Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
File:                     UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft (raw, json)
Hash identifier:          /r1r6rFM4xWVVo/eW0g2bZ6T3narOqdMcEpYcFoYdkU=
Subject key identifier:   D2:9D:DC:4E:76:3E:4D:77:96:F8:00:70:22:C0:0E:53:E4:CB:C7:33
Authority key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
Certificate issuer:       /CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Certificate serial:       019D3187A64A0B78F6206A751B36FC5CF3B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
Manifest number:          1899
Signing time:             Fri 27 Mar 2026 23:01:06 +0000
Manifest this update:     Fri 27 Mar 2026 23:01:06 +0000
Manifest next update:     Sat 28 Mar 2026 23:01:06 +0000
Files and hashes:         1: 0d6SiGZ_3HskVJZrwW4LAUnPhVk.roa (hash: sH5j+6BmvxKro4kCtZa6p73msltGzoMgNQq57Mh0jXE=)
                          2: GBJMnjMbFvL5E-lL9i3lBFi6nWY.roa (hash: SL+iSObRv/yIgCUc1iePoCbQgwvJ0km8l952y/nYPkY=)
                          3: IY7fhcpZn8V1nFJzcjkAB2G_wy8.roa (hash: kypNUV6hOKnyhwHaYDOZf/jJOmWZK2acEUl1kQxKdoM=)
                          4: UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl (hash: 4+FZZOh3q0WluDv6FP6voY2kjQEQJ4ENrZRPqtqQDxk=)
                          5: ZDSwaO2zu2qpiNoQdfHO9f__qXE.roa (hash: /yuwN8mjkUUOdBbxmmKWCbuEc9CKVHYeB+reIdnpnsM=)
                          6: qfnbY9JngbTP144k13tCg-IRl3w.roa (hash: 9MKZ2wZQrvJYgyQxGjaYnWmRu2eM+70F1EApasiltnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Mar 2026 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:31:87:a6:4a:0b:78:f6:20:6a:75:1b:36:fc:5c:f3:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
        Validity
            Not Before: Mar 27 23:01:06 2026 GMT
            Not After : Mar 28 23:01:06 2026 GMT
        Subject: CN=d29ddc4e763e4d7796f8007022c00e53e4cbc733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e4:98:a6:ac:06:3d:b0:96:cf:eb:42:3b:77:
                    51:34:ce:7a:d8:15:f8:5c:5d:82:b5:b9:56:1b:da:
                    38:24:79:8b:37:44:5f:89:66:78:dc:f3:e7:88:ed:
                    58:28:25:e2:2b:12:1a:a5:2d:b7:72:63:00:f7:4c:
                    90:f5:57:b1:f4:d1:26:d4:af:ab:79:a8:d8:fa:7a:
                    3b:03:0f:4f:7e:28:cf:84:8a:fe:48:aa:8d:9a:4b:
                    b6:9c:ed:73:d5:9a:15:7a:45:4f:4a:3d:bd:76:64:
                    52:36:9d:33:ff:f4:61:40:eb:21:6d:46:36:e8:32:
                    3f:20:67:d6:22:c5:6a:b2:fd:98:80:16:38:be:50:
                    b6:47:33:7f:b5:e3:90:1d:9d:20:1f:6c:4d:fb:f7:
                    ad:3e:4f:ac:32:27:f8:42:06:d9:19:a8:6f:b9:da:
                    ca:23:60:ca:14:32:66:1e:2d:d5:c1:df:25:70:9c:
                    8b:74:05:cb:93:b7:d7:e1:6a:85:8c:05:76:43:7a:
                    22:e1:08:ca:44:13:c7:0e:19:8d:05:79:fd:8a:ac:
                    fb:15:c9:3f:bb:e1:56:d1:3c:2a:11:af:6b:75:59:
                    ae:89:79:54:03:41:f3:70:17:65:3d:b6:61:eb:f5:
                    11:e1:29:e6:0d:2e:a4:30:02:37:e2:7b:08:01:59:
                    e3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:9D:DC:4E:76:3E:4D:77:96:F8:00:70:22:C0:0E:53:E4:CB:C7:33
            X509v3 Authority Key Identifier:
                keyid:52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:30:ed:21:84:61:b4:3e:2b:69:e4:7a:c0:49:76:cf:36:2f:
         31:09:47:d1:b4:18:fa:5b:41:7e:57:18:dd:16:b8:50:d2:39:
         ca:b3:53:31:4e:03:f6:13:9e:d3:7b:fa:f4:e5:e2:40:8c:b2:
         55:a1:77:4e:b6:65:7c:67:41:fa:b5:6e:0a:e6:f9:d2:07:17:
         5e:02:6f:d4:78:f9:16:74:7b:5b:b5:64:4f:a9:c9:36:d9:4b:
         43:6f:e5:ad:09:34:ba:e2:5d:9c:72:4c:40:4e:14:81:62:4c:
         cb:4e:64:18:3f:53:f2:44:b3:3f:ac:1a:b0:52:d3:97:cc:00:
         41:ff:28:c7:ba:88:43:6d:a4:53:1d:1f:2e:e8:b1:58:74:98:
         50:6c:ac:4f:fa:d1:42:f0:6c:0b:87:f4:82:fb:8c:88:ce:1e:
         71:58:c5:af:dd:fe:f8:01:5e:92:66:85:53:d1:b0:d6:85:de:
         08:0b:fc:07:39:e7:50:ff:96:0f:e2:a9:02:b1:7e:7a:5c:4e:
         98:bc:af:4a:a5:68:7d:fa:44:97:9c:53:e3:0e:42:63:20:8d:
         0a:b6:4e:85:de:f5:97:85:63:52:f0:92:58:41:d1:af:e0:42:
         ee:b5:a2:54:d5:9e:1c:a5:ac:1c:d9:8c:75:f5:32:dd:4c:67:
         fd:d9:ae:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 04:08:40 2026 by rpki-client