Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
File:                     UNSsMgllq0mREIUBoGAqaJPmP-w.mft (raw, json)
Hash identifier:          MQrMF4lepHDbz7iiaJeZ2OWGGayLZNkf3kdvTza2Wgo=
Subject key identifier:   05:12:47:92:9D:ED:EF:4E:C7:F0:26:15:10:97:D2:9B:5D:6F:26:18
Authority key identifier: 50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
Certificate issuer:       /CN=50d4ac320965ab4991108501a0602a6893e63fec
Certificate serial:       019CAA21F2CC291EA105B371425C689B3DD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
Manifest number:          184C
Signing time:             Sun 01 Mar 2026 16:01:17 +0000
Manifest this update:     Sun 01 Mar 2026 16:01:17 +0000
Manifest next update:     Mon 02 Mar 2026 16:01:17 +0000
Files and hashes:         1: UNSsMgllq0mREIUBoGAqaJPmP-w.crl (hash: IBC3RyxA4Lx50kP3Wda6s86y9H4fRX34pkjUUfwzY4Y=)
                          2: aSQK_Cn7Rj_Qk5VH_2zX0Del1xI.roa (hash: AJLz8V9DTfSj8uSOdLs4ccNuem/rratwpuZJ7Nlu/rU=)
                          3: tw_BqpZzxh26R1N5YCAOWWyOrCQ.roa (hash: 6Q4E50IA4gfxHi7asjcxRHabRyp2c+3fX6uruEOwttg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:f2:cc:29:1e:a1:05:b3:71:42:5c:68:9b:3d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d4ac320965ab4991108501a0602a6893e63fec
        Validity
            Not Before: Mar  1 16:01:17 2026 GMT
            Not After : Mar  2 16:01:17 2026 GMT
        Subject: CN=051247929dedef4ec7f026151097d29b5d6f2618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2a:71:ce:c2:e7:76:5a:fb:f6:c2:b3:01:69:
                    1c:4a:e5:dd:ff:bd:ee:57:31:25:c0:9d:12:aa:19:
                    5f:df:ef:35:1b:70:3e:0c:69:f6:bb:46:f8:5b:89:
                    ff:53:d7:87:69:14:9a:58:dc:1c:48:95:71:12:43:
                    fd:23:6b:45:da:e3:24:06:fe:ce:6b:72:e4:9c:1b:
                    54:68:1a:a8:24:75:0b:4f:27:c2:90:80:7e:8e:ce:
                    94:62:b7:f8:1e:36:70:1f:c9:a3:cc:72:12:52:32:
                    00:e7:7e:8b:e2:0f:38:20:79:8a:29:8d:25:fc:ce:
                    1b:32:83:3d:cb:67:c2:a7:cf:58:d7:53:19:29:0a:
                    a1:9d:a6:dc:3a:8b:ab:c8:07:8d:2e:ce:92:92:31:
                    a9:ad:b6:f4:c6:85:8d:ff:71:39:84:fa:06:24:11:
                    9f:b1:bb:fb:85:71:c9:4a:38:ad:6e:f8:4f:7f:4f:
                    15:9a:27:28:5d:60:72:f2:5f:b5:34:c4:b7:2f:c5:
                    d1:2f:8d:e9:64:1b:31:e3:63:8b:54:1b:1a:41:8e:
                    42:65:39:10:e4:56:5f:08:cd:67:f9:1b:91:05:59:
                    c0:d4:1f:52:fd:94:6e:84:e0:e3:a2:f7:07:9a:93:
                    b6:82:c3:5b:61:9b:a2:a6:73:2e:23:40:08:98:45:
                    df:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:12:47:92:9D:ED:EF:4E:C7:F0:26:15:10:97:D2:9B:5D:6F:26:18
