Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
File:                     UfSwsEaesNBxmUzYI480vvAMb74.mft (raw, json)
Hash identifier:          k9XdSJABxLOSkoHKn3E8+RjUIZCds2TFY2lGr968VhU=
Subject key identifier:   ED:D1:CE:5A:52:22:A3:7B:DA:56:A0:91:8D:8B:D7:1B:41:17:A8:B6
Authority key identifier: 51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE
Certificate issuer:       /CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe
Certificate serial:       019D37C01E2B38EDD19F2BE975BDF97124B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
Manifest number:          080E
Signing time:             Sun 29 Mar 2026 04:00:30 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:30 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:30 +0000
Files and hashes:         1: 1Z9CK4rPbzAMA97TMp2bKUfntRw.roa (hash: LpR7I8xQuFg1r5Rgn2WWeCosLxa5m8Ntho2zm0Of2+c=)
                          2: BLM9s6E3uNgLbo5hUAJYzpxbAgk.roa (hash: 5Ht0651estCzoETFmaG2dTMoJGv16B5IZmwbZaHDuac=)
                          3: UfSwsEaesNBxmUzYI480vvAMb74.crl (hash: bZ4WSTj4mmAj/mn59gptHQcHD0lX44KYvGoxidIRbe8=)
                          4: eUcCe3j-6gC5ZMWiIQvI8X1Qdj0.roa (hash: Bg7I63KBUVK3mes1NGcs2kjKVt9Lb2dV0zwtKFKQ+co=)
                          5: gGdMWhv2-eyLZOF6_Y3Kn2Ptw4E.roa (hash: ir9QpJ+cZprHCM1364jhyll9k4egUSonINRA6eynL5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:1e:2b:38:ed:d1:9f:2b:e9:75:bd:f9:71:24:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe
        Validity
            Not Before: Mar 29 04:00:30 2026 GMT
            Not After : Mar 30 04:00:30 2026 GMT
        Subject: CN=edd1ce5a5222a37bda56a0918d8bd71b4117a8b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ef:e5:22:2b:13:27:35:23:16:ca:f2:f5:ad:
                    f5:3f:f5:23:19:35:60:dd:94:e1:eb:1b:d4:ad:c8:
                    75:e8:e3:48:ea:44:0b:ad:81:68:e9:77:8f:0f:cf:
                    1b:e1:55:9d:b4:93:95:ab:1d:be:1d:d7:47:9c:7b:
                    26:86:12:59:7b:40:70:47:e8:d9:4b:13:65:7c:9c:
                    f2:55:24:fd:a3:0d:b9:8f:e2:78:ef:2c:ac:8c:e5:
                    b2:38:57:73:25:e1:45:3e:5a:4f:6a:5f:40:c5:7c:
                    a6:72:82:98:29:ec:5d:28:26:87:1c:75:5c:64:0b:
                    a7:7f:85:1e:3f:a6:1d:d9:29:ad:93:be:2b:06:cc:
                    27:e2:b1:84:9b:d7:a3:e1:be:bc:49:bd:fe:4f:85:
                    a9:fd:4b:11:5d:c3:93:b9:aa:0f:81:45:c7:0b:58:
                    8a:dc:a1:cc:92:c7:dd:81:3d:36:5f:dd:86:b9:c7:
                    de:30:8b:d5:c8:de:e5:c2:42:6e:eb:46:53:6c:96:
                    e7:35:74:10:b0:b9:8b:e3:f2:8f:f5:eb:f8:d6:ca:
                    be:63:7a:d3:d0:a4:58:c7:22:a9:42:b5:f3:be:29:
                    f4:b0:62:c3:0a:f2:3a:56:74:2c:9b:47:96:0d:f6:
                    8f:52:7a:33:37:a8:1d:07:e3:88:2e:3b:ac:e7:8d:
                    22:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D1:CE:5A:52:22:A3:7B:DA:56:A0:91:8D:8B:D7:1B:41:17:A8:B6
            X509v3 Authority Key Identifier:
                keyid:51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:3b:83:89:f7:e0:f7:d1:02:16:0a:3a:07:01:2d:e5:af:bb:
         5b:8d:a2:e5:3d:86:5f:a2:02:ee:14:cb:9c:54:ed:15:25:0c:
         81:1c:82:94:28:51:72:85:72:81:78:79:38:85:9c:39:6a:67:
         f3:83:5c:44:fb:4c:b5:b1:b9:25:34:57:a4:ae:8c:3f:d9:0c:
         01:9c:4a:44:a5:a1:a7:bf:89:d4:0b:b3:08:2d:94:62:d9:32:
         cf:c1:31:7c:d2:ab:4b:cb:da:19:18:24:e7:77:57:8c:72:db:
         b7:ae:ea:a9:82:8e:70:16:90:ba:0d:fb:83:ec:dc:47:4a:4a:
         24:e0:de:16:a1:52:c3:7e:3a:16:cb:80:90:db:fb:1b:d6:bc:
         a6:04:b4:8c:54:db:6f:9e:d5:17:2f:d1:84:ec:c8:d1:08:c3:
         93:03:53:f1:6e:59:01:d4:c7:86:8b:36:7f:bb:6d:4c:3c:18:
         b9:6c:37:ee:6f:c8:74:59:ad:8a:26:e4:a8:1b:8c:4a:b9:28:
         c0:d9:5d:0f:82:53:21:0c:16:cf:ff:4e:b8:fa:09:ba:bb:88:
         c1:c9:27:96:2e:73:01:43:32:bb:52:6b:61:d8:46:41:f9:37:
         d6:c6:c5:42:dd:f6:3b:70:dd:6a:d1:44:68:b2:4d:dd:56:b6:
         ba:d8:39:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:41 2026 by rpki-client