Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.mft
File:                     UWGN8AbVSNHYftZBlVBmLbb8BgY.mft (raw, json)
Hash identifier:          CzXLrLSCccJIQx92e28IO2G79pgN208+A2Dt7i3D1o0=
Subject key identifier:   73:F2:B2:14:99:66:FA:82:EC:4E:D3:4F:BC:5F:8E:D9:A8:67:1A:B1
Authority key identifier: 51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06
Certificate issuer:       /CN=51618df006d548d1d87ed6419550662db6fc0606
Certificate serial:       019D37C000822B3FA0B38338A7E3BD9FBBA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.mft
Manifest number:          1895
Signing time:             Sun 29 Mar 2026 04:00:23 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:23 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:23 +0000
Files and hashes:         1: DeVxF-ajyv69tQ1jWZaFly-h3_M.asa (hash: s3uI2uzcUVAP2Ke0qq2OsJ0Qz8VUvl1F8D3nklCzw3w=)
                          2: J0QypuanqzzQ31mj2tHTtIs1HIQ.roa (hash: nWILPmUDpR0YDcdJbo6YDlboQE8Koi0QnyeiT/i1zJQ=)
                          3: Nr34upPMc1itfVkdnNNT1AsCW_w.roa (hash: FFJtZD22Fu2rvHlrFEbupNfTchtF8nOl9Mph7JlreGw=)
                          4: UWGN8AbVSNHYftZBlVBmLbb8BgY.crl (hash: +FakpXvu5hJ+HxWIjTQonNiX6UZQ8qXwlqsq2Ottz6E=)
                          5: jR6smR259DLDFgyK1zIk0sEQi6M.roa (hash: e6/RLtoVyyyv2YlCw0lcJ5Nkg+16H+58XOUnr+NRnzU=)
                          6: p4lMHdo4l30tBAk1ODxehJl7wWg.roa (hash: GFcdFC6qL34sruvTk9IJu2tkqlWw6IlfX6Zy2WNxmQU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:00:82:2b:3f:a0:b3:83:38:a7:e3:bd:9f:bb:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51618df006d548d1d87ed6419550662db6fc0606
        Validity
            Not Before: Mar 29 04:00:23 2026 GMT
            Not After : Mar 30 04:00:23 2026 GMT
        Subject: CN=73f2b2149966fa82ec4ed34fbc5f8ed9a8671ab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d1:75:6a:3a:bb:44:1c:07:b6:3a:60:0a:98:
                    36:a4:b8:2b:96:bd:90:77:3d:f8:82:85:86:38:f0:
                    a8:64:bd:be:46:c6:88:94:06:97:1b:d0:73:33:d3:
                    dd:29:62:33:ba:48:04:39:4b:87:8c:f3:32:85:cc:
                    f4:fd:f5:57:dd:f6:61:13:c6:f2:cb:54:8b:26:ba:
                    e7:31:70:69:f2:9d:27:5c:3e:ea:55:f1:19:71:36:
                    4a:02:da:41:db:8d:37:d0:ae:1a:d5:90:50:0f:ef:
                    98:b1:93:aa:26:5c:89:f4:82:e9:8c:1e:c8:77:7f:
                    9c:cd:f9:a9:22:08:ef:51:8e:8e:36:0b:67:9b:aa:
                    f1:5c:04:95:ab:3a:5d:c9:b5:c9:5e:5a:8f:08:68:
                    26:81:38:ef:9d:88:db:65:b2:e1:ba:7d:ab:9d:95:
                    05:74:bf:92:2f:30:a0:cf:0d:7a:c4:25:58:66:fa:
                    4a:eb:09:53:10:5a:ce:aa:51:bb:a6:71:f6:c1:a2:
                    42:1b:07:5b:f5:cf:56:93:81:07:50:ac:08:1c:8a:
                    2f:cd:e6:5e:98:df:21:74:f9:5f:c5:0a:71:3f:3f:
                    8b:20:7c:7a:3a:48:d5:16:ac:f2:aa:98:44:ed:a4:
