Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
File:                     UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft (raw, json)
Hash identifier:          QSLYAiIVH5rnUCS0KAo3eUJeXy7NjYlJMuEgNTnqp1A=
Subject key identifier:   35:2F:DD:2D:B8:C4:DB:AE:F7:4E:41:D0:C5:D2:B6:A3:12:7D:E6:A8
Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
Certificate issuer:       /CN=52226f671c2643a5c04846264fee01f943ac2bfc
Certificate serial:       019CAC476E506C1A85CF29AA40F8BE0B6333
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
Manifest number:          1847
Signing time:             Mon 02 Mar 2026 02:01:28 +0000
Manifest this update:     Mon 02 Mar 2026 02:01:28 +0000
Manifest next update:     Tue 03 Mar 2026 02:01:28 +0000
Files and hashes:         1: B6O7_d7R3UXXpRTsl6AAJWhjXe4.roa (hash: t/j281gNgiB9Sq9gQq9hfuM5gVj9+dvI5Rbkgb3tQsY=)
                          2: UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl (hash: ddr8sZiI/G0JSY/+LnZf0FJfB/T1R2Ml0DwthW3ETpQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:47:6e:50:6c:1a:85:cf:29:aa:40:f8:be:0b:63:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc
        Validity
            Not Before: Mar  2 02:01:28 2026 GMT
            Not After : Mar  3 02:01:28 2026 GMT
        Subject: CN=352fdd2db8c4dbaef74e41d0c5d2b6a3127de6a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f4:4c:7e:2e:3d:a4:64:1f:ed:af:65:82:23:
                    cf:94:0b:4b:e1:8b:d1:c8:79:20:d6:ba:f6:9d:2f:
                    84:c3:c0:95:94:a2:72:12:3f:ec:9b:d3:c4:f3:5e:
                    c8:44:34:77:f7:4b:f1:ce:79:72:69:0a:2e:09:aa:
                    ec:f4:3b:b2:79:ef:a4:3a:04:7a:6f:f8:4a:fa:29:
                    e1:ae:6a:d6:75:a2:23:4a:84:c7:64:b9:7f:95:62:
                    63:6e:bd:92:19:3d:27:83:8f:c0:24:98:f7:82:aa:
                    93:bb:eb:e1:56:c3:8c:9e:3e:28:6e:51:73:4b:5a:
                    39:46:00:bc:e0:c8:10:1c:17:fc:4f:96:c2:29:13:
                    96:de:58:23:92:a4:37:da:e1:f4:42:34:19:5c:4c:
                    6d:7a:e3:53:d3:c8:2d:7b:eb:90:4d:77:e3:3c:2e:
                    ce:08:3f:46:29:df:c5:e9:a5:13:a2:07:0f:b6:fc:
                    0b:a8:a5:1f:80:72:14:90:ef:41:59:a5:cf:a9:e5:
                    06:c4:60:1d:d5:73:9d:2e:92:1a:3f:4a:20:fe:89:
                    b9:d5:1c:d1:73:ac:ee:59:aa:2d:8c:82:50:c1:09:
                    0b:36:27:82:8d:37:65:a3:03:b0:56:4a:cb:a2:6b:
                    76:3b:b1:f2:c5:13:5f:0a:97:4a:f5:d6:52:28:63:
                    1a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:2F:DD:2D:B8:C4:DB:AE:F7:4E:41:D0:C5:D2:B6:A3:12:7D:E6:A8
            X509v3 Authority Key Identifier:
                keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:49:e9:69:38:fb:f0:df:83:0d:56:af:41:05:27:8d:6d:18:
         97:a8:48:05:51:41:4b:16:54:27:09:b5:47:34:e2:b4:93:6d:
         d9:60:8d:26:0c:c0:21:59:39:f5:81:62:55:9f:72:2d:77:6d:
         75:f0:a3:ba:bf:60:ad:8e:bc:49:f0:ba:d4:9c:0e:2e:fb:f9:
         e7:cf:89:f7:bd:af:5b:33:d6:97:7c:e6:d8:00:a2:33:26:07:
         b4:9c:51:7d:7c:df:b2:ee:32:a8:7f:85:85:5e:14:f4:b3:86:
         cd:10:6c:bb:27:10:de:d4:62:46:76:96:4b:e0:ac:c3:eb:32:
         09:72:ec:e5:86:a7:d5:a8:af:26:35:70:cb:6b:a3:33:d6:30:
         d4:6b:ac:0f:59:83:66:4e:dc:25:4e:ee:1a:84:8b:b2:e6:b8:
         37:1f:b3:9a:35:6a:a4:d7:d2:f4:af:58:90:d5:65:f5:d4:e3:
         a0:f1:1c:2f:c0:72:e5:41:94:33:c9:c2:99:bc:2a:80:91:9e:
         d7:22:20:cb:6e:c1:aa:21:cd:09:1f:10:53:46:6d:06:53:87:
         8c:1e:50:19:a1:bf:7f:dd:fa:c2:cc:33:9e:f0:49:29:60:d0:
         45:e8:4c:11:f3:e5:34:f3:13:0b:24:f5:09:6e:75:8f:cd:64:
         71:48:e1:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysR25QbBqFzymqQPi+C2MzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMjI2ZjY3MWMyNjQzYTVjMDQ4NDYyNjRmZWUwMWY5NDNh
YzJiZmMwHhcNMjYwMzAyMDIwMTI4WhcNMjYwMzAzMDIwMTI4WjAzMTEwLwYDVQQD
EygzNTJmZGQyZGI4YzRkYmFlZjc0ZTQxZDBjNWQyYjZhMzEyN2RlNmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvRMfi49pGQf7a9lgiPPlAtL4YvR
yHkg1rr2nS+Ew8CVlKJyEj/sm9PE817IRDR390vxznlyaQouCars9Duyee+kOgR6
b/hK+inhrmrWdaIjSoTHZLl/lWJjbr2SGT0ng4/AJJj3gqqTu+vhVsOMnj4oblFz
S1o5RgC84MgQHBf8T5bCKROW3lgjkqQ32uH0QjQZXExteuNT08gte+uQTXfjPC7O
CD9GKd/F6aUTogcPtvwLqKUfgHIUkO9BWaXPqeUGxGAd1XOdLpIaP0og/om51RzR
c6zuWaotjIJQwQkLNieCjTdlowOwVkrLomt2O7HyxRNfCpdK9dZSKGMa0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUv3S24xNuu905B0MXStqMSfeaoMB8GA1UdIwQY
MBaAFFIib2ccJkOlwEhGJk/uAflDrCv8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWlKdlp4d21RNlhBU0VZbVQtNEItVU9zS193LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8yYjRkMGYtMjE5Zi00YzAwLTg2NDgt
YTEyZGUzYTMzNTUzLzEvVWlKdlp4d21RNlhBU0VZbVQtNEItVU9zS193Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8yYjRkMGYtMjE5Zi00YzAwLTg2NDgtYTEyZGUzYTMzNTUz
LzEvVWlKdlp4d21RNlhBU0VZbVQtNEItVU9zS193LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXEnpaTj7
8N+DDVavQQUnjW0Yl6hIBVFBSxZUJwm1RzTitJNt2WCNJgzAIVk59YFiVZ9yLXdt
dfCjur9grY68SfC61JwOLvv558+J972vWzPWl3zm2ACiMyYHtJxRfXzfsu4yqH+F
hV4U9LOGzRBsuycQ3tRiRnaWS+Csw+syCXLs5Yan1aivJjVwy2ujM9Yw1GusD1mD
Zk7cJU7uGoSLsua4Nx+zmjVqpNfS9K9YkNVl9dTjoPEcL8By5UGUM8nCmbwqgJGe
1yIgy27BqiHNCR8QU0ZtBlOHjB5QGaG/f936wswznvBJKWDQRehMEfPlNPMTCyT1
CW51j81kcUjhOA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:22:38 2026 by rpki-client