Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
File:                     UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft (raw, json)
Hash identifier:          OTDv7BV7jHobMWnyMpNcMLIQ4gls+S6fRDh5sJbTBp8=
Subject key identifier:   76:3E:40:01:94:CC:EC:A5:C2:28:7E:11:BC:B6:6F:02:D8:97:B9:76
Authority key identifier: 50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
Certificate issuer:       /CN=509df728d1b46634054972d2945fda58073b5762
Certificate serial:       019CE3DA85DAA0F1111526683751D51D330D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
Manifest number:          1869
Signing time:             Thu 12 Mar 2026 21:01:14 +0000
Manifest this update:     Thu 12 Mar 2026 21:01:14 +0000
Manifest next update:     Fri 13 Mar 2026 21:01:14 +0000
Files and hashes:         1: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl (hash: JntQ/3rmb+aa1KpGH4u9rmRKv73J4uWPCmm1pa6upNQ=)
                          2: YiTZyM0LJDlibzSScA19n-r_1NA.roa (hash: xUwCbyrQAmjQ9KEmQXtJqtnkqDlVNHnF+1vzDoqaWUE=)
                          3: iLi7f9ZUhRFIePAx_CbpyKFYVLY.roa (hash: +jK5YhwAWuiSD7jiuyksRnOSQ26Q7wRKEX5irQTiJO4=)
                          4: jaFu9pBfM8muxEa6Z1M7bqPV5TY.roa (hash: D7hQEIQMJfA1ZdopDczTPfE2hg2zaIc0IFSTi8hUD0k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e3:da:85:da:a0:f1:11:15:26:68:37:51:d5:1d:33:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509df728d1b46634054972d2945fda58073b5762
        Validity
            Not Before: Mar 12 21:01:14 2026 GMT
            Not After : Mar 13 21:01:14 2026 GMT
        Subject: CN=763e400194cceca5c2287e11bcb66f02d897b976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fc:80:55:12:60:ea:1b:76:65:d9:a8:c7:70:
                    a4:8d:28:78:7d:a4:40:ce:6d:e6:bd:ce:f1:c9:09:
                    51:45:47:c8:02:94:68:32:bf:95:3b:24:13:92:78:
                    48:32:a0:bd:87:ed:b3:70:1d:0a:0d:42:08:40:4d:
                    e9:88:6f:db:63:34:6b:cd:1b:dd:ce:f8:5f:c0:1f:
                    a5:aa:ec:b0:7b:09:78:cf:cf:9a:09:e5:51:3c:b3:
                    ef:a8:cf:58:c6:45:50:ee:1f:80:83:aa:46:21:70:
                    c0:38:97:2f:32:87:13:b0:e5:72:0a:4a:40:94:bf:
                    5e:d5:f7:f5:0b:aa:20:8b:47:60:92:23:34:70:0a:
                    d4:5d:d2:45:a1:9e:b4:ce:90:3b:61:a6:ec:bf:24:
                    95:71:13:37:18:68:7a:c3:9d:fd:30:6c:1f:83:fb:
                    1d:e1:87:dd:c7:94:83:57:aa:75:16:c1:7d:09:b4:
                    38:69:55:f7:87:ec:00:02:4f:bc:19:8c:ce:2b:58:
                    7b:d4:97:7e:e8:69:50:2f:d0:53:3c:fc:6f:bc:ad:
                    67:d1:77:cb:e7:a7:23:c5:3a:58:73:91:e7:a2:0d:
                    a0:9f:dc:35:c3:f2:0a:28:85:41:3b:76:b8:c0:71:
                    6e:07:81:36:94:b7:41:1a:25:42:25:eb:e0:f7:4e:
                    11:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3E:40:01:94:CC:EC:A5:C2:28:7E:11:BC:B6:6F:02:D8:97:B9:76
            X509v3 Authority Key Identifier:
                keyid:50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:04:21:d3:4e:f6:ec:ee:3b:1f:74:a6:d3:18:a3:35:f2:45:
         0a:ec:3d:1b:df:86:1f:3b:e5:ef:98:b2:90:b7:b3:d8:31:02:
         6d:4e:d7:a8:f3:bd:72:17:7a:0d:28:8c:05:24:79:4b:cb:18:
         4f:da:16:7b:d7:59:40:26:7d:40:b7:30:1f:c2:32:c4:70:4f:
         a6:d9:62:c5:c3:2b:c5:e1:b2:16:0f:b7:de:83:3a:46:e2:9b:
         71:40:e5:ec:77:1c:52:60:d9:a8:35:60:92:01:3b:2c:6f:00:
         6f:50:ef:4e:39:54:10:0b:8a:20:92:81:ed:48:1d:f6:9c:0f:
         b9:53:f6:cd:0d:b5:a4:0e:15:fa:d5:9d:f3:ce:9b:19:93:ef:
         94:5a:61:f8:ea:6e:66:59:b5:66:47:2b:57:43:eb:f0:27:21:
         17:9a:27:fa:d0:15:bf:3c:4f:9e:30:71:10:61:61:50:d8:7b:
         8c:eb:ac:99:f0:14:74:5e:57:12:78:ec:45:28:75:eb:31:a5:
         49:97:02:50:d4:2c:21:a7:af:ae:3d:05:6a:ba:ab:d8:d8:df:
         f4:ea:e3:73:f8:e5:43:42:61:90:eb:89:29:22:4a:81:00:f8:
         d9:fc:26:d5:b1:52:a8:3e:89:5c:02:01:97:40:a6:e5:28:62:
         09:f4:e3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 03:26:02 2026 by rpki-client