                    b3:3a:76:3d:1f:60:9f:b0:e5:64:1e:17:31:ee:fc:
                    3d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F2:B2:14:99:66:FA:82:EC:4E:D3:4F:BC:5F:8E:D9:A8:67:1A:B1
            X509v3 Authority Key Identifier:
                keyid:51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:0c:4b:53:ab:ed:8e:99:ef:73:80:62:fe:b6:53:bc:a4:32:
         7c:d0:d5:0c:4b:c5:0c:6c:d9:bd:48:e5:9a:60:d5:ff:fa:a2:
         1f:ff:1e:db:5d:da:ca:0a:fd:d9:cf:4f:9a:9f:72:26:08:67:
         8d:67:a1:d4:51:93:fe:c8:cc:ae:5a:d0:0a:da:c6:bc:fb:51:
         b9:d2:34:bb:bf:ad:da:9a:38:d4:2b:31:f9:47:01:8b:ad:06:
         67:ab:4e:db:8d:11:49:00:4f:35:e8:0f:50:8a:db:fd:d5:0d:
         ab:c5:64:1d:0e:1f:c8:a7:82:6c:5d:8f:e8:02:a0:76:78:4f:
         85:e5:83:7c:91:e1:1e:48:10:9e:3a:26:2c:e3:a3:4c:29:8e:
         d0:90:47:f5:7b:c4:0c:7d:5d:b0:8f:71:d2:4e:5b:cf:d8:9a:
         dd:df:bf:6e:6a:a5:4c:32:58:76:3a:b1:e3:93:5d:d0:08:34:
         c2:c8:ee:9c:88:af:72:6a:38:37:63:d6:cf:39:f1:af:5a:9b:
         da:1e:a9:6a:eb:b2:a3:5e:e5:2b:1c:40:f9:94:24:ab:4a:97:
         c8:36:74:c7:36:c1:2a:a0:05:3e:9a:c0:5d:fb:ea:2d:9d:e2:
         7b:e6:0f:9b:b5:7a:45:37:b1:bb:93:84:52:a3:c8:8e:00:0d:
         68:3b:2f:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wACCKz+gs4M4p+O9n7ujMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNjE4ZGYwMDZkNTQ4ZDFkODdlZDY0MTk1NTA2NjJkYjZm
YzA2MDYwHhcNMjYwMzI5MDQwMDIzWhcNMjYwMzMwMDQwMDIzWjAzMTEwLwYDVQQD
Eyg3M2YyYjIxNDk5NjZmYTgyZWM0ZWQzNGZiYzVmOGVkOWE4NjcxYWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dF1ajq7RBwHtjpgCpg2pLgrlr2Q
dz34goWGOPCoZL2+RsaIlAaXG9BzM9PdKWIzukgEOUuHjPMyhcz0/fVX3fZhE8by
y1SLJrrnMXBp8p0nXD7qVfEZcTZKAtpB24030K4a1ZBQD++YsZOqJlyJ9ILpjB7I
d3+czfmpIgjvUY6ONgtnm6rxXASVqzpdybXJXlqPCGgmgTjvnYjbZbLhun2rnZUF
dL+SLzCgzw16xCVYZvpK6wlTEFrOqlG7pnH2waJCGwdb9c9Wk4EHUKwIHIovzeZe
mN8hdPlfxQpxPz+LIHx6OkjVFqzyqphE7aSzOnY9H2CfsOVkHhcx7vw9wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPyshSZZvqC7E7TT7xfjtmoZxqxMB8GA1UdIwQY
MBaAFFFhjfAG1UjR2H7WQZVQZi22/AYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVdHTjhBYlZTTkhZZnRaQmxWQm1MYmI4QmdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9kNWZmZTctM2I0OC00ZjgwLThkNmEt
MzE3YzJmYjBhMzViLzEvVVdHTjhBYlZTTkhZZnRaQmxWQm1MYmI4QmdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9kNWZmZTctM2I0OC00ZjgwLThkNmEtMzE3YzJmYjBhMzVi
LzEvVVdHTjhBYlZTTkhZZnRaQmxWQm1MYmI4QmdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATgxLU6vt
jpnvc4Bi/rZTvKQyfNDVDEvFDGzZvUjlmmDV//qiH/8e213aygr92c9Pmp9yJghn
jWeh1FGT/sjMrlrQCtrGvPtRudI0u7+t2po41Csx+UcBi60GZ6tO240RSQBPNegP
UIrb/dUNq8VkHQ4fyKeCbF2P6AKgdnhPheWDfJHhHkgQnjomLOOjTCmO0JBH9XvE
DH1dsI9x0k5bz9ia3d+/bmqlTDJYdjqx45Nd0Ag0wsjunIivcmo4N2PWzznxr1qb
2h6pauuyo17lKxxA+ZQkq0qXyDZ0xzbBKqAFPprAXfvqLZ3ie+YPm7V6RTexu5OE
UqPIjgANaDsvuQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:40:53 2026 by rpki-client