Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft
File:                     uquipWoMMP2vWTSvh2XB_9E1ekg.mft (raw, json)
Hash identifier:          J3cm7ysQKRG9djQX6GWpIYzFrKbNY7t9aPmED3rMwt8=
Subject key identifier:   51:FE:C1:97:15:33:4A:8E:4C:24:C5:A7:01:0B:E4:7B:A7:1A:A3:8A
Authority key identifier: BA:AB:A2:A5:6A:0C:30:FD:AF:59:34:AF:87:65:C1:FF:D1:35:7A:48
Certificate issuer:       /CN=baaba2a56a0c30fdaf5934af8765c1ffd1357a48
Certificate serial:       019D38D2A94BFF3BB6851ED940BDB94E2912
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uquipWoMMP2vWTSvh2XB_9E1ekg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft
Manifest number:          188F
Signing time:             Sun 29 Mar 2026 09:00:23 +0000
Manifest this update:     Sun 29 Mar 2026 09:00:23 +0000
Manifest next update:     Mon 30 Mar 2026 09:00:23 +0000
Files and hashes:         1: Dgvi9A6UscTQzOGYMK8ID4fFNG0.roa (hash: 4hWI2h6BtzzSvfeBxBlJw/0l98yMAAcnhfVquWWrJ/8=)
                          2: uquipWoMMP2vWTSvh2XB_9E1ekg.crl (hash: UUUe4nLxBKlsE4S7mxNN4W1C0LtDOYUGnqb+ij24D6w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uquipWoMMP2vWTSvh2XB_9E1ekg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d2:a9:4b:ff:3b:b6:85:1e:d9:40:bd:b9:4e:29:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baaba2a56a0c30fdaf5934af8765c1ffd1357a48
        Validity
            Not Before: Mar 29 09:00:23 2026 GMT
            Not After : Mar 30 09:00:23 2026 GMT
        Subject: CN=51fec19715334a8e4c24c5a7010be47ba71aa38a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9f:a3:33:ad:3d:90:7b:f6:62:5a:d8:fb:1b:
                    3c:82:05:a9:87:75:64:2d:6f:c1:6a:d0:0e:f0:1e:
                    5c:74:af:2b:d1:17:15:cf:d8:75:ba:be:ea:91:a1:
                    95:3c:26:55:5e:05:a2:af:27:72:88:9a:11:99:f2:
                    7f:7a:0c:0e:44:4d:1e:dc:7a:d2:ff:a9:bf:96:df:
                    13:d8:d9:e3:7a:e1:7a:b9:d8:15:22:2d:41:93:27:
                    6b:ea:7b:fd:0d:43:b0:37:60:53:c5:b2:e2:40:e0:
                    4c:36:e6:23:79:8c:32:f1:fc:8a:be:19:b6:17:15:
                    91:8f:6b:84:b8:5a:5e:de:49:b1:50:28:28:8a:31:
                    0f:4e:b3:02:85:3b:7a:25:e6:f1:ba:97:e4:f2:5d:
                    50:5f:1c:58:9b:06:73:2a:c7:37:f1:48:bf:f0:1e:
                    e3:94:5f:8a:2c:b5:27:d1:14:11:34:aa:9a:07:2f:
                    f9:02:62:70:d1:f3:9e:50:36:11:c0:94:f6:db:ab:
                    ad:0b:fe:5f:30:cd:de:f3:ec:46:47:e4:7b:b0:cd:
                    dc:08:15:7e:19:04:82:1f:17:55:50:cc:33:dd:ee:
                    fa:6d:04:d5:3d:e1:f4:10:b4:0f:e2:c5:4f:fe:0c:
                    31:8b:41:d3:91:49:3b:43:ab:6c:f6:0a:15:b5:11:
                    89:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:FE:C1:97:15:33:4A:8E:4C:24:C5:A7:01:0B:E4:7B:A7:1A:A3:8A
            X509v3 Authority Key Identifier:
                keyid:BA:AB:A2:A5:6A:0C:30:FD:AF:59:34:AF:87:65:C1:FF:D1:35:7A:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uquipWoMMP2vWTSvh2XB_9E1ekg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:2d:dc:c2:53:56:11:9b:f2:84:41:3b:46:f0:aa:3a:cf:b6:
         04:26:ff:04:1a:fa:8e:c8:81:71:96:87:19:f4:63:d1:2b:7d:
         76:79:c1:f2:f6:75:45:ff:2d:78:cf:5c:1e:bf:78:f4:2d:e3:
         d1:74:85:ca:aa:15:cf:dc:90:54:b0:db:ca:06:34:eb:09:5c:
         54:a8:30:27:7f:7c:f6:6b:f1:24:42:75:f5:21:eb:06:74:c4:
         3d:5d:a5:aa:c0:9e:58:11:7e:ff:05:e1:a7:f7:bf:7d:cd:2f:
         3e:0f:dc:b9:a1:7e:a6:bf:cc:db:6b:c9:35:d9:be:14:88:d9:
         30:c1:af:ee:9f:b9:2b:06:ac:92:be:90:7c:7a:e3:54:c1:9e:
         e5:c7:30:ac:c3:7c:61:0a:02:5c:c8:0e:96:bd:9c:ef:0b:18:
         31:7b:a1:20:61:66:ac:75:e6:c3:70:af:0c:5b:27:9f:6d:be:
         1a:39:3c:02:2c:86:97:35:11:cd:22:9b:b9:57:2b:a4:5b:47:
         5e:01:13:af:b7:61:a7:a5:4b:62:bf:15:60:e8:78:1c:58:bc:
         e5:9b:4d:fa:9f:5e:09:c6:d6:1d:78:c6:f3:57:96:08:1a:f1:
         34:01:47:cc:b9:07:76:fa:9b:a3:91:84:df:12:d3:ae:09:7e:
         b3:e2:ef:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:29 2026 by rpki-client