Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.mft
File:                     UVWFrKQjaXxiI24rX5G0Hkvnrlg.mft (raw, json)
Hash identifier:          jE7KpAN9uZ+ZHP/idta11EjySdRLCQiGgkR09rKYdWo=
Subject key identifier:   62:A1:E0:BA:A5:07:35:FC:8E:B3:78:28:7D:C0:BF:AD:C7:83:AF:31
Authority key identifier: 51:55:85:AC:A4:23:69:7C:62:23:6E:2B:5F:91:B4:1E:4B:E7:AE:58
Certificate issuer:       /CN=515585aca423697c62236e2b5f91b41e4be7ae58
Certificate serial:       019D39417BC6EB3C7166C4093982E563E757
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UVWFrKQjaXxiI24rX5G0Hkvnrlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.mft
Manifest number:          11C4
Signing time:             Sun 29 Mar 2026 11:01:25 +0000
Manifest this update:     Sun 29 Mar 2026 11:01:25 +0000
Manifest next update:     Mon 30 Mar 2026 11:01:25 +0000
Files and hashes:         1: 8W1T1Tey0DN17K0BTFxuuLhoWIM.roa (hash: sAFYlRtYOx7SVyMnvJVTJDjRkAVggKjajJqD2AFqcuA=)
                          2: UVWFrKQjaXxiI24rX5G0Hkvnrlg.crl (hash: BTnuPbvUF/ab3wmgwK/JBwowZeeypMEdGD5JfLEgdaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UVWFrKQjaXxiI24rX5G0Hkvnrlg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:41:7b:c6:eb:3c:71:66:c4:09:39:82:e5:63:e7:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=515585aca423697c62236e2b5f91b41e4be7ae58
        Validity
            Not Before: Mar 29 11:01:25 2026 GMT
            Not After : Mar 30 11:01:25 2026 GMT
        Subject: CN=62a1e0baa50735fc8eb378287dc0bfadc783af31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e8:13:52:6e:8a:aa:12:db:ad:cb:8f:44:39:
                    3e:b4:f4:8b:bb:06:64:02:d7:a9:3d:aa:51:3e:02:
                    b6:3d:85:83:ca:83:27:f8:ab:bf:1b:c7:7c:73:c2:
                    ba:0e:8c:5e:d3:fc:f6:09:0e:d0:d1:ab:67:4a:08:
                    cb:35:68:5e:e6:4e:22:3d:2b:d9:76:2e:26:d3:d1:
                    54:29:8b:1e:10:5f:83:a1:c8:c3:25:30:9a:1b:ff:
                    ba:fa:e1:65:6d:90:75:c6:27:b4:da:2d:cd:3d:1f:
                    75:ca:00:e6:80:05:fc:54:19:1e:c0:c2:f2:0d:06:
                    e5:40:2c:01:12:a5:46:e2:7c:3f:16:8c:9d:f5:38:
                    80:ff:3e:18:e3:c6:13:d1:ba:fb:40:8e:aa:e1:a5:
                    36:79:4f:ee:a3:0d:46:ed:93:67:6c:ec:33:d9:92:
                    4d:d1:a7:ff:93:b1:49:7a:57:c8:e1:ba:d7:49:cb:
                    6a:2c:68:78:07:a2:36:b8:f6:03:ab:71:95:0c:8f:
                    66:2d:a1:7b:2d:76:8b:31:fa:ea:38:14:d2:a6:3e:
                    59:1c:9a:e3:9b:9f:c7:15:7d:2a:20:6a:54:45:a1:
                    52:c4:30:bd:bb:7b:72:53:c4:05:20:25:a6:0f:06:
                    12:f9:65:fe:a4:ca:84:a1:2b:3a:81:ec:cc:4a:d0:
                    88:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A1:E0:BA:A5:07:35:FC:8E:B3:78:28:7D:C0:BF:AD:C7:83:AF:31
            X509v3 Authority Key Identifier:
                keyid:51:55:85:AC:A4:23:69:7C:62:23:6E:2B:5F:91:B4:1E:4B:E7:AE:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVWFrKQjaXxiI24rX5G0Hkvnrlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:16:d0:cf:8a:b9:39:fe:21:1c:3a:52:7b:b3:ac:23:df:29:
         23:1a:d1:8a:ef:70:ea:70:e2:81:55:4f:b1:c3:9b:4f:2a:d4:
         f8:78:b9:c0:c0:90:24:fb:02:f9:73:e9:c8:08:e9:4b:ae:8f:
         04:e3:42:52:d7:1d:ef:40:fb:91:8c:7f:51:86:63:8c:c5:36:
         dc:5e:27:24:5f:b7:43:98:ad:42:4c:a7:bd:32:5e:f1:c4:3c:
         b3:7d:f3:8e:5c:8a:97:28:66:11:ab:1d:23:22:5e:21:8d:17:
         61:4e:54:07:a2:f5:34:dc:50:42:7f:90:7c:74:91:3b:fa:0c:
         3a:ed:9d:5b:d1:0f:7d:01:1b:d4:de:d1:7c:4b:1d:09:d5:ab:
         52:ff:54:d7:46:ef:c7:7a:dd:ed:ef:bf:d4:20:0b:ec:96:27:
         30:c6:92:85:1f:19:ef:f0:d8:03:8c:c0:f3:c4:78:df:2e:66:
         05:d3:ad:be:36:fa:86:cb:74:b3:82:88:85:0d:b9:37:89:65:
         16:86:f0:ae:62:c9:cd:23:55:0b:91:82:cf:7c:3a:28:00:f6:
         9b:13:1c:df:1e:5f:92:04:e5:0d:4d:a6:ab:44:a3:3b:6d:b1:
         f6:2b:d1:05:a3:21:ba:c5:bf:07:5c:88:62:58:72:fd:e9:ae:
         30:e6:37:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:52 2026 by rpki-client