Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft
File:                     Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft (raw, json)
Hash identifier:          zF2o4FRygn5I6NV+aG6mDT+l34y3cqNlMBXZ4Eyp+ag=
Subject key identifier:   27:60:12:75:B1:BF:8F:81:A8:EF:D8:6F:62:F1:E5:83:8F:6D:C6:1A
Authority key identifier: 52:2F:98:79:CC:FA:DE:E5:D0:4A:9A:99:73:F5:B2:79:52:97:1B:FB
Certificate issuer:       /CN=522f9879ccfadee5d04a9a9973f5b27952971bfb
Certificate serial:       019D375255F333AC2602AD73B8C224EE67A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft
Manifest number:          1450
Signing time:             Sun 29 Mar 2026 02:00:35 +0000
Manifest this update:     Sun 29 Mar 2026 02:00:35 +0000
Manifest next update:     Mon 30 Mar 2026 02:00:35 +0000
Files and hashes:         1: Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl (hash: YCCZdbP86914b2FqCyHd8crS4lOkU4q8qgF2wyPKFQw=)
                          2: oOmlfKVzpMVENSLkIqqHr9oYYIg.roa (hash: /1cGoeAjRc1hP5Tzk5VY4ttcaNmL4WoxJgl5UoSxmIg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 02:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:52:55:f3:33:ac:26:02:ad:73:b8:c2:24:ee:67:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522f9879ccfadee5d04a9a9973f5b27952971bfb
        Validity
            Not Before: Mar 29 02:00:35 2026 GMT
            Not After : Mar 30 02:00:35 2026 GMT
        Subject: CN=27601275b1bf8f81a8efd86f62f1e5838f6dc61a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3a:82:7a:39:ba:00:d9:3b:1c:ab:9b:5d:14:
                    bb:80:b4:30:86:ff:06:63:84:89:5a:17:80:e4:78:
                    4a:6a:37:b1:ba:ff:51:8d:0e:fd:d4:82:9b:ee:d6:
                    73:68:8c:4b:d2:f3:e3:52:03:36:7f:f5:0a:be:fb:
                    a1:9f:62:7f:cb:c8:e5:94:39:cc:6c:58:68:cd:8c:
                    12:c7:55:8c:de:cd:d0:a6:67:85:08:8f:69:57:9c:
                    62:5f:d5:dc:b7:0b:ce:bc:e2:54:5a:79:e7:37:81:
                    57:df:31:c7:0c:10:b3:b6:f7:6c:6f:9a:91:3d:6a:
                    ae:34:95:c4:99:70:28:f0:4c:38:62:57:3a:9d:98:
                    8f:cf:71:81:76:4c:e2:d2:af:c3:54:d8:47:59:32:
                    ac:c9:99:c6:f6:5b:23:ef:56:47:ba:06:21:5d:df:
                    84:09:f5:20:88:38:bf:0c:18:69:b9:ce:7a:af:9d:
                    54:f7:61:d7:96:82:fc:d5:f0:b5:b8:ce:3f:e6:f9:
                    e9:6d:c3:7a:61:62:2c:d3:12:ac:27:18:23:9c:c7:
                    7a:8f:b4:cd:e7:a2:61:16:30:9f:e2:65:09:07:e9:
                    82:9b:2c:13:52:a9:20:f3:3f:95:29:4f:70:85:d2:
                    6a:a9:6f:21:fe:c6:a3:ec:5a:fb:f2:a0:c8:96:ee:
                    03:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:60:12:75:B1:BF:8F:81:A8:EF:D8:6F:62:F1:E5:83:8F:6D:C6:1A
