Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
File:                     UeK-E5rnec09T-68zTaCgaH156A.mft (raw, json)
Hash identifier:          LyS5sWqmNHO/d3zMqpWigHCVXnAZMRgOyWzYv8s8xKY=
Subject key identifier:   8B:AE:9D:F6:79:0F:CC:4C:83:E8:51:45:8E:A4:E4:F9:C0:8F:F7:ED
Authority key identifier: 51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0
Certificate issuer:       /CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
Certificate serial:       019CABD9194E893DB4DC14E2A4B367102B48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
Manifest number:          1845
Signing time:             Mon 02 Mar 2026 00:00:57 +0000
Manifest this update:     Mon 02 Mar 2026 00:00:57 +0000
Manifest next update:     Tue 03 Mar 2026 00:00:57 +0000
Files and hashes:         1: Fh1t7rzPIhJXnOEVD4FNHFJov6I.roa (hash: xyxnFW4AuKmT8OTwF87A3TgtZBfvGtO+UCiL5cJIqm4=)
                          2: UeK-E5rnec09T-68zTaCgaH156A.crl (hash: F7n0ue/CshuvAyy7wN+fp6buAznI3Rc6aQa/o9nRAPY=)
                          3: _FC9hMLG7SF2_l0VnWxgvnPruLU.roa (hash: /T+U+cTcUNtTkJxXrz2mxyyoddVM2fTKoj6v8XpQa6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:19:4e:89:3d:b4:dc:14:e2:a4:b3:67:10:2b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
        Validity
            Not Before: Mar  2 00:00:57 2026 GMT
            Not After : Mar  3 00:00:57 2026 GMT
        Subject: CN=8bae9df6790fcc4c83e851458ea4e4f9c08ff7ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:73:5a:b4:01:77:42:c2:33:e8:57:00:b2:23:
                    25:12:a2:bc:f0:42:65:b2:99:00:b7:a1:ba:e6:27:
                    12:9d:89:a0:ff:1f:59:f5:0a:fc:40:54:c4:e7:b6:
                    c2:d9:62:2d:e3:e2:6a:fc:58:92:d8:91:5f:9b:2b:
                    6c:77:6a:ea:e1:f3:b0:00:94:e8:00:3a:a8:e3:f6:
                    35:00:90:77:27:49:c9:d1:f9:22:b4:c0:53:4f:42:
                    ae:c9:02:ae:6d:ae:2a:5d:cb:7a:08:9e:44:50:16:
                    b4:ca:de:fd:cd:22:1f:7a:f2:3d:8d:9d:b2:4e:ba:
                    9f:5f:16:ce:31:7e:c1:73:50:6e:ce:b2:4b:6b:a4:
                    4a:aa:62:4f:5d:29:1c:f5:29:ea:b2:aa:96:a4:90:
                    d9:7e:5e:89:3e:2f:79:ad:ce:98:61:21:b5:92:40:
                    fa:00:c8:89:fb:ef:6c:ff:d8:cc:44:28:c8:b7:d6:
                    43:53:c7:65:54:af:48:79:0e:bb:b4:18:76:47:44:
                    88:f4:11:41:46:f1:7a:f1:48:a8:be:1b:c6:66:94:
                    18:ed:74:0d:ea:3b:89:a5:b5:0d:26:3a:21:8c:bb:
                    09:37:7b:c0:c3:9a:e3:98:e5:d3:03:a5:90:e1:dc:
                    96:55:a3:eb:b3:d8:2e:e5:50:96:4f:a7:7f:aa:61:
                    52:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:AE:9D:F6:79:0F:CC:4C:83:E8:51:45:8E:A4:E4:F9:C0:8F:F7:ED
