Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
File:                     UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft (raw, json)
Hash identifier:          inHYL6mgYvyR/Ehd14brRRhwbJIjgN1KnhAqQVvNBWY=
Subject key identifier:   6B:8C:1E:87:E2:65:04:3C:2A:E6:F6:82:C3:C4:2C:21:97:24:95:A4
Authority key identifier: 53:31:66:E3:F7:09:FB:3B:AC:A9:AE:79:AC:BE:C6:CA:1D:0F:C5:03
Certificate issuer:       /CN=533166e3f709fb3baca9ae79acbec6ca1d0fc503
Certificate serial:       019D39AEF6AFF7FC16DE111BF9BEC866D9CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
Manifest number:          0749
Signing time:             Sun 29 Mar 2026 13:01:00 +0000
Manifest this update:     Sun 29 Mar 2026 13:01:00 +0000
Manifest next update:     Mon 30 Mar 2026 13:01:00 +0000
Files and hashes:         1: QNgMd55aywiMLZtsj9Z58IeKCj0.roa (hash: eixq1ArtMYwW26hEsDnfya3+meCjclSqR3FpkWEnQTg=)
                          2: UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl (hash: 9+RPkb/fxA93plg4yJgqpOrApPZ7wIjwQA7v23izHnY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 13:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:ae:f6:af:f7:fc:16:de:11:1b:f9:be:c8:66:d9:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533166e3f709fb3baca9ae79acbec6ca1d0fc503
        Validity
            Not Before: Mar 29 13:01:00 2026 GMT
            Not After : Mar 30 13:01:00 2026 GMT
        Subject: CN=6b8c1e87e265043c2ae6f682c3c42c21972495a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2e:e8:29:e3:84:09:56:0b:8c:9b:07:b9:38:
                    97:eb:e7:b1:6f:51:d5:d2:4d:e2:26:a5:e8:29:df:
                    09:57:79:d4:58:a3:04:65:6d:0d:f8:1e:50:89:8b:
                    9c:cb:67:b3:51:5a:51:2c:fa:e2:c8:8f:c5:e9:71:
                    52:c3:8c:2a:e3:7b:cc:38:92:c5:e3:76:7b:67:14:
                    92:3f:ec:b8:84:f8:22:18:fa:a3:65:81:10:41:9b:
                    98:52:f0:d8:42:75:5b:e4:48:7d:71:49:76:3b:a5:
                    35:41:ad:cb:4b:35:37:83:d3:a2:e7:18:21:74:b9:
                    c3:93:46:a2:d9:50:fa:86:15:ef:78:a0:c7:ba:74:
                    3e:f0:7c:9a:e9:a6:54:3b:90:7e:ce:5e:c8:0a:9b:
                    12:89:a3:3f:29:5e:10:d0:12:97:7e:5e:d8:8f:6b:
                    57:86:f2:e2:48:42:07:7c:19:65:c4:3e:26:78:3f:
                    0c:d6:01:ea:6e:c3:bf:a9:29:c2:60:f7:1a:9a:be:
                    f6:6f:78:f6:d6:f5:74:1b:f0:ff:a9:3b:19:90:a2:
                    57:e6:4d:2a:71:b7:5e:f8:cb:85:b3:77:00:8a:ec:
                    16:9d:17:7e:6b:dd:a9:06:c2:b0:49:be:0d:ca:b0:
                    de:f9:ca:93:c6:5b:b7:4b:a0:1d:54:4d:b6:06:f5:
                    c0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:8C:1E:87:E2:65:04:3C:2A:E6:F6:82:C3:C4:2C:21:97:24:95:A4
            X509v3 Authority Key Identifier:
                keyid:53:31:66:E3:F7:09:FB:3B:AC:A9:AE:79:AC:BE:C6:CA:1D:0F:C5:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:29:ca:9b:e0:63:71:94:47:c2:e1:93:b6:8d:14:b1:28:2a:
         19:4e:a3:a3:bf:75:22:0b:5f:30:6a:e7:3c:d3:a4:28:c1:23:
         c6:49:54:86:f3:ec:6d:9a:57:35:07:70:93:09:29:bf:08:6f:
         96:c5:d1:2a:06:24:03:81:ef:d7:7c:0f:bb:0c:10:63:33:76:
         73:c8:25:fe:ba:8c:50:f8:78:79:82:19:ef:a0:c3:66:70:c3:
         24:67:78:da:f9:71:c0:5d:fd:d1:cf:71:ca:65:43:cd:e7:d9:
         25:b9:5c:bb:e7:db:4a:be:30:fb:ba:c1:27:8c:18:4f:32:06:
         62:d3:03:c9:df:74:9c:42:6b:f8:40:41:52:7a:ca:6b:80:fe:
         8d:99:75:8c:72:4d:94:4f:4b:2b:47:ab:57:43:9c:9c:31:b7:
         04:99:0b:63:6a:e8:2f:f8:7d:ad:4a:42:6b:fd:7e:cf:1b:80:
         78:21:b7:8a:37:0c:ab:43:a5:f4:9e:53:bb:32:94:1f:be:8c:
         66:50:71:e5:dc:79:27:8b:fd:ad:f5:fd:ff:26:c6:34:02:6d:
         0c:44:80:78:af:7f:fc:b5:30:e6:38:0e:8f:a5:4b:ea:c5:0e:
         6e:87:15:80:64:91:27:62:79:dd:d6:e4:f2:fc:aa:50:9e:09:
         b5:f0:65:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:25:34 2026 by rpki-client