Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
File:                     UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft (raw, json)
Hash identifier:          UWC8N6VKWCAqjJP0OxkaSPEZt2nFsxykqHJdDgRNJWo=
Subject key identifier:   4F:48:B0:73:89:06:77:47:B8:2F:AD:77:C9:26:19:86:D3:30:B2:FB
Authority key identifier: 50:2C:37:E7:EC:B5:9B:66:7F:A8:2E:CF:09:3E:5E:D8:76:61:A8:E2
Certificate issuer:       /CN=502c37e7ecb59b667fa82ecf093e5ed87661a8e2
Certificate serial:       019D38659F53601647383AC64E08EED2A336
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
Manifest number:          07C5
Signing time:             Sun 29 Mar 2026 07:01:17 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:17 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:17 +0000
Files and hashes:         1: K1qLnnrsBytcCd672tmGsMqXxYM.roa (hash: chgkC32Z3UMGB9mkkwLQsJIKs1LFl1ohHwqbg9qIaPw=)
                          2: UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl (hash: cEg2XbwaYmiBQcqgNfpEISCKngRLttUmnmFufqBKwFU=)
                          3: X9lVyI85cWemgsO6nj6KNiyvWhg.roa (hash: fAtsDmjcFGxCPbNfuOqgmjuDJEqjBeXCafa+9VtJFx4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:9f:53:60:16:47:38:3a:c6:4e:08:ee:d2:a3:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=502c37e7ecb59b667fa82ecf093e5ed87661a8e2
        Validity
            Not Before: Mar 29 07:01:17 2026 GMT
            Not After : Mar 30 07:01:17 2026 GMT
        Subject: CN=4f48b07389067747b82fad77c9261986d330b2fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:70:33:29:e9:e8:2f:b7:ef:e1:78:e9:12:3c:
                    aa:e1:03:6f:ef:10:6f:87:0b:93:45:28:2b:48:38:
                    36:30:33:b6:c5:39:e7:64:a0:a0:e0:c0:fa:2d:c6:
                    d0:24:ee:34:2f:9d:0d:a2:0f:b0:2a:21:95:59:be:
                    af:34:3e:69:32:9a:c2:88:25:49:07:e9:b6:57:22:
                    c0:e3:26:9e:b9:4c:1c:58:69:8e:e4:a2:8a:94:1e:
                    13:ed:b8:ac:91:33:33:67:fd:a7:cb:c0:9e:5f:6f:
                    c7:2a:d3:b4:ba:23:b3:82:64:c0:06:ae:6c:4d:1e:
                    52:f7:15:7e:3f:b4:37:9e:fc:79:51:b2:d4:56:47:
                    d8:06:42:cb:07:b4:b4:9d:33:3c:bb:7f:16:54:c9:
                    90:a1:c5:67:90:f6:81:75:c4:a1:46:90:70:f1:f9:
                    12:76:6d:c5:e5:33:0e:fd:76:64:d8:df:ce:ed:4a:
                    a0:d3:14:18:96:a5:55:1d:36:d9:f6:51:9a:b6:04:
                    6a:a5:93:89:65:dc:29:a2:44:aa:8a:67:ac:f0:3a:
                    48:26:c7:6e:6c:cc:ba:c1:0f:79:a5:43:87:d4:b8:
                    81:ca:db:c1:b6:a8:8c:84:25:0b:96:18:d3:13:1b:
                    e9:88:75:e7:1c:ab:27:4e:db:ca:20:32:58:54:c6:
                    0b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:48:B0:73:89:06:77:47:B8:2F:AD:77:C9:26:19:86:D3:30:B2:FB
            X509v3 Authority Key Identifier:
                keyid:50:2C:37:E7:EC:B5:9B:66:7F:A8:2E:CF:09:3E:5E:D8:76:61:A8:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:17:7a:98:1a:75:38:74:1d:bf:6c:00:02:b0:27:cd:c2:66:
         77:f7:03:0f:d2:3e:1e:66:1e:2f:6c:32:c9:b6:18:80:c6:46:
         4e:7b:b9:85:ca:32:90:d8:e7:df:9b:7c:73:ef:01:39:87:be:
         48:44:d2:9c:43:79:96:39:7c:ad:d9:20:b6:4b:6f:33:8d:d0:
         1a:e1:cb:f2:cc:10:8c:9e:f2:d9:62:a9:d2:81:b1:c0:4f:ad:
         66:5a:5a:21:d7:ec:24:0b:15:92:56:27:db:8e:7a:e9:e0:64:
         76:f0:34:fa:de:b3:ef:c3:a4:59:07:c0:40:bc:1f:2c:80:f2:
         d3:0d:86:9a:bf:1d:99:9c:fc:d5:26:dd:db:1b:e6:65:59:70:
         28:a4:44:e4:1c:a5:f3:bb:72:39:a8:fd:0f:76:33:0e:60:ee:
         44:c8:f6:cc:46:e5:06:94:51:e3:5c:ea:a0:02:be:06:be:3a:
         8b:1d:68:e7:8e:6b:2e:7b:86:c4:3f:28:48:56:b2:e6:ef:16:
         c9:8b:89:32:e5:58:69:d4:f0:7e:25:7c:94:6f:f1:0d:28:c0:
         ff:e6:8d:0f:c0:f6:c1:11:91:7c:c8:c4:a8:17:72:b4:7b:e0:
         37:62:1b:0a:5d:66:76:71:e1:ec:cd:67:ae:5d:02:c8:46:55:
         7b:d7:3e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:46 2026 by rpki-client