Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.mft
File:                     UZ6XRwxj_aFMMmXrdBpw46i2mv8.mft (raw, json)
Hash identifier:          NsngqXBHKzuPJYTqdt5l36xoPg9t83AMV9t7maLu1OA=
Subject key identifier:   C7:14:8B:CC:96:63:F9:7A:A2:14:DE:1C:4D:E8:C4:0F:ED:E8:42:C2
Authority key identifier: 51:9E:97:47:0C:63:FD:A1:4C:32:65:EB:74:1A:70:E3:A8:B6:9A:FF
Certificate issuer:       /CN=519e97470c63fda14c3265eb741a70e3a8b69aff
Certificate serial:       019D382E50EC6DE361547F42092655AB50B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UZ6XRwxj_aFMMmXrdBpw46i2mv8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.mft
Manifest number:          1893
Signing time:             Sun 29 Mar 2026 06:00:52 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:52 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:52 +0000
Files and hashes:         1: HJ4SBz_ou8raAnu7vjA9gto44h0.roa (hash: 31d6vC056XaUqpvSPD3bbBHg7NDJNbf/A6mjtFCVyiI=)
                          2: PH2Kdy1sC8HQ8PKYpAYdkdpdwCA.roa (hash: 2ZEPruJZ71eps2IyLVuADoW6OpOr0mtvk4b7WSmQax4=)
                          3: UZ6XRwxj_aFMMmXrdBpw46i2mv8.crl (hash: woKFDaSx6LqsGzCh1RubgnJUX5MGat3jpTk6n0M7n6w=)
                          4: pMNTA6pAmgcMgl8b6e9JeHIKlMY.roa (hash: sQxhTOTD/GUr5MiuJD9ZZ0PcinvbqcgtboX08lOVang=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UZ6XRwxj_aFMMmXrdBpw46i2mv8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:50:ec:6d:e3:61:54:7f:42:09:26:55:ab:50:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=519e97470c63fda14c3265eb741a70e3a8b69aff
        Validity
            Not Before: Mar 29 06:00:52 2026 GMT
            Not After : Mar 30 06:00:52 2026 GMT
        Subject: CN=c7148bcc9663f97aa214de1c4de8c40fede842c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:38:e4:dd:07:a5:58:17:3e:82:99:db:3c:cd:
                    de:41:2d:14:3c:ee:7d:66:7c:19:e5:c0:e1:27:7c:
                    35:18:dc:f6:46:01:ad:ab:c6:c0:ef:31:a3:89:d6:
                    f1:5b:c9:0c:c7:fb:42:85:b6:07:52:be:68:3f:be:
                    1a:71:2d:58:ae:52:7d:3c:9e:61:83:be:6b:e5:83:
                    eb:18:fe:70:fd:25:41:f7:12:8f:aa:57:62:e5:54:
                    93:73:de:8a:91:85:a3:94:f3:c6:97:e3:ca:6a:ee:
                    64:10:ef:45:c6:ab:35:0f:04:24:a7:5e:7f:fc:9f:
                    bc:19:c9:dd:de:e2:ae:0f:8f:6d:e4:9f:38:08:83:
                    a8:0a:85:41:05:d6:8c:10:d8:38:08:b2:8a:3a:44:
                    01:bf:9a:0a:84:fa:13:13:f0:6d:54:ab:58:2d:c0:
                    9a:17:b1:4b:be:e5:9d:47:f5:a5:f4:43:00:18:eb:
                    cf:60:fc:cc:8c:e8:f6:74:2e:d1:cd:a4:f2:d0:22:
                    0a:ce:ec:2c:2f:e8:8e:71:e0:ca:f0:e4:33:0d:ab:
                    94:12:49:ab:83:f3:e5:3c:10:bd:39:32:c4:3a:80:
                    6c:a2:e8:aa:fc:35:2b:3d:91:f2:c9:95:66:32:14:
                    f2:1c:b0:45:cf:ce:5e:8f:60:d6:68:e5:40:65:20:
                    3a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:14:8B:CC:96:63:F9:7A:A2:14:DE:1C:4D:E8:C4:0F:ED:E8:42:C2
            X509v3 Authority Key Identifier:
                keyid:51:9E:97:47:0C:63:FD:A1:4C:32:65:EB:74:1A:70:E3:A8:B6:9A:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ6XRwxj_aFMMmXrdBpw46i2mv8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:b2:60:af:8e:67:25:d7:c3:13:33:a8:41:15:00:27:ee:67:
         55:4d:df:b4:b4:f9:89:fe:ca:9c:c1:b2:52:24:8d:25:b1:e8:
         7e:ff:bc:6b:54:9f:82:3f:4f:44:84:fb:ff:13:a9:5a:fd:49:
         b9:4c:17:e0:c7:d5:be:42:a9:10:1f:d4:44:48:67:9d:40:75:
         c7:7c:fc:fa:89:e1:89:b8:35:e6:c3:5d:75:95:81:fa:f1:32:
         aa:92:6a:3d:e4:ee:f2:6d:76:e1:f6:74:06:d9:65:38:86:fa:
         ab:e5:6d:76:75:b3:e2:e5:18:1a:98:79:68:bb:31:23:0d:f1:
         f9:64:d7:27:99:ed:3d:a5:6f:d9:26:e5:a3:cb:e6:3b:d5:ea:
         90:30:ec:80:0c:a9:72:9f:f1:8f:27:fb:11:cf:e1:f4:29:07:
         00:10:3c:f5:34:b7:c4:48:fd:d0:ab:ea:41:ae:2b:13:db:eb:
         33:13:65:76:2c:9e:33:40:e1:ab:d6:8f:84:52:6d:e9:c9:d8:
         87:72:34:46:53:7b:11:f0:9a:89:5d:70:9d:44:d2:da:79:11:
         c0:5f:69:c1:b7:e2:fc:d7:4e:ee:67:79:73:4e:19:ee:3b:d9:
         5c:52:67:09:2c:20:b5:d3:6a:05:5a:2e:9e:49:7a:53:c5:2b:
         df:2d:6c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:45 2026 by rpki-client