Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft
File:                     Uwt27wq1VbyLB2H2BopE4QsrMfc.mft (raw, json)
Hash identifier:          l6VInYlC7APUmRy+BrBCaR4NYPF/KyVsaR4qpmGJa98=
Subject key identifier:   09:9C:DC:E1:1A:70:64:5C:EB:5E:67:15:B6:1C:1A:0B:D2:94:2E:E1
Authority key identifier: 53:0B:76:EF:0A:B5:55:BC:8B:07:61:F6:06:8A:44:E1:0B:2B:31:F7
Certificate issuer:       /CN=530b76ef0ab555bc8b0761f6068a44e10b2b31f7
Certificate serial:       019CABD9DA01B082E0697A6E656D357D885D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uwt27wq1VbyLB2H2BopE4QsrMfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft
Manifest number:          1847
Signing time:             Mon 02 Mar 2026 00:01:46 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:46 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:46 +0000
Files and hashes:         1: 7qtrZvTgn0cpSEVLml8fcuthLe4.roa (hash: S4nLPxNgM6/xYB2o4ZydmxvSiUoLNOsPi+E4YsX/E2g=)
                          2: Uwt27wq1VbyLB2H2BopE4QsrMfc.crl (hash: HcHk6YexMHt+UkB9PP7DLTxNB7JPT7b/zD8xsVWJN5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uwt27wq1VbyLB2H2BopE4QsrMfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:da:01:b0:82:e0:69:7a:6e:65:6d:35:7d:88:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530b76ef0ab555bc8b0761f6068a44e10b2b31f7
        Validity
            Not Before: Mar  2 00:01:46 2026 GMT
            Not After : Mar  3 00:01:46 2026 GMT
        Subject: CN=099cdce11a70645ceb5e6715b61c1a0bd2942ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:21:3b:e8:93:e5:5b:f4:87:ee:3a:e5:16:21:
                    99:56:79:1c:c3:c7:3c:7f:18:ef:c1:65:68:7f:e8:
                    eb:8c:80:b1:0c:82:73:48:22:40:f9:3c:fd:a1:08:
                    70:bb:69:e9:cd:e7:4a:40:bb:b6:12:ec:70:58:44:
                    11:29:81:7a:1b:ac:ea:75:d8:ec:e9:9c:3a:6d:08:
                    7f:62:53:e5:ab:c4:0a:bc:34:a8:57:32:dc:e7:6a:
                    49:cc:69:c0:d5:88:e8:98:39:79:c3:3f:c6:76:65:
                    76:93:8b:bf:f1:72:14:6d:0c:e3:db:92:3f:10:f0:
                    7b:2c:8d:0f:d3:c8:19:bc:24:a9:30:f1:11:5b:02:
                    7a:3a:54:96:11:72:16:c9:16:cc:da:20:84:59:cd:
                    5c:99:91:b8:c7:97:c1:b4:69:ca:07:dc:69:d0:96:
                    5a:a8:ff:71:ea:29:64:c2:29:5f:d0:ce:84:e5:d3:
                    94:10:c8:60:9b:17:0f:f5:84:ad:b9:31:77:1b:e4:
                    ba:74:7a:5e:65:16:7d:ff:5c:2f:30:72:cd:dd:31:
                    89:0f:44:b6:63:1f:f3:76:58:41:f1:f4:44:d1:f1:
                    76:cd:4b:7a:da:0d:4e:5a:b9:19:a0:bb:29:6a:d7:
                    33:fc:ac:00:06:44:46:7d:a5:36:d9:1a:ce:12:9c:
                    43:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:9C:DC:E1:1A:70:64:5C:EB:5E:67:15:B6:1C:1A:0B:D2:94:2E:E1
            X509v3 Authority Key Identifier:
                keyid:53:0B:76:EF:0A:B5:55:BC:8B:07:61:F6:06:8A:44:E1:0B:2B:31:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uwt27wq1VbyLB2H2BopE4QsrMfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:91:8f:2d:a2:96:f0:74:fb:f0:c2:08:e2:8e:a7:83:58:a8:
         5f:a2:1e:29:eb:f7:da:ea:5b:0f:ab:ab:b9:82:d5:13:a3:64:
         af:7a:51:79:93:32:fb:66:0f:05:e3:ce:7d:83:13:3d:0c:55:
         7b:ed:05:db:38:a2:57:a4:ec:c7:db:e7:fb:f6:f2:fc:d3:3a:
         2a:3c:74:8d:60:89:cb:ac:24:6b:9f:8f:1f:27:ec:c8:18:75:
         6b:04:7f:7e:e5:92:e9:79:9c:0a:2d:b7:7b:c6:6e:d1:ff:1a:
         cf:c2:93:61:b8:78:08:f1:98:9e:f4:61:1d:04:f7:d5:34:1c:
         a2:a3:d9:82:95:f2:28:f9:bb:e6:88:7b:6d:0b:19:c8:b4:ca:
         aa:37:ba:f1:bf:e6:3e:5c:dd:48:12:80:6d:ae:9c:4d:be:48:
         9e:7e:e1:10:ca:0e:a8:ba:92:3e:8a:b1:94:53:ae:05:5a:e2:
         da:fd:68:83:21:da:32:fb:df:ab:3a:89:53:95:8e:01:4b:a5:
         f5:db:2d:d7:4d:9d:9d:09:98:75:3d:6a:6b:56:4e:c1:a5:62:
         e3:97:a3:b6:b6:bd:68:f1:03:8e:81:16:1c:da:48:02:38:34:
         8b:49:a4:3f:60:c5:3b:91:fe:77:42:32:46:69:bd:fd:cd:45:
         ca:55:50:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:12 2026 by rpki-client