            X509v3 Authority Key Identifier:
                keyid:51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:30:82:e2:b4:26:26:9b:a7:8b:a5:0b:d4:f4:d8:0e:63:a3:
         3a:85:dd:cc:f5:fe:e0:49:48:d5:fc:fd:bd:a8:92:17:a6:ac:
         cc:24:4e:21:58:40:4e:a4:e8:c6:24:3e:67:ca:32:5f:7a:9a:
         03:d7:ef:b6:56:80:5f:5a:a6:09:f6:98:d7:1c:2f:5c:80:45:
         af:a8:f9:95:25:6f:2a:27:f0:7d:fa:c0:a9:cc:34:77:14:dd:
         c2:5c:da:f8:0e:c9:59:03:5d:53:e6:38:18:13:51:52:0c:f4:
         48:ea:6b:e9:21:01:14:a2:ee:11:8a:04:87:c5:8d:bc:73:01:
         e1:2d:96:2d:b4:6c:38:98:8a:83:cc:88:b5:51:89:e1:7e:75:
         9b:a4:f3:44:3c:4c:65:ce:a5:a2:52:05:d5:d7:d9:c9:74:d8:
         34:d6:34:c7:76:52:2b:3e:b8:1c:f8:8e:07:ac:8d:32:37:73:
         0b:c1:d8:a9:7c:8a:17:52:49:21:02:e4:2f:cc:11:70:c6:f7:
         d5:ce:c3:cd:49:a1:2c:95:61:14:70:69:be:62:9f:cb:f3:8e:
         52:c2:83:ec:04:ca:1c:d6:7f:38:2e:ab:e2:3e:a7:58:b3:b8:
         fd:6f:10:35:c0:34:16:df:c1:1e:41:02:99:a6:36:dd:7e:8e:
         ac:49:d2:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2RlOiT203BTipLNnECtIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZTJiZTEzOWFlNzc5Y2QzZDRmZWViY2NkMzY4MjgxYTFm
NWU3YTAwHhcNMjYwMzAyMDAwMDU3WhcNMjYwMzAzMDAwMDU3WjAzMTEwLwYDVQQD
Eyg4YmFlOWRmNjc5MGZjYzRjODNlODUxNDU4ZWE0ZTRmOWMwOGZmN2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HNatAF3QsIz6FcAsiMlEqK88EJl
spkAt6G65icSnYmg/x9Z9Qr8QFTE57bC2WIt4+Jq/FiS2JFfmytsd2rq4fOwAJTo
ADqo4/Y1AJB3J0nJ0fkitMBTT0KuyQKuba4qXct6CJ5EUBa0yt79zSIfevI9jZ2y
TrqfXxbOMX7Bc1BuzrJLa6RKqmJPXSkc9SnqsqqWpJDZfl6JPi95rc6YYSG1kkD6
AMiJ++9s/9jMRCjIt9ZDU8dlVK9IeQ67tBh2R0SI9BFBRvF68UiovhvGZpQY7XQN
6juJpbUNJjohjLsJN3vAw5rjmOXTA6WQ4dyWVaPrs9gu5VCWT6d/qmFSDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIuunfZ5D8xMg+hRRY6k5PnAj/ftMB8GA1UdIwQY
MBaAFFHivhOa53nNPU/uvM02goGh9eegMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWVLLUU1cm5lYzA5VC02OHpUYUNnYUgxNTZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yZjU5MzEtMDVhOC00MzZiLTkyNzMt
Y2Q3YjZlZGJmY2Y1LzEvVWVLLUU1cm5lYzA5VC02OHpUYUNnYUgxNTZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8yZjU5MzEtMDVhOC00MzZiLTkyNzMtY2Q3YjZlZGJmY2Y1
LzEvVWVLLUU1cm5lYzA5VC02OHpUYUNnYUgxNTZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABjCC4rQm
Jpuni6UL1PTYDmOjOoXdzPX+4ElI1fz9vaiSF6aszCROIVhATqToxiQ+Z8oyX3qa
A9fvtlaAX1qmCfaY1xwvXIBFr6j5lSVvKifwffrAqcw0dxTdwlza+A7JWQNdU+Y4
GBNRUgz0SOpr6SEBFKLuEYoEh8WNvHMB4S2WLbRsOJiKg8yItVGJ4X51m6TzRDxM
Zc6lolIF1dfZyXTYNNY0x3ZSKz64HPiOB6yNMjdzC8HYqXyKF1JJIQLkL8wRcMb3
1c7DzUmhLJVhFHBpvmKfy/OOUsKD7ATKHNZ/OC6r4j6nWLO4/W8QNcA0Ft/BHkEC
maY23X6OrEnS8g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:55:37 2026 by rpki-client