Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft
File:                     UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft (raw, json)
Hash identifier:          VA6Vih4VGPc8L4NalseMjUSvANA/ammTR1RdVJFz9xo=
Subject key identifier:   C9:16:69:7D:10:76:4A:35:1A:AD:E7:F0:58:EA:2A:54:FE:85:FB:36
Authority key identifier: 52:15:FE:83:94:8C:FC:7D:3E:00:72:87:0C:70:3F:A3:13:50:2C:BC
Certificate issuer:       /CN=5215fe83948cfc7d3e0072870c703fa313502cbc
Certificate serial:       019CACB4D8F59CC503F306D1CEABB1E9715B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UhX-g5SM_H0-AHKHDHA_oxNQLLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft
Manifest number:          1848
Signing time:             Mon 02 Mar 2026 04:00:58 +0000
Manifest this update:     Mon 02 Mar 2026 04:00:58 +0000
Manifest next update:     Tue 03 Mar 2026 04:00:58 +0000
Files and hashes:         1: UhX-g5SM_H0-AHKHDHA_oxNQLLw.crl (hash: MgDP7NZF0rLSvQLUF2UwIijC0f1hvfwFvdIKYX0IzZA=)
                          2: ghAGIAHf2NUSuXtfAt8s6eabgvg.roa (hash: S/XY0H52dZPgXYBFOlUepYiuIVmvJAzUO0r3Q7zhLjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UhX-g5SM_H0-AHKHDHA_oxNQLLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b4:d8:f5:9c:c5:03:f3:06:d1:ce:ab:b1:e9:71:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5215fe83948cfc7d3e0072870c703fa313502cbc
        Validity
            Not Before: Mar  2 04:00:58 2026 GMT
            Not After : Mar  3 04:00:58 2026 GMT
        Subject: CN=c916697d10764a351aade7f058ea2a54fe85fb36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:aa:0d:fd:47:92:98:1c:a8:bd:96:71:5d:42:
                    a4:85:6f:07:54:7b:21:b1:c3:0b:38:38:ce:d2:7d:
                    59:94:d4:6c:2f:44:ee:22:88:24:79:12:1f:fd:cf:
                    b5:19:f8:49:1f:e0:da:b5:6d:36:5a:19:56:96:ae:
                    40:8c:2c:fa:b8:c0:70:14:00:18:26:ff:9e:a9:b0:
                    51:0a:fd:8d:1d:66:92:b8:3e:32:5a:03:7d:45:2a:
                    45:03:bf:24:85:39:4b:ca:3e:d8:e1:65:1d:cb:12:
                    71:b6:77:7c:76:ee:45:44:e9:ca:1c:17:df:89:e0:
                    f0:9f:95:24:84:16:88:13:27:9d:1e:a5:5e:57:20:
                    8a:9a:65:e9:6d:10:3a:38:23:ec:60:3a:44:80:fe:
                    44:1f:88:e9:10:0b:e8:88:d3:53:3e:02:3e:b3:94:
                    b4:35:ea:db:15:15:eb:d6:6f:39:6a:9a:92:f9:78:
                    dc:df:b2:b9:15:23:c5:10:be:d7:4f:37:43:51:92:
                    93:b1:76:46:2f:de:02:b8:13:66:82:d2:a1:8f:29:
                    03:68:e5:98:57:0b:b8:53:6a:a6:e8:c6:19:3b:86:
                    38:77:da:a2:d6:b0:dd:64:19:ac:49:19:95:84:fa:
                    68:16:6d:a7:c8:0a:15:85:79:57:ce:9b:1d:12:04:
                    1f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:16:69:7D:10:76:4A:35:1A:AD:E7:F0:58:EA:2A:54:FE:85:FB:36
