Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
File:                     1UbiRDDbqJvc4ixr8ygYy95rvKA.mft (raw, json)
Hash identifier:          6ymm9nc7EICGxLkmZHiLKtF4dbNBi84mAJEdlegkZBQ=
Subject key identifier:   64:55:59:9E:D3:DD:60:14:7E:57:79:D1:9A:0E:32:BC:D7:E1:0A:83
Authority key identifier: D5:46:E2:44:30:DB:A8:9B:DC:E2:2C:6B:F3:28:18:CB:DE:6B:BC:A0
Certificate issuer:       /CN=d546e24430dba89bdce22c6bf32818cbde6bbca0
Certificate serial:       019D389BFAF464057C355BE9CC5C78C4B39A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
Manifest number:          188F
Signing time:             Sun 29 Mar 2026 08:00:39 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:39 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:39 +0000
Files and hashes:         1: 1UbiRDDbqJvc4ixr8ygYy95rvKA.crl (hash: Hq+tQEmj+F7TdbvarRbK6vc0etMcLZTQb6RV75BTsus=)
                          2: C4dhhSdCne6HfKBYrO0fMDCR52U.roa (hash: uDVsLBMCBkiLe3jkQqb41lNCpW9vDxKBn3Ey847tq5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9b:fa:f4:64:05:7c:35:5b:e9:cc:5c:78:c4:b3:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d546e24430dba89bdce22c6bf32818cbde6bbca0
        Validity
            Not Before: Mar 29 08:00:39 2026 GMT
            Not After : Mar 30 08:00:39 2026 GMT
        Subject: CN=6455599ed3dd60147e5779d19a0e32bcd7e10a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:48:3e:7e:6a:c3:f6:eb:7a:55:3d:bd:fc:03:
                    b3:b1:4c:05:72:db:29:ef:da:a5:da:bd:c2:c0:cb:
                    86:c2:8d:3d:85:e4:bb:d9:a4:8f:49:93:25:70:88:
                    a4:03:2a:74:38:29:b8:8f:e5:9a:1c:a8:12:4f:c1:
                    46:9b:c4:de:73:01:6b:f4:e7:72:02:dd:67:f3:4b:
                    89:a6:12:15:5e:df:66:44:89:bd:b4:59:06:63:da:
                    04:59:c0:4f:c3:9f:d5:77:0e:85:66:f2:8b:cc:e8:
                    83:2a:d9:fd:b3:90:c6:6c:29:7f:bc:79:3c:b7:6f:
                    fa:19:a7:1e:22:90:2e:b2:1e:1d:c5:a1:cf:02:a0:
                    19:a8:45:d3:54:d9:d2:7c:a2:be:07:f7:25:0b:8b:
                    ff:d4:92:c6:e0:d0:eb:98:3b:61:e9:00:e3:20:24:
                    b8:82:24:9f:0d:00:89:88:f8:01:7c:18:64:64:c4:
                    be:bd:83:ed:48:aa:bc:f0:73:9c:34:c1:73:4e:9c:
                    d7:4e:90:4b:7c:18:00:42:ea:36:c6:8c:26:e1:1f:
                    04:b2:4f:36:34:43:1e:74:77:fb:d7:9e:74:96:b7:
                    48:2b:4e:15:28:b7:07:13:e5:92:d1:8b:0a:f6:af:
                    b9:41:17:18:fd:66:f4:b4:6b:d0:d0:41:90:17:a2:
                    6c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:55:59:9E:D3:DD:60:14:7E:57:79:D1:9A:0E:32:BC:D7:E1:0A:83
            X509v3 Authority Key Identifier:
                keyid:D5:46:E2:44:30:DB:A8:9B:DC:E2:2C:6B:F3:28:18:CB:DE:6B:BC:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:b8:6b:97:47:b1:f1:6e:25:95:62:39:e2:1d:6f:e0:c2:d8:
         55:70:bd:99:8c:a6:80:1e:7e:ce:13:79:86:b7:18:27:86:46:
         57:11:7d:c1:45:32:94:41:4b:11:cb:0a:1a:23:a8:b6:5f:32:
         cf:b1:2f:28:6c:2a:cf:ab:65:24:6a:ea:df:8e:2a:72:06:97:
         cd:2e:66:f3:58:45:8a:dc:ea:e8:43:be:51:9e:c7:f0:00:cc:
         ea:b8:a8:14:05:73:e9:03:ba:c3:72:87:99:6b:9c:63:c2:33:
         d1:8a:19:40:19:80:ef:84:8d:93:cc:f6:f9:fc:13:d2:a9:18:
         25:4b:9c:36:44:c6:20:40:4f:c2:c2:a9:3b:87:12:8b:a0:d6:
         5d:d5:70:10:56:07:10:64:e9:72:d2:8c:c2:e9:63:5c:06:dd:
         07:17:1c:4b:d0:0d:4a:82:31:a4:82:e9:20:2d:32:8d:4d:b2:
         48:e9:8e:12:ba:73:89:3a:57:92:12:68:ce:ce:59:e2:d8:51:
         e1:77:cb:fe:5d:b3:dc:16:ca:a2:be:77:99:2f:5e:08:57:8a:
         3e:2b:8d:95:d5:bd:19:ff:a1:28:36:58:32:cc:1b:61:e6:2a:
         46:3f:40:be:fd:1b:e2:a7:50:02:31:9f:5c:f1:12:39:b6:5f:
         6f:59:45:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:22 2026 by rpki-client