Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
File:                     UquWU4x2TSMgXTMr4Te94EYvG4w.mft (raw, json)
Hash identifier:          AdxGsAIjAhhj0hx/mcrYtbd1qXjZiG7T5Sq5mxph0j8=
Subject key identifier:   06:2B:3C:61:8F:B7:2C:7E:05:0B:4D:C6:8E:D9:15:67:D9:DC:68:3C
Authority key identifier: 52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C
Certificate issuer:       /CN=52ab96538c764d23205d332be137bde0462f1b8c
Certificate serial:       019D37C05CEC7DEFFE06868371DB935E5267
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
Manifest number:          16D5
Signing time:             Sun 29 Mar 2026 04:00:46 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:46 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:46 +0000
Files and hashes:         1: 02UbpjggiD2hCuBROuOMzSrBNes.roa (hash: oD92ZLodntYyRevIXaKbN61NlRaYP5OLaBNueXJo8rI=)
                          2: UquWU4x2TSMgXTMr4Te94EYvG4w.crl (hash: 5ob8t0hHbCAJCdz2GCEEvZWoqVxd+SWeNZD2hNLLMxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:5c:ec:7d:ef:fe:06:86:83:71:db:93:5e:52:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52ab96538c764d23205d332be137bde0462f1b8c
        Validity
            Not Before: Mar 29 04:00:46 2026 GMT
            Not After : Mar 30 04:00:46 2026 GMT
        Subject: CN=062b3c618fb72c7e050b4dc68ed91567d9dc683c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:92:da:d7:0e:b5:58:86:34:e9:3d:5d:a5:34:
                    08:34:d0:a9:fc:f0:fc:7c:56:ec:4a:29:60:02:28:
                    be:12:8c:2e:81:11:56:ab:c9:36:d2:52:fb:f2:bf:
                    c8:48:fd:a9:de:96:96:4c:b3:84:d6:a0:6e:12:75:
                    cd:9c:df:27:98:cf:6e:f4:95:9b:34:91:b8:73:ee:
                    e4:97:39:ff:34:9f:c3:55:40:ed:a1:a9:eb:24:dc:
                    96:a6:34:38:ca:9b:f9:32:fe:b1:b7:1d:ea:ad:25:
                    49:d6:74:2e:a1:81:91:5f:42:fe:fd:05:4e:46:55:
                    10:0b:3d:96:4c:f4:4a:4f:c5:4c:db:be:6f:5a:1e:
                    ae:0d:4a:61:d6:23:80:49:31:b6:db:91:06:f6:b8:
                    39:66:1f:99:ba:85:f9:61:5a:57:0c:bb:05:64:48:
                    2b:ab:8d:47:61:bc:3c:51:a2:63:8d:36:27:78:53:
                    79:d7:d6:5f:3a:af:c2:22:d0:a0:28:13:01:9d:14:
                    6c:d9:d8:e6:e9:04:30:d9:93:09:98:5f:b6:f3:ce:
                    1e:5c:76:2f:21:a2:47:bb:53:c7:68:0a:99:b0:08:
                    c5:4b:2d:0b:7a:b2:99:f9:59:81:d7:30:6a:0f:4d:
                    0d:e8:be:83:7c:6a:14:d0:15:c3:be:93:cc:02:95:
                    df:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:2B:3C:61:8F:B7:2C:7E:05:0B:4D:C6:8E:D9:15:67:D9:DC:68:3C
            X509v3 Authority Key Identifier:
