:a1:1e:73:
         72:73:6d:a1:56:60:d4:df:ed:01:2c:7b:9e:70:ba:15:a4:59:
         f0:ad:67:78:8b:f5:07:48:1e:01:e3:63:d9:1f:7c:cd:59:c0:
         cd:fc:ae:a2:68:ed:5a:32:1f:81:a1:a8:3d:a0:00:e7:bd:7b:
         19:a0:2e:47:72:98:60:02:df:8c:96:6c:21:3a:8a:2b:73:80:
         0e:cc:79:c2:37:09:95:f3:c0:5b:d1:aa:13:fb:4e:cf:f5:af:
         af:e2:79:70:22:66:f1:35:3f:7c:dc:a8:41:fe:43:2c:20:93:
         47:ce:38:e2:50:c0:1c:5b:24:9c:24:f4:c9:71:4b:7f:c2:80:
         68:d9:d5:67:cf:93:ec:d9:c5:c5:57:83:1c:df:d1:5c:20:4a:
         07:a6:57:94:d8:0f:d6:ad:a3:28:b3:8f:a0:c4:59:34:18:26:
         f1:7b:12:e4:fd:0d:b6:95:4d:d9:77:21:5e:bf:71:6e:4e:70:
         2b:ce:39:c0:47:89:5f:c7:33:79:0a:0e:a9:19:ce:36:03:0c:
         6a:61:17:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:02:04 2026 by rpki-client