            X509v3 Authority Key Identifier:
                keyid:50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:e7:8a:61:41:7e:6e:66:40:0a:e1:e4:74:96:1e:83:f1:ed:
         87:73:18:9a:ec:07:4c:d7:7f:37:dd:7f:be:a2:0e:e9:c2:e1:
         a6:65:4e:6f:c1:65:75:84:88:b1:42:36:df:cf:46:80:ba:8f:
         25:6b:d2:c2:b0:ed:da:9f:ba:b8:a9:5f:1f:c4:08:e3:ea:b2:
         56:ff:56:5f:35:4d:c8:b9:4f:a7:a7:87:52:d3:aa:a5:91:78:
         57:dd:83:cb:c3:2b:f6:2b:98:04:e5:98:dc:63:2f:0a:73:4b:
         e1:8b:b2:54:21:f2:e3:36:c8:50:04:08:16:d3:55:1b:35:0e:
         6b:e5:0b:ab:4e:68:29:a0:3c:17:9a:28:1c:35:4b:c6:b6:43:
         85:f8:2d:f3:12:a8:43:35:a7:d3:16:eb:b9:47:60:71:ec:3c:
         8f:8e:bc:48:43:bc:6c:42:74:aa:3e:52:24:fe:1b:de:d0:79:
         b2:cb:9b:9f:5d:a0:e8:ec:56:5d:57:ba:66:bc:eb:30:c8:b4:
         1c:e4:81:98:bd:b4:5e:20:ac:b9:36:82:76:e6:ec:eb:5d:18:
         51:d9:62:1b:aa:b6:9f:91:1a:64:91:8a:83:f1:1b:5b:ec:f0:
         b8:0e:fb:a3:05:e6:ef:e0:3f:06:54:3b:e3:da:13:a8:46:21:
         a2:58:24:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIfLMKR6hBbNxQlxomz3QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwZDRhYzMyMDk2NWFiNDk5MTEwODUwMWEwNjAyYTY4OTNl
NjNmZWMwHhcNMjYwMzAxMTYwMTE3WhcNMjYwMzAyMTYwMTE3WjAzMTEwLwYDVQQD
EygwNTEyNDc5MjlkZWRlZjRlYzdmMDI2MTUxMDk3ZDI5YjVkNmYyNjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmipxzsLndlr79sKzAWkcSuXd/73u
VzElwJ0Sqhlf3+81G3A+DGn2u0b4W4n/U9eHaRSaWNwcSJVxEkP9I2tF2uMkBv7O
a3LknBtUaBqoJHULTyfCkIB+js6UYrf4HjZwH8mjzHISUjIA536L4g84IHmKKY0l
/M4bMoM9y2fCp89Y11MZKQqhnabcOouryAeNLs6SkjGprbb0xoWN/3E5hPoGJBGf
sbv7hXHJSjitbvhPf08VmicoXWBy8l+1NMS3L8XRL43pZBsx42OLVBsaQY5CZTkQ
5FZfCM1n+RuRBVnA1B9S/ZRuhODjovcHmpO2gsNbYZuipnMuI0AImEXftwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAUSR5Kd7e9Ox/AmFRCX0ptdbyYYMB8GA1UdIwQY
MBaAFFDUrDIJZatJkRCFAaBgKmiT5j/sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU5Tc01nbGxxMG1SRUlVQm9HQXFhSlBtUC13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80MDM1MjgtOWU3Yy00YjY0LTk1OTkt
YmEwMzIzMjM3NDRjLzEvVU5Tc01nbGxxMG1SRUlVQm9HQXFhSlBtUC13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS80MDM1MjgtOWU3Yy00YjY0LTk1OTktYmEwMzIzMjM3NDRj
LzEvVU5Tc01nbGxxMG1SRUlVQm9HQXFhSlBtUC13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt+eKYUF+
bmZACuHkdJYeg/Hth3MYmuwHTNd/N91/vqIO6cLhpmVOb8FldYSIsUI2389GgLqP
JWvSwrDt2p+6uKlfH8QI4+qyVv9WXzVNyLlPp6eHUtOqpZF4V92Dy8Mr9iuYBOWY
3GMvCnNL4YuyVCHy4zbIUAQIFtNVGzUOa+ULq05oKaA8F5ooHDVLxrZDhfgt8xKo
QzWn0xbruUdgcew8j468SEO8bEJ0qj5SJP4b3tB5ssubn12g6OxWXVe6ZrzrMMi0
HOSBmL20XiCsuTaCdubs610YUdliG6q2n5EaZJGKg/EbW+zwuA77owXm7+A/BlQ7
49oTqEYholgkKg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:34 2026 by rpki-client