                keyid:52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:10:9c:42:19:88:19:68:e1:bd:cc:f9:37:52:9e:52:d5:f2:
         44:32:0d:a5:1d:81:0f:b9:72:51:39:e1:31:c1:1d:57:7f:42:
         2f:9e:34:b4:24:d4:76:e7:6b:af:cd:38:a5:2d:3b:91:d5:a7:
         98:da:98:a3:21:ef:57:f2:f1:52:77:52:fd:86:58:c7:5f:94:
         6a:fb:5d:17:7a:ee:a6:70:8b:b6:1a:a3:da:63:40:41:87:e9:
         1f:f2:bf:97:ab:6d:c1:fc:70:12:fb:f2:23:62:fa:cb:14:93:
         4d:d7:4f:00:fb:37:39:be:4f:b9:a0:e5:e2:28:db:f6:ec:6d:
         c0:64:3f:ed:71:38:13:71:db:60:89:41:79:d6:5f:4d:71:8c:
         b0:11:f0:2c:cc:d1:3c:10:20:db:48:6d:ee:36:83:8e:f0:ec:
         cb:ec:7b:9e:bf:b3:84:f1:f5:d5:56:21:5e:40:ec:c6:37:e3:
         cf:5f:ff:08:48:ef:0e:0a:98:ed:1a:08:f4:30:8b:fd:dd:e9:
         fd:3e:37:4b:d0:7b:5b:26:bb:6e:98:f2:97:54:d9:23:8c:95:
         e4:01:c8:fa:98:bf:36:93:61:e6:34:79:f1:ab:80:b5:09:3c:
         d4:ae:40:aa:9e:ef:dc:1b:bc:7d:87:76:46:2e:79:ba:f0:f2:
         39:04:b2:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wFzsfe/+BoaDcduTXlJnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYWI5NjUzOGM3NjRkMjMyMDVkMzMyYmUxMzdiZGUwNDYy
ZjFiOGMwHhcNMjYwMzI5MDQwMDQ2WhcNMjYwMzMwMDQwMDQ2WjAzMTEwLwYDVQQD
EygwNjJiM2M2MThmYjcyYzdlMDUwYjRkYzY4ZWQ5MTU2N2Q5ZGM2ODNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJLa1w61WIY06T1dpTQINNCp/PD8
fFbsSilgAii+EowugRFWq8k20lL78r/ISP2p3paWTLOE1qBuEnXNnN8nmM9u9JWb
NJG4c+7klzn/NJ/DVUDtoanrJNyWpjQ4ypv5Mv6xtx3qrSVJ1nQuoYGRX0L+/QVO
RlUQCz2WTPRKT8VM275vWh6uDUph1iOASTG225EG9rg5Zh+ZuoX5YVpXDLsFZEgr
q41HYbw8UaJjjTYneFN519ZfOq/CItCgKBMBnRRs2djm6QQw2ZMJmF+2884eXHYv
IaJHu1PHaAqZsAjFSy0LerKZ+VmB1zBqD00N6L6DfGoU0BXDvpPMApXfuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYrPGGPtyx+BQtNxo7ZFWfZ3Gg8MB8GA1UdIwQY
MBaAFFKrllOMdk0jIF0zK+E3veBGLxuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXF1V1U0eDJUU01nWFRNcjRUZTk0RVl2RzR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8xOWI4MTItYjFhNC00OTJhLThiNDUt
MzhhZDQxNzlmZjI5LzEvVXF1V1U0eDJUU01nWFRNcjRUZTk0RVl2RzR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8xOWI4MTItYjFhNC00OTJhLThiNDUtMzhhZDQxNzlmZjI5
LzEvVXF1V1U0eDJUU01nWFRNcjRUZTk0RVl2RzR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAThCcQhmI
GWjhvcz5N1KeUtXyRDINpR2BD7lyUTnhMcEdV39CL540tCTUdudrr804pS07kdWn
mNqYoyHvV/LxUndS/YZYx1+UavtdF3rupnCLthqj2mNAQYfpH/K/l6ttwfxwEvvy
I2L6yxSTTddPAPs3Ob5PuaDl4ijb9uxtwGQ/7XE4E3HbYIlBedZfTXGMsBHwLMzR
PBAg20ht7jaDjvDsy+x7nr+zhPH11VYhXkDsxjfjz1//CEjvDgqY7RoI9DCL/d3p
/T43S9B7Wya7bpjyl1TZI4yV5AHI+pi/NpNh5jR58auAtQk81K5Aqp7v3Bu8fYd2
Ri55uvDyOQSyJA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:12 2026 by rpki-client