Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft
File:                     Uwt27wq1VbyLB2H2BopE4QsrMfc.mft (raw, json)
Hash identifier:          kce34fRV8IQQhalTkrPO55iKR23DGR6yjAcb7N+bK/E=
Subject key identifier:   97:81:FA:7D:F4:03:4C:C9:E4:36:31:96:49:E6:C3:C6:47:0F:AC:4E
Authority key identifier: 53:0B:76:EF:0A:B5:55:BC:8B:07:61:F6:06:8A:44:E1:0B:2B:31:F7
Certificate issuer:       /CN=530b76ef0ab555bc8b0761f6068a44e10b2b31f7
Certificate serial:       019D36E4BCCE79D7B4690353D5B4B6B1F830
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uwt27wq1VbyLB2H2BopE4QsrMfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft
Manifest number:          188F
Signing time:             Sun 29 Mar 2026 00:00:53 +0000
Manifest this update:     Sun 29 Mar 2026 00:00:53 +0000
Manifest next update:     Mon 30 Mar 2026 00:00:53 +0000
Files and hashes:         1: 7qtrZvTgn0cpSEVLml8fcuthLe4.roa (hash: S4nLPxNgM6/xYB2o4ZydmxvSiUoLNOsPi+E4YsX/E2g=)
                          2: Uwt27wq1VbyLB2H2BopE4QsrMfc.crl (hash: 2Xo6NwLE3XgaVjBsVb8cOQZfnyrIku3tWSUXZcLT5lE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uwt27wq1VbyLB2H2BopE4QsrMfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 00:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:36:e4:bc:ce:79:d7:b4:69:03:53:d5:b4:b6:b1:f8:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530b76ef0ab555bc8b0761f6068a44e10b2b31f7
        Validity
            Not Before: Mar 29 00:00:53 2026 GMT
            Not After : Mar 30 00:00:53 2026 GMT
        Subject: CN=9781fa7df4034cc9e436319649e6c3c6470fac4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c6:69:bb:94:4e:3b:e9:07:b2:2a:31:ce:89:
                    af:76:ff:b7:ef:83:0b:65:8f:e3:b9:7f:f1:29:db:
                    cd:ff:69:27:60:1f:e5:59:71:05:de:4d:5d:ae:72:
                    11:03:dd:cf:3e:86:63:ab:bb:53:db:64:67:33:b7:
                    68:9a:a9:a8:2c:8b:c8:c9:3a:94:72:63:6a:14:df:
                    76:65:89:2d:34:3e:27:5d:ab:00:51:4c:28:38:be:
                    82:6e:7c:40:6b:7c:9a:84:09:2e:b0:29:02:a1:f5:
                    c4:4b:22:4f:83:32:0f:10:c3:da:24:d1:7f:2b:5d:
                    52:27:e9:0f:95:d6:03:1e:12:22:db:0c:e5:d6:63:
                    f7:35:8c:27:69:18:05:d5:6e:12:21:1b:d8:68:b9:
                    3d:c6:ae:6e:6e:dc:7e:37:a1:be:85:97:04:2f:ec:
                    dd:01:3c:1d:c8:86:74:4d:df:c4:73:13:70:ed:b1:
                    b5:5d:c3:46:2f:91:a4:ec:24:17:36:a2:51:a5:65:
                    5b:6c:35:f9:be:8d:e6:64:2d:ef:5b:f8:4f:dc:06:
                    11:da:69:d6:f7:d5:3a:f4:58:ba:43:b9:7a:81:19:
                    16:84:14:fa:d7:f4:68:30:39:d8:3f:e7:1d:5c:fe:
                    39:db:c3:bf:52:86:87:fc:db:76:bf:3d:38:f2:cf:
                    d3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:81:FA:7D:F4:03:4C:C9:E4:36:31:96:49:E6:C3:C6:47:0F:AC:4E
            X509v3 Authority Key Identifier:
                keyid:53:0B:76:EF:0A:B5:55:BC:8B:07:61:F6:06:8A:44:E1:0B:2B:31:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uwt27wq1VbyLB2H2BopE4QsrMfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:30:56:55:94:61:68:95:0e:4b:f9:53:d9:fa:0b:d8:a4:92:
         58:9f:8a:f5:45:9e:62:b9:00:5c:a7:f4:75:ff:5f:d3:3d:68:
         b4:b9:19:4c:b8:3f:9d:f5:b7:19:d9:b9:0a:22:dc:f0:9a:4a:
         76:3b:56:28:42:d2:9a:90:49:c8:a6:64:ef:70:98:84:56:fd:
         32:76:ed:c3:f9:1b:51:81:7f:74:1b:6f:49:a1:80:7d:96:64:
         1c:f0:88:a8:d2:47:6e:00:b7:f3:e7:2f:f4:1b:1a:72:0f:7e:
         7f:ab:18:21:54:90:a5:2f:9b:04:b5:69:af:7a:39:75:31:2b:
         be:52:b4:52:d3:3e:06:9a:42:94:c7:46:e3:eb:45:48:96:dd:
         6a:fe:5c:7b:dd:bb:a7:91:b3:62:19:52:b7:f0:7a:9d:73:f2:
         e3:d2:89:ca:92:96:16:09:5a:54:c1:e1:87:48:e6:42:94:e3:
         6c:92:28:d6:d8:cd:c9:fb:d3:a1:85:2f:34:96:be:75:f8:92:
         d5:8c:9a:94:a5:2f:7a:2c:0a:9e:cd:80:d9:8e:50:30:06:b4:
         2e:d2:26:d2:71:3c:6d:0f:1a:ad:6b:3c:5f:a2:b9:2a:50:ed:
         20:f1:21:73:ef:4c:63:fd:df:5a:46:bb:56:cf:fc:ed:99:a3:
         04:57:f7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:30 2026 by rpki-client