Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
File:                     UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft (raw, json)
Hash identifier:          tBX1x5a6AjO9V6EUDrLdlUtKm9k03dr5/xtnzvds590=
Subject key identifier:   39:A4:74:F5:A2:55:7B:B4:80:C0:2F:AD:CB:3B:8C:56:7F:66:88:21
Authority key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
Certificate issuer:       /CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Certificate serial:       019CAA58574ED7FC4CCBAE1ABECAD7AFE12F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
Manifest number:          1853
Signing time:             Sun 01 Mar 2026 17:00:42 +0000
Manifest this update:     Sun 01 Mar 2026 17:00:42 +0000
Manifest next update:     Mon 02 Mar 2026 17:00:42 +0000
Files and hashes:         1: 0d6SiGZ_3HskVJZrwW4LAUnPhVk.roa (hash: sH5j+6BmvxKro4kCtZa6p73msltGzoMgNQq57Mh0jXE=)
                          2: GBJMnjMbFvL5E-lL9i3lBFi6nWY.roa (hash: SL+iSObRv/yIgCUc1iePoCbQgwvJ0km8l952y/nYPkY=)
                          3: IY7fhcpZn8V1nFJzcjkAB2G_wy8.roa (hash: kypNUV6hOKnyhwHaYDOZf/jJOmWZK2acEUl1kQxKdoM=)
                          4: UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl (hash: J3N9spNx7n1xS7E7ncERaoiCgutZiad2y7dd9hLTlAc=)
                          5: ZDSwaO2zu2qpiNoQdfHO9f__qXE.roa (hash: /yuwN8mjkUUOdBbxmmKWCbuEc9CKVHYeB+reIdnpnsM=)
                          6: qfnbY9JngbTP144k13tCg-IRl3w.roa (hash: 9MKZ2wZQrvJYgyQxGjaYnWmRu2eM+70F1EApasiltnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:57:4e:d7:fc:4c:cb:ae:1a:be:ca:d7:af:e1:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
        Validity
            Not Before: Mar  1 17:00:42 2026 GMT
            Not After : Mar  2 17:00:42 2026 GMT
        Subject: CN=39a474f5a2557bb480c02fadcb3b8c567f668821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a0:7c:b8:f7:ea:78:6b:cb:7f:9c:49:fe:62:
                    d0:17:64:13:f2:df:ac:aa:1e:0e:5c:7f:04:46:d8:
                    a9:20:52:9b:b7:e6:2e:44:6e:54:ff:12:2e:b0:8d:
                    38:31:31:ee:b2:70:18:ea:4a:62:00:e0:b3:fc:76:
                    26:04:83:72:a0:91:5b:06:8f:d8:a7:99:ae:f8:29:
                    83:62:f3:a9:3f:f2:b5:67:f4:23:d2:26:73:39:c1:
                    ac:48:ca:4a:54:38:21:29:3e:b9:81:07:1b:32:25:
                    cc:0b:80:e9:62:d3:44:63:e8:16:50:07:7d:02:1f:
                    77:e0:43:87:67:5a:f9:c9:6a:35:a3:c1:a8:bb:21:
                    dd:4e:48:a5:d9:b5:19:5d:2e:f9:8f:f1:67:84:a6:
                    c8:be:7c:34:2e:5f:40:77:84:e5:dc:90:87:3f:85:
                    73:08:d2:00:6d:e8:e9:86:79:c5:0d:ce:be:20:f5:
                    65:98:52:10:8c:7b:6e:db:c7:2b:3d:2d:0a:fc:e9:
                    1c:c3:14:6f:40:47:07:a6:8a:1c:1b:d7:a9:51:2d:
                    73:2a:1a:66:31:71:a8:64:90:40:81:c1:62:ba:da:
                    86:cd:fc:36:3e:a8:9a:50:2b:aa:83:0b:3d:34:fb:
                    45:fe:71:b2:2d:26:75:99:7f:72:18:00:74:96:79:
                    55:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A4:74:F5:A2:55:7B:B4:80:C0:2F:AD:CB:3B:8C:56:7F:66:88:21
            X509v3 Authority Key Identifier:
                keyid:52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:b8:96:e3:4e:ec:cd:0e:b9:6a:f4:78:7d:e1:a4:52:27:89:
         68:39:eb:61:00:d3:6d:0c:b5:59:3b:e4:9b:ce:e9:38:aa:ac:
         27:69:f3:31:89:b4:8c:45:6a:2a:be:41:4a:ce:6a:19:1b:c0:
         5b:a5:5b:ac:7b:c9:d5:bb:c4:60:af:02:79:7b:9f:df:7b:23:
         be:5f:fe:1b:db:48:ed:0b:0e:63:69:41:ba:8b:ad:f6:80:00:
         33:99:39:4d:3c:43:61:71:db:5a:d7:83:2b:8c:34:10:ce:13:
         1d:c8:74:dc:e0:70:08:ad:09:fb:ec:93:6e:52:71:e0:49:99:
         9d:40:eb:d6:79:cc:40:49:b8:88:b6:4d:68:67:4f:81:77:b1:
         fb:2e:2a:c0:3a:7b:54:63:67:e2:9d:15:42:2b:94:c1:2c:d1:
         d7:db:24:85:d9:55:4b:e8:01:6c:7c:13:35:63:6a:89:2d:ac:
         ac:3a:b8:a0:1c:67:ea:30:e4:cd:c2:6a:e8:37:6d:d3:c7:c4:
         1a:35:9f:f9:b1:bb:10:83:3a:23:c1:14:86:df:ec:92:96:50:
         89:fa:a9:1c:bf:1e:48:c8:07:51:ef:b5:1d:a3:aa:0d:6e:66:
         a3:7b:a2:e3:66:45:93:0a:03:cc:a4:d5:a2:30:26:75:a5:e1:
         c3:62:32:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:51:59 2026 by rpki-client