Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft
File:                     c_umgtacHRBwjte2rqojLuibkB0.mft (raw, json)
Hash identifier:          EbQps16z/qaIGoO6AocUiXbh0VULquXFN9icFur1LHc=
Subject key identifier:   09:5F:ED:D7:52:A4:C5:18:45:14:CE:44:72:83:80:9A:AF:FC:ED:87
Authority key identifier: 73:FB:A6:82:D6:9C:1D:10:70:8E:D7:B6:AE:AA:23:2E:E8:9B:90:1D
Certificate issuer:       /CN=73fba682d69c1d10708ed7b6aeaa232ee89b901d
Certificate serial:       019CACB557EC0196F2C791F454EBA7CBA4DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_umgtacHRBwjte2rqojLuibkB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft
Manifest number:          1186
Signing time:             Mon 02 Mar 2026 04:01:31 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:31 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:31 +0000
Files and hashes:         1: c_umgtacHRBwjte2rqojLuibkB0.crl (hash: qNx1OjNj9AcD+BU02o565lxx+Ugt2BLag44yCsA5nKA=)
                          2: yCVPi-PAEcORtbmsty5UvUZaZu0.roa (hash: yBlhR7LIxNNpuS2dfkekCG28fIsE0eDQixOz/izuOyw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c_umgtacHRBwjte2rqojLuibkB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 04:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b5:57:ec:01:96:f2:c7:91:f4:54:eb:a7:cb:a4:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73fba682d69c1d10708ed7b6aeaa232ee89b901d
        Validity
            Not Before: Mar  2 04:01:31 2026 GMT
            Not After : Mar  3 04:01:31 2026 GMT
        Subject: CN=095fedd752a4c5184514ce447283809aaffced87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:4b:53:b6:54:c5:28:87:7e:a4:96:cc:10:99:
                    24:03:bb:cc:e9:77:50:82:4e:bb:83:0c:41:c8:79:
                    ca:6f:f8:17:a9:64:ee:c2:70:11:71:aa:eb:ee:f8:
                    04:95:bd:fc:76:6d:91:13:97:1a:65:16:ba:5c:26:
                    f9:94:66:a4:72:f9:98:1b:ea:4b:6f:4e:37:be:e0:
                    da:46:97:4c:c7:b7:e0:1d:40:95:aa:6b:f7:d1:a7:
                    07:2d:e0:29:a8:2a:08:ed:74:64:90:b6:c7:98:e9:
                    db:ef:ca:bc:e9:03:e8:42:49:86:25:7d:17:f8:50:
                    27:22:34:a3:cd:71:da:be:b0:5b:51:0e:16:3e:35:
                    74:77:80:49:ea:36:5d:83:c3:00:fd:be:49:2a:40:
                    c0:05:5a:3a:80:7a:40:b6:1c:74:8d:eb:6f:34:cd:
                    8c:37:d8:d0:45:bd:40:98:80:da:6f:2c:82:a6:39:
                    bc:3b:bf:ee:d5:31:92:59:df:ce:a3:84:0f:6b:48:
                    f8:9f:29:71:8b:a6:38:97:19:50:67:14:c8:bc:ca:
                    10:9e:de:ae:f1:c6:bb:4b:94:c1:cd:f5:c8:8e:19:
                    4d:d5:88:8c:f2:33:a7:c8:dc:5e:ab:f0:a6:e0:e2:
                    fa:07:16:47:ee:06:da:43:dc:8a:0c:f0:93:43:0d:
                    3e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5F:ED:D7:52:A4:C5:18:45:14:CE:44:72:83:80:9A:AF:FC:ED:87
            X509v3 Authority Key Identifier:
                keyid:73:FB:A6:82:D6:9C:1D:10:70:8E:D7:B6:AE:AA:23:2E:E8:9B:90:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_umgtacHRBwjte2rqojLuibkB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:a9:22:3a:4a:f8:f0:f7:9b:55:d7:44:7c:dc:48:67:17:61:
         43:b4:fa:52:8f:e1:ec:dd:d6:6b:8e:2f:70:11:54:9f:78:48:
         d7:24:24:87:22:02:87:98:df:98:51:19:0d:6b:44:30:eb:ad:
         86:e3:64:ca:95:3e:11:5d:e8:a3:e0:d9:6c:c1:98:b6:f5:50:
         1d:8c:7d:ea:6a:1a:93:61:69:e3:76:7a:83:e7:6b:7c:a4:79:
         f8:44:b5:9b:f5:4c:5e:0a:71:7f:0c:8a:ed:ef:b6:d4:cf:30:
         2c:97:c8:f7:11:21:53:6d:f7:94:5d:5f:99:0a:ab:50:ae:d7:
         d6:ad:e0:13:33:50:50:e1:5e:36:de:a9:07:e8:e7:6b:5a:12:
         87:29:9d:e3:65:1d:2c:27:8d:f0:30:6d:6c:14:c6:60:2a:b4:
         1e:f5:f5:4d:e4:dc:dd:c9:b5:87:93:f8:56:60:aa:f2:23:58:
         82:72:7c:c7:e5:65:0e:72:fb:fd:30:23:20:1e:16:d6:ae:19:
         e0:bc:a4:da:aa:c9:9b:46:dc:d3:14:f3:94:d1:4d:b3:3a:aa:
         89:b7:7e:bc:09:cb:88:c8:4d:55:36:0b:aa:a9:7a:0d:bf:bf:
         1f:81:72:73:a0:75:28:6f:34:fe:7a:29:26:e6:b2:a5:c0:c1:
         63:08:73:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:26:31 2026 by rpki-client