Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
File:                     uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft (raw, json)
Hash identifier:          Yb+QjNwTVjowaL0OkH0erzMq/Q3oLrEnSp3Tf9rYVYg=
Subject key identifier:   C1:54:0C:19:52:23:70:63:8D:03:ED:73:60:69:5B:23:76:D2:8A:EE
Authority key identifier: B9:15:AF:59:D2:4F:59:A6:0D:97:C1:C8:8A:B9:79:A1:4C:58:0F:F4
Certificate issuer:       /CN=b915af59d24f59a60d97c1c88ab979a14c580ff4
Certificate serial:       019D389BE1E4AC11A50F1E2320B21CC22BB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
Manifest number:          1890
Signing time:             Sun 29 Mar 2026 08:00:33 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:33 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:33 +0000
Files and hashes:         1: PCvW1ckpHe2_MAKD0cVtAdNspsk.roa (hash: rrfhDBw/DD8F8L7MgUiMSbLyWY2JkGV4u6Ic+Ucoask=)
                          2: uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl (hash: aZsu+hZTW8+ju7v75ftRV61FbncgBBzJ6LJpZeOP9f8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9b:e1:e4:ac:11:a5:0f:1e:23:20:b2:1c:c2:2b:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b915af59d24f59a60d97c1c88ab979a14c580ff4
        Validity
            Not Before: Mar 29 08:00:33 2026 GMT
            Not After : Mar 30 08:00:33 2026 GMT
        Subject: CN=c1540c19522370638d03ed7360695b2376d28aee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4d:94:c6:f9:e9:ec:44:84:dd:42:d8:b8:12:
                    aa:5f:56:40:c1:ec:47:9d:06:ec:d3:29:d0:7c:33:
                    30:38:31:77:2a:74:48:17:32:4a:85:f7:e2:17:b5:
                    43:4f:35:40:83:d3:27:43:a7:ca:3b:2d:e0:69:34:
                    5d:88:d6:c1:27:2f:ea:43:ef:b5:59:72:d4:8a:c4:
                    d9:90:93:c9:45:fe:0a:40:8c:e3:ec:ec:8b:9c:b7:
                    25:03:6a:ed:f0:6b:83:14:a0:88:88:16:03:0e:0b:
                    35:88:1e:64:87:43:84:f4:f7:a5:e5:fb:0d:dc:a8:
                    6d:50:90:45:17:74:fe:f4:41:88:9a:9c:47:47:18:
                    c6:f7:84:49:ca:50:3a:1b:a0:51:63:64:09:6b:bd:
                    f4:c7:dd:c7:7a:1c:bd:aa:32:1a:20:61:d5:83:d9:
                    8e:0f:1c:6c:e2:45:2b:a5:18:bc:b6:c3:01:f2:0e:
                    93:94:79:77:70:60:51:c2:ec:1e:80:5c:2b:47:d7:
                    29:4c:4e:42:c1:51:f0:53:21:c5:9d:59:d5:60:14:
                    2c:4f:c8:de:48:e5:f4:50:d4:23:2c:eb:4d:9e:f6:
                    3c:c2:76:1a:0a:b9:c9:c5:4b:eb:02:44:aa:71:28:
                    dd:a7:76:cb:97:3a:36:6b:4b:06:f5:49:51:55:18:
                    3a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:54:0C:19:52:23:70:63:8D:03:ED:73:60:69:5B:23:76:D2:8A:EE
            X509v3 Authority Key Identifier:
                keyid:B9:15:AF:59:D2:4F:59:A6:0D:97:C1:C8:8A:B9:79:A1:4C:58:0F:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:3d:57:af:80:ee:f0:f7:a3:ad:22:1c:c9:e3:e6:ac:16:36:
         14:45:ac:62:29:e9:65:9a:20:14:f9:79:7f:ec:97:73:1c:da:
         ae:b7:84:d3:51:26:9b:bd:dd:7b:4a:ac:fe:64:9e:d0:b4:8c:
         38:57:69:a2:b3:7b:6d:6d:82:60:22:1c:63:da:a1:47:5a:0e:
         9d:68:4e:f3:a2:89:76:1d:24:e5:5a:9a:c9:25:2d:e0:d6:46:
         85:c0:b5:cf:c8:ed:d6:38:aa:e2:c3:35:7f:06:a9:d7:4b:18:
         d5:c0:1c:7c:d4:e9:5f:30:03:9f:7e:71:3c:bf:78:e1:c0:f0:
         3c:f2:8a:e5:af:e7:76:00:9a:5e:fe:46:5e:b6:3f:12:d5:7c:
         46:75:b3:4c:43:62:99:74:f9:b3:bd:61:fc:c0:18:92:e8:7e:
         75:83:e7:ab:40:ef:e4:ef:3e:c8:4c:22:64:7d:82:6a:7c:10:
         a9:ea:b1:3f:38:04:c0:b4:91:ca:ef:0d:0d:da:4b:6a:0c:42:
         9a:e2:02:ce:48:f8:71:3e:ac:74:b5:66:c1:32:05:d5:6a:7c:
         3d:be:c2:b0:74:b2:d8:3d:63:4a:c1:1b:58:c8:dc:d2:4f:1f:
         a2:f4:1c:ed:64:f9:08:12:f8:8b:77:37:b3:d7:34:9a:e3:55:
         df:b7:e5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:37 2026 by rpki-client