Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft
File:                     UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft (raw, json)
Hash identifier:          jjQhDHPlAnUzxdQRmp5M9+Ho4rwS2OI5p5T7RnAVmY8=
Subject key identifier:   CB:06:75:83:C4:18:ED:24:AD:ED:6A:5F:4C:B9:58:0D:76:17:8B:7F
Authority key identifier: 50:5C:EC:09:BF:D8:5D:B2:76:26:96:34:5D:68:87:1D:09:D5:E8:BD
Certificate issuer:       /CN=505cec09bfd85db2762696345d68871d09d5e8bd
Certificate serial:       019D9B878316AFE0056ADD2F7DDD01031D18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft
Manifest number:          C8
Signing time:             Fri 17 Apr 2026 13:00:42 +0000
Manifest this update:     Fri 17 Apr 2026 13:00:42 +0000
Manifest next update:     Sat 18 Apr 2026 13:00:42 +0000
Files and hashes:         1: UFzsCb_YXbJ2JpY0XWiHHQnV6L0.crl (hash: zbEuUN95nuBWDL/vZJ1F6J3ahC2oUeXm++3XdrG/GMA=)
                          2: iHf5pzR2G0Z6T_ZJi-EaUcBL-Pg.roa (hash: xmsgXuBrJTw5PmZn+vLgj/qAwG4jTdhGkBSvr8O5tbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 13:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:87:83:16:af:e0:05:6a:dd:2f:7d:dd:01:03:1d:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505cec09bfd85db2762696345d68871d09d5e8bd
        Validity
            Not Before: Apr 17 13:00:42 2026 GMT
            Not After : Apr 18 13:00:42 2026 GMT
        Subject: CN=cb067583c418ed24aded6a5f4cb9580d76178b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:04:31:2d:99:26:b5:0b:ef:61:08:3d:15:1e:
                    3a:c2:80:c7:68:41:14:49:b9:73:ea:cf:ad:c0:c1:
                    3b:d1:22:fe:5a:07:81:45:a7:77:e5:53:08:af:f8:
                    9c:c6:35:d8:5e:dd:2d:22:29:b0:78:ee:f6:88:33:
                    8f:41:be:ba:ce:7d:df:59:50:1a:5a:a4:70:50:73:
                    72:2a:81:4e:af:ff:20:b2:8a:04:f5:85:2f:79:8b:
                    a4:3d:96:71:f0:3d:0c:1f:41:21:61:9f:7e:e4:7e:
                    a2:87:5d:e6:96:60:23:8b:c2:c1:19:03:95:1d:ea:
                    fd:b1:99:ee:00:78:eb:ff:92:ae:bb:54:bc:8a:9a:
                    de:1e:79:e1:7e:20:dc:75:9d:5d:84:04:64:ec:42:
                    66:fd:a2:f6:e7:6e:bb:e4:77:5f:3b:ef:c2:17:eb:
                    e6:4e:f2:19:c5:3b:45:f9:0b:9d:00:3d:8d:b3:61:
                    7b:7e:5f:c7:ce:fe:a3:5c:a5:13:7a:00:8a:b4:bc:
                    b6:11:ab:9e:e1:cb:00:82:f1:61:06:7e:5f:14:d1:
                    16:04:2a:15:3d:fb:cb:79:87:f6:37:01:85:df:aa:
                    46:07:e2:b0:a3:ac:b6:80:50:9d:57:e4:39:8e:60:
                    4c:5c:3f:51:c8:fa:9a:9e:71:d2:d3:ec:d4:39:c4:
                    49:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:06:75:83:C4:18:ED:24:AD:ED:6A:5F:4C:B9:58:0D:76:17:8B:7F
            X509v3 Authority Key Identifier:
                keyid:50:5C:EC:09:BF:D8:5D:B2:76:26:96:34:5D:68:87:1D:09:D5:E8:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:42:3d:99:b8:49:36:70:5e:29:61:65:d9:c2:4e:00:ec:14:
         9f:8c:39:f7:bc:76:c5:2a:f1:0c:a5:bd:76:01:d4:5d:2b:d9:
         19:a3:52:8e:4e:2c:10:1e:c4:16:a7:51:fa:e0:fa:66:30:2d:
         fa:ff:37:c2:bd:7a:34:dd:7d:74:c8:91:6b:65:38:1c:b6:3d:
         7d:41:49:e3:f8:69:88:f3:bd:80:f2:50:34:63:e7:95:42:25:
         64:b6:0f:fb:d7:53:d5:b2:65:0e:35:78:a5:ee:f1:20:9b:82:
         c0:bd:1b:f6:09:e9:36:66:1a:7e:95:e9:9e:3b:ba:03:4a:ed:
         97:37:ef:29:7e:b0:a3:a4:8f:23:c9:e1:b6:f2:b4:7c:f9:c9:
         8b:dd:d4:0e:c5:1c:f5:7b:c6:00:bd:b9:30:71:1c:21:48:03:
         06:44:c7:c8:e7:6c:a9:2e:c3:c7:34:f3:a8:2d:b1:e4:f4:c0:
         9e:58:37:2b:73:d6:86:67:78:e4:ca:21:ba:c1:25:12:75:f8:
         7b:46:5e:d9:f2:97:16:c5:c7:82:64:d2:d1:ab:8b:25:a3:67:
         79:2f:30:7c:52:60:fc:f5:17:fc:60:73:b9:6f:ba:69:04:8d:
         23:c4:bf:d8:6e:96:65:12:f6:2e:d6:9e:39:3a:10:51:15:f8:
         39:a0:5f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:14:47 2026 by rpki-client