Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
File:                     uSEnfz55VKSvVSCpkEL7CJOvgE0.mft (raw, json)
Hash identifier:          CH5ET+yJY9zu5a/TIdjaR4dmedl1aN9NWcz++3yb65U=
Subject key identifier:   C9:B5:33:F7:84:7E:6F:79:0B:B7:C2:87:8B:36:0F:C7:E4:CB:5A:DC
Authority key identifier: B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D
Certificate issuer:       /CN=b921277f3e7954a4af5520a99042fb0893af804d
Certificate serial:       019CE55ABEB992FD5CCA431CD99EC219AC40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
Manifest number:          1865
Signing time:             Fri 13 Mar 2026 04:00:55 +0000
Manifest this update:     Fri 13 Mar 2026 04:00:55 +0000
Manifest next update:     Sat 14 Mar 2026 04:00:55 +0000
Files and hashes:         1: 7XorW7ITUOWgP4pU38fX3RKpcv0.roa (hash: dhKstKlCZm4b7W0PXvIWJClLT8IvcIHMNCKR+Y++DYI=)
                          2: hTUAMk4ivW-zcf6qV0iH6m50Tko.roa (hash: VBCrCjN466HYq/3fbWnNr2nU6AFrUJpSz4d+MsDsH6k=)
                          3: po2AjEIA0cEB2DRz3ItNN0tLtJA.roa (hash: emEIyu5B7Cay8ES1oJZR9gyFPVy8pKl4tqO8qQcgwDQ=)
                          4: uSEnfz55VKSvVSCpkEL7CJOvgE0.crl (hash: W5sdOWcsT0fD3OXQevYyHuGaxDmbGnk39khvm+jg3G8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 04:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:5a:be:b9:92:fd:5c:ca:43:1c:d9:9e:c2:19:ac:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b921277f3e7954a4af5520a99042fb0893af804d
        Validity
            Not Before: Mar 13 04:00:55 2026 GMT
            Not After : Mar 14 04:00:55 2026 GMT
        Subject: CN=c9b533f7847e6f790bb7c2878b360fc7e4cb5adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:65:10:14:80:43:ab:c5:c0:09:55:b9:e0:8b:
                    3f:09:79:89:35:32:41:20:0c:f8:4e:5e:db:ca:fd:
                    0b:da:71:f3:b1:8b:2f:92:bb:e0:3b:d9:fe:f9:2b:
                    33:c5:6c:c7:47:3e:d9:cc:cc:ba:d2:e1:cf:27:de:
                    44:8e:37:1e:9d:b2:08:83:d6:41:35:08:3e:4c:4f:
                    33:b8:7d:18:c3:cb:da:f9:96:62:24:32:fb:a6:64:
                    02:9a:de:7a:f0:d7:91:89:5a:5b:18:e0:0a:6d:32:
                    dc:08:56:1c:2c:48:c2:5f:35:2f:aa:94:b3:8b:3a:
                    11:13:fe:e9:25:9f:44:97:d5:ac:7d:11:8e:57:aa:
                    25:fb:2e:dd:e0:48:41:c0:af:7f:71:1b:c4:f3:3d:
                    1d:cc:9b:71:bc:56:7e:7c:bc:cb:e5:dd:eb:8f:1c:
                    1e:8f:b5:16:28:b9:5a:cf:6d:6e:d4:ca:3c:bb:9f:
                    44:45:b9:86:86:4c:42:85:bb:f7:ba:e6:81:af:51:
                    52:91:33:26:84:1b:b2:0c:1e:99:a2:37:c6:b9:a2:
                    ad:fe:ba:aa:f7:bf:e6:ec:84:15:09:e8:27:a3:78:
                    b7:73:00:49:28:d2:f6:bc:ae:bb:b5:ec:33:55:b5:
                    c8:82:6b:df:32:73:4d:15:d8:a0:6e:d3:f7:00:2c:
                    d7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:B5:33:F7:84:7E:6F:79:0B:B7:C2:87:8B:36:0F:C7:E4:CB:5A:DC
            X509v3 Authority Key Identifier:
                keyid:B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:72:1c:8f:8c:29:71:b8:7f:6d:45:cb:eb:16:0f:d1:aa:d7:
         3a:92:6b:19:c7:4b:82:65:a3:c4:d2:34:c2:bd:6e:de:56:fe:
         93:62:1d:25:71:2b:19:ff:e0:2d:93:fb:57:0e:4f:50:73:30:
         91:de:32:d4:18:bd:e2:85:fd:ca:5a:3d:d0:da:86:20:d0:bf:
         89:f7:61:ce:1e:39:5a:9e:79:09:ce:dd:31:ad:55:4d:7a:77:
         5d:87:dd:35:55:4f:ad:4b:30:f1:2a:53:b2:0c:3a:2b:92:db:
         35:81:7c:22:07:aa:80:20:36:8a:be:2e:a5:cc:cc:28:3b:d3:
         c5:ab:95:0f:3e:01:19:ce:17:9a:23:1a:42:1d:62:43:db:2c:
         71:bd:9a:ba:3e:48:c9:30:cb:45:a5:c0:95:9f:33:29:ac:61:
         07:ab:19:dc:49:75:78:7b:5a:94:5b:3c:5a:66:02:09:dc:c6:
         f6:e0:84:c1:9c:90:d8:a0:27:4e:67:49:ed:0d:d0:2e:3c:46:
         92:dc:ed:45:5d:db:8c:23:42:ff:fb:d2:6b:a7:a5:2f:1c:b9:
         4e:1a:73:b0:d5:7c:07:d8:81:e1:a2:09:f1:8d:7a:c6:59:15:
         cc:2d:0e:cb:f8:02:e5:bf:70:56:f3:de:fa:39:f1:e9:f2:fe:
         dc:0c:cc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:58:31 2026 by rpki-client