Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/51c911-bb96-489c-86d4-32c989fe5eee/1/URaCWKEn48Db_aLlErydk9h0M4s.mft
File:                     URaCWKEn48Db_aLlErydk9h0M4s.mft (raw, json)
Hash identifier:          NMAnUByBG+B9QcC9wthg3pvK/x3AcY3oGu5q7RxeuKQ=
Subject key identifier:   1B:3C:1B:82:7B:FA:F3:05:5B:37:8E:49:C8:18:97:E9:EF:3A:6F:7F
Authority key identifier: 51:16:82:58:A1:27:E3:C0:DB:FD:A2:E5:12:BC:9D:93:D8:74:33:8B
Certificate issuer:       /CN=51168258a127e3c0dbfda2e512bc9d93d874338b
Certificate serial:       019D371B7C2E341588B459B84118CC53B0EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/URaCWKEn48Db_aLlErydk9h0M4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/51c911-bb96-489c-86d4-32c989fe5eee/1/URaCWKEn48Db_aLlErydk9h0M4s.mft
Manifest number:          B9
Signing time:             Sun 29 Mar 2026 01:00:41 +0000
Manifest this update:     Sun 29 Mar 2026 01:00:41 +0000
Manifest next update:     Mon 30 Mar 2026 01:00:41 +0000
Files and hashes:         1: ORALCgoAfAheMcIjQ2H2ABoAJSI.roa (hash: kYWDGCgoK1lDV0Fx4ZUm1E9D1cWkPaioASUNPUL26oc=)
                          2: URaCWKEn48Db_aLlErydk9h0M4s.crl (hash: +3/JjEELoHKMn6RktLQ/mh8JdP1gE5ciqXrbfbbU9BU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/51c911-bb96-489c-86d4-32c989fe5eee/1/URaCWKEn48Db_aLlErydk9h0M4s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/51c911-bb96-489c-86d4-32c989fe5eee/1/URaCWKEn48Db_aLlErydk9h0M4s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/URaCWKEn48Db_aLlErydk9h0M4s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 01:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:1b:7c:2e:34:15:88:b4:59:b8:41:18:cc:53:b0:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51168258a127e3c0dbfda2e512bc9d93d874338b
        Validity
            Not Before: Mar 29 01:00:41 2026 GMT
            Not After : Mar 30 01:00:41 2026 GMT
        Subject: CN=1b3c1b827bfaf3055b378e49c81897e9ef3a6f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0d:4b:59:5e:d0:80:9d:34:23:f1:f1:82:94:
                    5f:aa:37:c0:f9:f1:51:15:e9:ba:eb:cf:00:bd:55:
                    92:3a:e0:4a:94:d8:55:a5:fe:28:59:ad:fe:a9:77:
                    53:3b:75:3e:22:60:1f:88:52:d0:04:ba:3b:4a:a5:
                    c5:c7:cc:89:f9:38:94:20:ab:a1:6a:16:02:35:fb:
                    67:10:2d:06:8c:2a:f5:7a:db:1e:0b:63:cf:58:76:
                    a7:e4:ca:62:38:2b:7f:7a:46:12:05:4f:22:b9:db:
                    7c:fb:97:a3:73:ab:67:e1:4e:8f:f3:8b:06:b8:8d:
                    c2:1d:9f:29:d5:ab:63:21:23:96:57:df:9b:7c:f6:
                    7a:eb:0b:07:34:f2:e1:cc:61:5b:7e:58:16:ba:70:
                    12:39:4a:5f:4c:b0:59:de:87:ab:70:25:4c:b4:7d:
                    f6:a8:47:13:8d:08:79:be:df:99:7b:4a:f5:7e:4e:
                    6e:e6:a2:29:cd:88:eb:83:21:51:04:03:68:ad:67:
                    f0:7f:20:57:19:6e:ae:9e:a2:04:3f:c2:9c:05:54:
                    d3:e6:61:32:7e:ae:8f:0e:13:ea:b8:91:6d:5f:0a:
                    de:e3:13:01:da:70:24:04:33:a1:62:7a:88:06:df:
                    dd:5d:25:60:74:97:6a:9e:b9:ef:f8:c8:57:9c:04:
                    3b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3C:1B:82:7B:FA:F3:05:5B:37:8E:49:C8:18:97:E9:EF:3A:6F:7F
            X509v3 Authority Key Identifier:
                keyid:51:16:82:58:A1:27:E3:C0:DB:FD:A2:E5:12:BC:9D:93:D8:74:33:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/URaCWKEn48Db_aLlErydk9h0M4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/51c911-bb96-489c-86d4-32c989fe5eee/1/URaCWKEn48Db_aLlErydk9h0M4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/51c911-bb96-489c-86d4-32c989fe5eee/1/URaCWKEn48Db_aLlErydk9h0M4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:d4:9e:b3:08:a0:99:db:ca:8c:d4:a4:23:8c:d5:87:45:14:
         2e:88:d1:57:34:98:fd:5b:cf:84:e4:d0:b9:9b:49:db:0a:a8:
         92:33:54:c1:55:e5:f9:b4:3f:8b:d0:5e:75:7d:03:dd:9c:38:
         0f:fb:42:fe:7e:b3:12:b4:19:cf:b4:e2:0f:44:8c:f2:dc:bd:
         12:f6:36:1a:cf:92:fd:c9:f4:93:e3:72:d6:21:94:b8:26:49:
         1e:12:ca:74:86:7b:02:d7:42:b1:d6:45:12:16:79:17:f4:f0:
         87:72:8c:a4:e5:46:6b:1c:c2:a7:53:a8:65:a0:c1:a5:69:af:
         37:ef:7c:6c:a5:06:f6:48:de:88:dd:79:b6:77:6e:22:18:ec:
         7c:a1:e7:d3:20:5e:8e:ec:9e:11:90:94:af:87:ec:a4:30:46:
         10:eb:22:5c:dc:f0:fd:0d:f3:b8:83:5b:fa:6c:ab:46:fa:77:
         c4:ac:23:85:8f:33:2d:f6:06:3c:df:0f:94:79:c3:45:83:0c:
         ee:c3:c7:55:b6:27:7f:ba:bf:99:ba:b5:f6:41:26:ba:94:4b:
         57:4f:cf:8d:d6:94:fa:ad:fe:4d:4a:c1:64:55:a4:7b:ae:99:
         5b:5c:dc:df:31:e1:70:a4:23:bc:33:bd:b5:d0:18:6e:3c:74:
         d6:2e:cb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:26 2026 by rpki-client