Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft
File:                     Urm54lZYDENEuyQURbTVLlT91Qs.mft (raw, json)
Hash identifier:          xqMFglne1DSamA6+i9yWG+yQ1gFpJ+UipROapKo+O7s=
Subject key identifier:   CF:42:33:AA:01:1F:4C:C5:D6:48:CD:58:E2:C9:36:2B:F6:BF:F0:CA
Authority key identifier: 52:B9:B9:E2:56:58:0C:43:44:BB:24:14:45:B4:D5:2E:54:FD:D5:0B
Certificate issuer:       /CN=52b9b9e256580c4344bb241445b4d52e54fdd50b
Certificate serial:       019CABA25C2E77F65942D108743529D99A41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft
Manifest number:          151D
Signing time:             Sun 01 Mar 2026 23:01:10 +0000
Manifest this update:     Sun 01 Mar 2026 23:01:10 +0000
Manifest next update:     Mon 02 Mar 2026 23:01:10 +0000
Files and hashes:         1: 9Eqe7E3eMUevbHUKUUW_q13KWD4.roa (hash: fY8VfaNE5VXikKhOcBEnGn5MdcBWXx3SvzvPlkIQeaM=)
                          2: GJJ58FIls1lHjVVLLrf2JDQD3W4.roa (hash: l4YjelWHKqcJNFE4+5c8SK1AWUNzmjFYH0lSLSmVQek=)
                          3: N4EQgttBYT2mp-p45DhZLmHfzTQ.roa (hash: Wo3GDFi8E/bJVIRvrii7wyqBFcy3ToYvmvXUkuPDxm0=)
                          4: Urm54lZYDENEuyQURbTVLlT91Qs.crl (hash: 0sgycecNfz84RQULHPrdvSeG5BagxQompRVN65YBuEE=)
                          5: ZzgxUr7465xAKyVi3HDIHGueP3k.roa (hash: 2NJYjrGz8rRWAAvm63thzeaecXROIhhwMcqdePuSy00=)
                          6: afKwRxk1ZzUuMbqjhAMAsR8SW7k.roa (hash: 36wIpsjr4F5SRwjTUDc1wC/5dcZLwPECLsusWpMpGsA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 23:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a2:5c:2e:77:f6:59:42:d1:08:74:35:29:d9:9a:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52b9b9e256580c4344bb241445b4d52e54fdd50b
        Validity
            Not Before: Mar  1 23:01:10 2026 GMT
            Not After : Mar  2 23:01:10 2026 GMT
        Subject: CN=cf4233aa011f4cc5d648cd58e2c9362bf6bff0ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:00:45:38:43:0f:7c:d6:e4:4a:95:b7:6b:46:
                    13:39:8c:3c:c6:41:bf:a2:02:66:da:17:4d:af:b3:
                    7d:8a:62:e8:7a:b4:b5:77:2a:25:b3:89:3e:60:64:
                    66:fd:13:90:a7:28:06:1f:10:f8:be:05:e2:28:6d:
                    53:a9:ec:48:c5:9e:0f:77:c5:6e:2e:16:bb:56:34:
                    5f:0b:75:fe:ee:84:d6:87:d9:03:fa:3f:2e:50:23:
                    d0:6e:47:c9:b3:c7:a3:3f:5f:7b:b1:30:0e:ec:84:
                    de:c2:3b:f3:bc:8c:df:c0:0d:38:96:37:d5:6a:f6:
                    dd:dd:1c:d3:0a:fe:9b:cb:c5:ed:bb:ef:67:c8:61:
                    d3:74:54:2d:a8:b5:49:aa:66:0c:43:b3:31:37:52:
                    52:5f:55:81:ac:56:09:af:19:0b:b1:7e:05:07:b9:
                    f4:d3:12:f6:2e:03:82:0d:6f:df:37:00:07:de:0e:
                    a4:2d:64:5f:0b:47:65:1e:f5:3f:0b:f8:aa:df:82:
                    1a:28:c7:ed:c3:b0:f3:42:b2:e6:8d:ed:12:aa:fa:
                    eb:43:7b:d1:fc:5b:60:8f:3e:33:a3:47:b3:a2:4e:
                    81:a5:4a:ce:98:45:85:1b:43:a8:c0:26:94:05:2a:
                    23:39:19:dd:f4:50:ca:78:88:cc:9d:71:e6:87:d0:
                    6b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:42:33:AA:01:1F:4C:C5:D6:48:CD:58:E2:C9:36:2B:F6:BF:F0:CA
            X509v3 Authority Key Identifier:
                keyid:52:B9:B9:E2:56:58:0C:43:44:BB:24:14:45:B4:D5:2E:54:FD:D5:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:54:1c:7d:d5:4e:80:0d:d5:ef:37:41:03:5d:9b:55:56:db:
         b4:4e:20:2f:f5:32:89:d1:49:b7:50:1a:0f:f5:c4:88:75:1e:
         78:0a:4e:90:7a:21:64:7f:18:95:b5:95:f9:a7:12:6b:af:c5:
         68:43:b9:d5:41:e3:55:f3:e0:26:f7:b0:d4:98:64:30:be:ff:
         c4:7f:e3:df:b8:e2:c3:05:76:c2:69:44:b4:33:5b:69:36:17:
         1a:6e:a2:f5:e9:ea:2b:ff:dc:22:d6:eb:d5:7b:ce:79:f7:bf:
         06:a3:ab:64:e5:e8:d3:4a:31:88:7b:c6:95:f5:26:16:4e:67:
         68:d3:d2:9e:5e:de:44:81:e4:83:dd:6d:7a:8a:7e:05:c6:fa:
         54:74:81:21:5f:82:9f:56:4c:ef:99:37:61:05:35:5c:c4:6f:
         d9:ff:44:1b:25:9c:68:3b:d2:e9:4f:42:1d:9a:fd:ad:84:cb:
         2b:00:af:94:f4:3c:c2:d6:b9:2d:f6:d5:c1:77:9e:bb:ce:1d:
         f2:5c:ab:ae:8b:90:71:49:33:fd:fb:35:f3:b1:ad:6e:67:da:
         85:33:ce:3d:ee:0c:2d:8f:f7:99:32:cb:39:44:34:38:f0:f9:
         73:41:4d:6a:4e:d3:72:10:af:10:1e:68:f5:5f:34:c2:c5:33:
         bc:dc:1f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:41:27 2026 by rpki-client