Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
File:                     UhowB3IjwlxvN9z1lIB3jAtbEGg.mft (raw, json)
Hash identifier:          +cDZjQh3J/QO365Yl31LU1kEqb3VzPspNCZlkYaCrMM=
Subject key identifier:   57:93:61:52:10:E4:AC:DC:F7:1A:6A:E9:28:CC:D8:26:67:C6:E6:9C
Authority key identifier: 52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
Certificate issuer:       /CN=521a30077223c25c6f37dcf59480778c0b5b1068
Certificate serial:       019D39413379D1130794923DC02228529854
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
Manifest number:          0633
Signing time:             Sun 29 Mar 2026 11:01:07 +0000
Manifest this update:     Sun 29 Mar 2026 11:01:07 +0000
Manifest next update:     Mon 30 Mar 2026 11:01:07 +0000
Files and hashes:         1: 84SPRa3_ewxAnHZXEwBV1kLi3VM.roa (hash: xgIumFcFLchK1z/1Csr0/oD3z8aKLtyk1tFqPTQqxyc=)
                          2: Dq6_iNtRHTOqFtnpD_FfUWdieAw.roa (hash: IBQzY45WKqpczXTiPj5HpgwNmv+cq3rLH5Uc7T4ZlWM=)
                          3: UhowB3IjwlxvN9z1lIB3jAtbEGg.crl (hash: hqV5IZ3aBjYfJPrWh3zcMjQcBAudWqN51bfqU3jky3Q=)
                          4: _pMAzQKRKR13xl3uGDGCl2hCPIo.roa (hash: 5qQNZWBbvk2jxeJhrao+q24FJuEwboPGan3bLmujgOM=)
                          5: hCxkK3tHuqUrY0c51_Pu1X-lD1E.roa (hash: 2q6gI5yUFT+GtMB/2xyZdJMaVjKX7qKHcOOGGZrqRFs=)
                          6: mzpaYdFOnh67fknlets-KcusWr4.roa (hash: kF0xfsE+o4xiNq+jHxQbRf9whqlGH+HiIj8K0kGs300=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 11:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:41:33:79:d1:13:07:94:92:3d:c0:22:28:52:98:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521a30077223c25c6f37dcf59480778c0b5b1068
        Validity
            Not Before: Mar 29 11:01:07 2026 GMT
            Not After : Mar 30 11:01:07 2026 GMT
        Subject: CN=5793615210e4acdcf71a6ae928ccd82667c6e69c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e3:3e:95:a3:ad:5e:a9:c3:22:27:a7:05:95:
                    1e:fd:5e:69:e0:d6:f7:2b:a5:bd:5e:37:c3:ec:f2:
                    95:c8:c8:68:f4:c1:99:dd:a6:87:55:4d:2a:69:82:
                    f6:85:fa:f3:f2:f1:a8:b4:cd:63:a7:f1:e6:00:7a:
                    8e:e0:a7:f8:21:c2:26:1c:22:69:7b:20:9f:92:24:
                    e6:db:13:ba:35:20:85:be:3d:de:ad:4a:18:75:52:
                    9b:e9:5e:29:c5:13:5c:84:69:bb:92:8f:4d:76:c5:
                    2b:de:4f:06:45:e5:2d:97:81:ab:b6:f2:fa:c3:2f:
                    b4:35:cc:1a:69:39:12:5b:12:a0:7b:f0:8b:b3:0c:
                    30:15:09:b1:bb:2b:6c:c9:2b:71:21:ef:1a:e6:fd:
                    98:5c:78:73:c3:9c:59:04:aa:6d:97:5b:1b:bc:94:
                    07:24:2f:d7:c8:6e:f5:c6:d2:04:21:f5:6d:36:04:
                    07:01:e9:c2:27:ec:7f:57:50:a1:bc:00:5f:8c:88:
                    bb:97:08:d8:32:d8:2a:52:48:f3:78:7d:9f:4f:ef:
                    52:27:80:99:e4:3e:26:f6:b0:e6:29:df:fd:4d:40:
                    fe:d7:df:0c:dd:fc:3c:e4:98:ed:e9:d0:6c:bd:86:
                    30:1b:7a:c4:de:8d:a6:7e:7b:c0:37:52:ae:75:2a:
                    ec:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:93:61:52:10:E4:AC:DC:F7:1A:6A:E9:28:CC:D8:26:67:C6:E6:9C
            X509v3 Authority Key Identifier:
                keyid:52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:50:a4:39:78:b4:f4:d5:a0:9d:12:bd:fd:4f:30:69:10:c3:
         50:7b:b8:09:f8:6e:d2:21:26:c1:2c:f1:05:d4:43:ca:ad:f4:
         b8:bf:c3:16:6e:df:72:c8:08:98:05:93:94:d1:66:92:bc:8d:
         86:1b:10:08:39:95:92:31:1e:62:f2:da:c7:b7:b3:38:e8:30:
         04:96:8a:70:d2:f6:12:05:19:64:0c:2e:6b:b1:4d:7e:00:bd:
         a3:b1:6b:2f:ec:b1:d5:b5:95:5a:02:69:db:e3:18:bd:d8:f8:
         01:4d:77:6e:90:07:db:91:46:de:dc:dc:6c:f2:f7:c2:03:62:
         47:ce:10:1d:5b:11:fd:bb:5a:6b:19:f4:31:b0:62:71:a0:fd:
         ff:74:ef:c8:d6:5e:61:fd:b7:6b:bc:c4:fb:08:73:cd:0a:e4:
         7f:b6:b7:f0:b0:d2:3e:53:35:a6:58:49:c2:72:85:cc:49:b4:
         18:52:15:50:3b:52:34:37:d4:14:cb:94:87:68:f7:a8:db:8f:
         2a:9a:d8:8b:d3:74:d5:a6:5c:22:01:8b:e9:83:3a:f0:69:ae:
         cc:eb:c5:4d:58:58:7b:86:dc:3f:d7:ec:9c:15:ba:97:f3:27:
         a8:0b:1d:3b:05:ec:70:8b:6e:4c:f0:ad:68:d4:65:04:80:c6:
         e9:5b:92:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:00:06 2026 by rpki-client