            X509v3 Authority Key Identifier:
                keyid:52:2F:98:79:CC:FA:DE:E5:D0:4A:9A:99:73:F5:B2:79:52:97:1B:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:a5:f6:a7:4d:7a:03:65:5e:ae:19:25:d2:99:91:70:3c:c8:
         c6:cb:47:8b:d3:49:fd:bc:ca:f0:e2:13:59:95:59:4d:bd:dc:
         e0:24:e2:c7:b0:df:67:a2:d2:77:62:e4:8d:25:aa:a7:15:46:
         25:ec:79:00:ee:66:26:77:15:e1:c9:d4:ab:a6:d0:5d:20:97:
         60:85:1d:de:2e:08:72:71:41:9d:ac:ac:ca:ae:f5:f7:f9:aa:
         aa:71:1e:03:a7:8a:b3:d7:f3:71:3f:f9:60:46:eb:da:0b:b3:
         e8:49:68:c3:72:69:f8:c9:52:47:2a:1b:d3:f8:d0:d2:56:97:
         d7:04:7c:84:d8:5a:62:b1:8d:0a:69:4e:0a:b2:2b:9c:55:2c:
         d7:31:97:89:99:3d:cf:84:81:33:1e:eb:93:b3:32:ff:a0:7d:
         f2:fd:95:77:26:fa:e5:d1:cb:ad:e4:bf:ae:a9:4c:c5:3e:dd:
         26:45:2a:2f:f5:e8:5a:51:86:32:7d:ed:04:43:e9:cc:e6:58:
         ad:a8:63:82:df:4f:86:d1:30:da:71:82:aa:c7:80:96:0e:9b:
         5d:dd:5d:fa:db:6f:0f:75:e5:dc:45:9a:c6:cf:1b:4c:a4:40:
         2f:a9:ec:2b:7c:e1:14:e8:04:88:1a:44:03:81:66:ca:5f:d5:
         a9:27:68:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UlXzM6wmAq1zuMIk7menMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMmY5ODc5Y2NmYWRlZTVkMDRhOWE5OTczZjViMjc5NTI5
NzFiZmIwHhcNMjYwMzI5MDIwMDM1WhcNMjYwMzMwMDIwMDM1WjAzMTEwLwYDVQQD
EygyNzYwMTI3NWIxYmY4ZjgxYThlZmQ4NmY2MmYxZTU4MzhmNmRjNjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTqCejm6ANk7HKubXRS7gLQwhv8G
Y4SJWheA5HhKajexuv9RjQ791IKb7tZzaIxL0vPjUgM2f/UKvvuhn2J/y8jllDnM
bFhozYwSx1WM3s3QpmeFCI9pV5xiX9XctwvOvOJUWnnnN4FX3zHHDBCztvdsb5qR
PWquNJXEmXAo8Ew4Ylc6nZiPz3GBdkzi0q/DVNhHWTKsyZnG9lsj71ZHugYhXd+E
CfUgiDi/DBhpuc56r51U92HXloL81fC1uM4/5vnpbcN6YWIs0xKsJxgjnMd6j7TN
56JhFjCf4mUJB+mCmywTUqkg8z+VKU9whdJqqW8h/saj7Fr78qDIlu4D/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdgEnWxv4+BqO/Yb2Lx5YOPbcYaMB8GA1UdIwQY
MBaAFFIvmHnM+t7l0EqamXP1snlSlxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWktWWVjejYzdVhRU3BxWmNfV3llVktYR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9mYWQ0ZjEtOTFmMC00N2UxLWIzNzAt
ZWU1MDlmYmQ4MGUxLzEvVWktWWVjejYzdVhRU3BxWmNfV3llVktYR19zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9mYWQ0ZjEtOTFmMC00N2UxLWIzNzAtZWU1MDlmYmQ4MGUx
LzEvVWktWWVjejYzdVhRU3BxWmNfV3llVktYR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdKX2p016
A2Verhkl0pmRcDzIxstHi9NJ/bzK8OITWZVZTb3c4CTix7DfZ6LSd2LkjSWqpxVG
Jex5AO5mJncV4cnUq6bQXSCXYIUd3i4IcnFBnaysyq719/mqqnEeA6eKs9fzcT/5
YEbr2guz6Elow3Jp+MlSRyob0/jQ0laX1wR8hNhaYrGNCmlOCrIrnFUs1zGXiZk9
z4SBMx7rk7My/6B98v2Vdyb65dHLreS/rqlMxT7dJkUqL/XoWlGGMn3tBEPpzOZY
rahjgt9PhtEw2nGCqseAlg6bXd1d+ttvD3Xl3EWaxs8bTKRAL6nsK3zhFOgEiBpE
A4Fmyl/VqSdoYA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:38 2026 by rpki-client