            X509v3 Authority Key Identifier:
                keyid:52:15:FE:83:94:8C:FC:7D:3E:00:72:87:0C:70:3F:A3:13:50:2C:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhX-g5SM_H0-AHKHDHA_oxNQLLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:94:22:72:ac:e3:7f:45:93:a9:05:db:1d:64:cf:f2:df:4d:
         7e:81:68:bd:99:41:bf:24:82:c7:2a:57:ed:39:f1:ba:2f:d8:
         13:36:e3:ce:a2:dd:5a:d6:35:3d:72:cb:a3:c2:7b:19:f9:7b:
         98:ba:c5:6b:28:b4:ff:44:df:c8:a1:b2:21:30:48:9b:4c:83:
         1e:78:cf:fc:b5:c4:83:52:14:11:10:74:fc:a9:14:87:f8:45:
         91:6d:b2:67:c5:de:9d:ce:ef:72:25:2e:1b:38:96:62:21:c6:
         dc:33:af:e3:c5:6d:34:20:54:f1:23:82:4c:63:86:5f:26:bd:
         ab:66:12:a9:a9:17:9b:a2:20:c4:8d:bc:01:c8:07:ad:f5:25:
         8a:85:c4:58:d8:47:bb:76:23:7f:37:58:94:92:39:ff:64:40:
         dd:3c:39:8a:2a:4f:fe:dc:da:0e:55:d4:09:e9:4e:76:5c:5b:
         a2:07:a2:3e:cf:3c:5d:b8:a4:77:c3:2c:63:13:0b:6a:69:00:
         0e:42:78:d3:a8:6e:47:68:a3:86:89:38:1f:f8:b4:b8:b4:4a:
         40:d8:ed:fb:22:5f:32:ba:85:26:6c:91:8f:36:5c:9d:bb:03:
         bb:cc:99:4c:b0:c0:ea:d9:7b:5c:95:51:34:1b:f4:84:39:f4:
         45:2f:ec:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystNj1nMUD8wbRzqux6XFbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMTVmZTgzOTQ4Y2ZjN2QzZTAwNzI4NzBjNzAzZmEzMTM1
MDJjYmMwHhcNMjYwMzAyMDQwMDU4WhcNMjYwMzAzMDQwMDU4WjAzMTEwLwYDVQQD
EyhjOTE2Njk3ZDEwNzY0YTM1MWFhZGU3ZjA1OGVhMmE1NGZlODVmYjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqoN/UeSmByovZZxXUKkhW8HVHsh
scMLODjO0n1ZlNRsL0TuIogkeRIf/c+1GfhJH+DatW02WhlWlq5AjCz6uMBwFAAY
Jv+eqbBRCv2NHWaSuD4yWgN9RSpFA78khTlLyj7Y4WUdyxJxtnd8du5FROnKHBff
ieDwn5UkhBaIEyedHqVeVyCKmmXpbRA6OCPsYDpEgP5EH4jpEAvoiNNTPgI+s5S0
NerbFRXr1m85apqS+Xjc37K5FSPFEL7XTzdDUZKTsXZGL94CuBNmgtKhjykDaOWY
Vwu4U2qm6MYZO4Y4d9qi1rDdZBmsSRmVhPpoFm2nyAoVhXlXzpsdEgQf6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMkWaX0Qdko1Gq3n8FjqKlT+hfs2MB8GA1UdIwQY
MBaAFFIV/oOUjPx9PgByhwxwP6MTUCy8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWhYLWc1U01fSDAtQUhLSERIQV9veE5RTEx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jMDkzNGItMWQxZC00NWMwLWJhNmYt
ZWY5ODE0Y2ZmMmI4LzEvVWhYLWc1U01fSDAtQUhLSERIQV9veE5RTEx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9jMDkzNGItMWQxZC00NWMwLWJhNmYtZWY5ODE0Y2ZmMmI4
LzEvVWhYLWc1U01fSDAtQUhLSERIQV9veE5RTEx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUZQicqzj
f0WTqQXbHWTP8t9NfoFovZlBvySCxypX7Tnxui/YEzbjzqLdWtY1PXLLo8J7Gfl7
mLrFayi0/0TfyKGyITBIm0yDHnjP/LXEg1IUERB0/KkUh/hFkW2yZ8Xenc7vciUu
GziWYiHG3DOv48VtNCBU8SOCTGOGXya9q2YSqakXm6IgxI28AcgHrfUlioXEWNhH
u3YjfzdYlJI5/2RA3Tw5iipP/tzaDlXUCelOdlxbogeiPs88Xbikd8MsYxMLamkA
DkJ406huR2ijhok4H/i0uLRKQNjt+yJfMrqFJmyRjzZcnbsDu8yZTLDA6tl7XJVR
NBv0hDn0RS/siw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:40:27 2026 by rpki-client