Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft
File:                     uxmjOYHjSyrlBYbjBIxmOixrhYY.mft (raw, json)
Hash identifier:          1pJN4TWkRibKhDCfpp5YF78zWh87iHWF127zc4hAd/Q=
Subject key identifier:   FD:FB:BB:F0:C7:E7:04:D8:1A:47:AB:C0:6E:22:FE:94:EC:87:03:6E
Authority key identifier: BB:19:A3:39:81:E3:4B:2A:E5:05:86:E3:04:8C:66:3A:2C:6B:85:86
Certificate issuer:       /CN=bb19a33981e34b2ae50586e3048c663a2c6b8586
Certificate serial:       019CAD5A44AC32C557586000EB5FA412871D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft
Manifest number:          184A
Signing time:             Mon 02 Mar 2026 07:01:40 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:40 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:40 +0000
Files and hashes:         1: CQOdCpBLSHHQ6AramZa1bXJe9DA.roa (hash: XyLg4h/oghxr7miII9KG3Zvqwxb2XQxtLrLG6x3uqBI=)
                          2: uxmjOYHjSyrlBYbjBIxmOixrhYY.crl (hash: ph/H54uVBsxIRisPKRyaNZislzzqhyGfgXUCAGKWKMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:5a:44:ac:32:c5:57:58:60:00:eb:5f:a4:12:87:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb19a33981e34b2ae50586e3048c663a2c6b8586
        Validity
            Not Before: Mar  2 07:01:40 2026 GMT
            Not After : Mar  3 07:01:40 2026 GMT
        Subject: CN=fdfbbbf0c7e704d81a47abc06e22fe94ec87036e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:7c:15:c1:10:82:95:ba:59:c7:0f:9f:fe:32:
                    e8:b2:b5:33:1c:cc:1f:05:d1:61:c5:45:c3:52:9f:
                    50:3f:ae:17:fc:2e:b9:86:8b:78:d8:44:fd:c8:08:
                    54:a0:11:00:ae:82:6b:0d:c1:e7:11:ca:e1:8b:9f:
                    94:c2:46:05:f8:9a:78:48:51:5d:1b:61:6f:28:22:
                    d2:74:b1:de:b7:7c:15:d3:92:c1:79:ba:38:dd:ee:
                    60:32:ef:2a:13:4b:89:c7:4b:80:f6:25:74:ea:44:
                    fd:b3:46:4c:b3:b1:f6:0e:88:65:8d:79:4e:be:5a:
                    18:a1:7e:ac:f4:36:95:81:bb:63:fd:a9:8c:4f:e5:
                    a2:81:44:06:58:e8:59:ca:63:84:6c:9c:09:af:b7:
                    a2:34:f8:93:ef:0e:37:7a:83:c2:48:67:02:8c:11:
                    8e:4f:e0:9f:0f:dd:ed:99:ab:56:90:88:8f:e7:4b:
                    76:87:54:3d:81:e1:80:f4:23:20:6c:79:6a:d7:4c:
                    b5:4f:d7:14:13:2c:ab:ad:17:c7:55:04:5a:7f:30:
                    c9:c6:52:96:d1:12:33:2f:78:53:0c:92:34:0a:6f:
                    6e:2a:04:ce:8e:4c:00:a2:0a:17:00:28:aa:5e:b9:
                    3a:02:df:3c:fa:03:bf:92:bc:80:c1:2b:cd:02:d7:
                    42:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:FB:BB:F0:C7:E7:04:D8:1A:47:AB:C0:6E:22:FE:94:EC:87:03:6E
            X509v3 Authority Key Identifier:
                keyid:BB:19:A3:39:81:E3:4B:2A:E5:05:86:E3:04:8C:66:3A:2C:6B:85:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:29:50:60:55:c5:28:2d:ed:f4:93:f8:75:af:71:86:20:45:
         05:32:c5:88:f7:ee:4e:c5:f7:04:fe:da:2c:6f:ab:ab:5b:f4:
         72:b6:65:e2:cf:e0:12:59:3c:f2:de:e1:bc:ba:0d:26:f7:dc:
         e4:59:74:6a:08:41:7b:a4:9b:07:3b:e9:c7:da:58:e6:9c:50:
         3e:d6:3d:a2:fe:10:fb:16:3c:2c:11:52:eb:b0:41:15:94:8e:
         c5:a9:b5:6e:6d:90:a4:5b:21:61:f0:06:ac:2e:16:b4:3f:ec:
         23:68:4c:71:5f:8b:dd:d9:15:c7:b1:5e:d3:61:8e:11:61:2e:
         ae:bc:86:0b:39:35:63:ae:92:23:e1:9f:31:f5:55:c5:f5:18:
         24:71:6f:e1:32:b2:73:fb:04:06:09:d8:ce:c9:b9:3b:3f:1d:
         bc:74:8e:d3:3f:62:a6:be:93:a2:20:d0:80:3a:48:09:82:40:
         3a:6f:d0:85:b5:90:cb:56:3e:68:0d:8b:7f:26:c2:91:31:df:
         20:c2:69:8d:ca:49:55:df:4b:8c:aa:31:fd:ae:ef:ce:e6:c6:
         fe:d8:87:ed:43:f1:35:80:28:25:83:99:c4:36:e7:23:5b:fe:
         7e:da:09:eb:3a:d9:68:73:ef:9d:87:ee:39:5b:58:e6:37:9b:
         2e:fb:a7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:23:08 2026 by rpki-client