Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/UwUgCbp4mNI2HKLufRMBJPnSUSU.mft
File:                     UwUgCbp4mNI2HKLufRMBJPnSUSU.mft (raw, json)
Hash identifier:          BDMfQuiaogWy66MOH3WPdmRQGs8vLchh0le7vZWy/50=
Subject key identifier:   70:E9:AE:76:8C:B6:6E:4C:11:FB:F7:B5:97:41:42:C9:52:CD:9E:A7
Authority key identifier: 53:05:20:09:BA:78:98:D2:36:1C:A2:EE:7D:13:01:24:F9:D2:51:25
Certificate issuer:       /CN=53052009ba7898d2361ca2ee7d130124f9d25125
Certificate serial:       019D38D3AA650A504E697A1CA43DE3A5EEF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UwUgCbp4mNI2HKLufRMBJPnSUSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/UwUgCbp4mNI2HKLufRMBJPnSUSU.mft
Manifest number:          1894
Signing time:             Sun 29 Mar 2026 09:01:28 +0000
Manifest this update:     Sun 29 Mar 2026 09:01:28 +0000
Manifest next update:     Mon 30 Mar 2026 09:01:28 +0000
Files and hashes:         1: UwUgCbp4mNI2HKLufRMBJPnSUSU.crl (hash: oTcwy8M5lj3pn5ItEEvwEeYg7ssVHjPNRqJ8GVbYwTI=)
                          2: wWKYUMsUBMLwAcAaBxJQWTurS9w.roa (hash: Y9DOjWqYX7MX2J4njELl+NUTaXcyEq3NFHB7fsFFZ8k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/UwUgCbp4mNI2HKLufRMBJPnSUSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/UwUgCbp4mNI2HKLufRMBJPnSUSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UwUgCbp4mNI2HKLufRMBJPnSUSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 09:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:aa:65:0a:50:4e:69:7a:1c:a4:3d:e3:a5:ee:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53052009ba7898d2361ca2ee7d130124f9d25125
        Validity
            Not Before: Mar 29 09:01:28 2026 GMT
            Not After : Mar 30 09:01:28 2026 GMT
        Subject: CN=70e9ae768cb66e4c11fbf7b5974142c952cd9ea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:40:c6:cc:da:2f:07:4b:03:95:dd:59:be:fa:
                    cb:f0:5f:3e:b5:cf:aa:ed:a2:15:0c:dd:98:9f:3d:
                    ba:c9:7c:31:46:ff:73:56:99:e9:df:bf:ee:ba:86:
                    91:f3:4e:14:80:fa:09:77:b7:ae:6b:1a:7a:fa:19:
                    0e:5d:23:31:e0:a6:6b:96:7e:a5:d6:f9:ac:5b:80:
                    eb:5d:bc:83:dd:ae:70:10:50:8f:86:3e:7d:8f:c6:
                    55:81:a9:f3:09:93:b5:0e:b4:84:a8:d4:b3:99:df:
                    9d:1a:24:49:bb:d2:23:0b:28:1f:13:fb:33:59:3a:
                    6f:a0:b0:64:87:35:8c:06:92:4d:7d:45:b8:bb:3b:
                    8c:a7:75:e3:e4:f2:72:1e:70:ee:4a:67:90:9d:1a:
                    7a:e7:4b:cc:cc:d4:00:71:b1:3f:64:1b:66:fa:3f:
                    ec:05:dd:17:40:c4:6c:3d:a2:6c:e7:8a:8d:4e:9c:
                    be:b1:22:85:84:36:db:c7:df:63:9d:08:dd:14:ad:
                    13:e6:fb:7d:6a:a7:71:c5:bf:94:c7:c7:b8:a7:a7:
                    9a:7b:ed:dd:7b:20:1a:56:87:37:dd:24:2b:94:d9:
                    8c:6d:af:d2:f6:fb:dc:62:b6:bc:36:37:16:0e:ad:
                    89:e5:dc:a4:6e:06:08:7d:0f:ab:80:cd:a9:01:37:
                    58:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E9:AE:76:8C:B6:6E:4C:11:FB:F7:B5:97:41:42:C9:52:CD:9E:A7
            X509v3 Authority Key Identifier:
                keyid:53:05:20:09:BA:78:98:D2:36:1C:A2:EE:7D:13:01:24:F9:D2:51:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UwUgCbp4mNI2HKLufRMBJPnSUSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/UwUgCbp4mNI2HKLufRMBJPnSUSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/UwUgCbp4mNI2HKLufRMBJPnSUSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:e6:4c:17:cb:29:3a:63:de:4b:e3:48:0e:65:5d:db:f6:76:
         c8:c6:49:1b:59:7e:ae:b0:4d:23:58:c3:f9:a1:14:ee:09:3e:
         0e:dd:9a:4a:7e:d4:63:82:25:fb:5d:a4:3f:a1:9e:da:05:57:
         f6:a1:55:1e:ab:08:d5:a3:8b:36:5a:39:c7:5b:29:92:56:ae:
         ae:b6:0a:f1:8e:bd:a0:b5:96:40:06:11:a0:69:b3:0d:8a:41:
         53:85:79:10:39:d0:23:43:c7:43:72:b5:a7:31:35:d6:90:dd:
         14:0e:73:1c:45:7e:50:b3:4b:41:a2:eb:13:7e:68:4c:ea:5a:
         1c:9d:f2:b9:c0:ac:f5:2f:fb:a1:ad:df:56:51:e7:20:b1:a5:
         bb:00:e7:be:fe:8f:7f:2b:bb:f1:87:a4:56:e4:14:fc:c6:b4:
         47:2f:8d:5b:e3:d7:15:f7:23:03:6b:ae:97:81:9a:ee:01:e2:
         c4:de:94:62:0f:e1:2a:fb:b4:5f:fc:bc:ef:a9:3b:22:cf:68:
         a3:bc:67:e4:3e:3b:af:72:43:53:b5:ab:60:d7:2a:de:31:1f:
         67:db:0b:7e:51:db:35:de:b0:e7:98:9b:42:04:d6:8d:a9:7e:
         66:fd:79:d5:16:08:69:11:d1:30:0a:cb:a4:60:da:58:fc:f6:
         f6:97:50:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:15:44 2026 by rpki-client