Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
File:                     UqqgphiMl6p0LMeG47cLyQnKxEw.mft (raw, json)
Hash identifier:          aUNnARbWJo4Mvc5HEUqohcbDDkZyxhuNfli+JdS0Wr8=
Subject key identifier:   7A:41:AF:92:43:F3:47:A6:BD:01:D8:65:D9:88:C2:93:9E:93:67:B2
Authority key identifier: 52:AA:A0:A6:18:8C:97:AA:74:2C:C7:86:E3:B7:0B:C9:09:CA:C4:4C
Certificate issuer:       /CN=52aaa0a6188c97aa742cc786e3b70bc909cac44c
Certificate serial:       019D984FACE962AFE7EEFEE4402FABE022CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
Manifest number:          18C4
Signing time:             Thu 16 Apr 2026 22:00:51 +0000
Manifest this update:     Thu 16 Apr 2026 22:00:51 +0000
Manifest next update:     Fri 17 Apr 2026 22:00:51 +0000
Files and hashes:         1: UqqgphiMl6p0LMeG47cLyQnKxEw.crl (hash: 01BGmIn6fPdsm8C6pboMKt7rGdS3uLW6JBmGCMOHxKU=)
                          2: m66pD5NNoTudVlprN23DFJpyQNo.roa (hash: Zi+SOs/s829OkjmiRlWIKt2XYMZgmPRVGnqrx7IEkng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:4f:ac:e9:62:af:e7:ee:fe:e4:40:2f:ab:e0:22:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52aaa0a6188c97aa742cc786e3b70bc909cac44c
        Validity
            Not Before: Apr 16 22:00:51 2026 GMT
            Not After : Apr 17 22:00:51 2026 GMT
        Subject: CN=7a41af9243f347a6bd01d865d988c2939e9367b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:41:3c:c1:98:0f:b1:cc:87:3a:d7:28:af:a4:
                    ac:01:9a:eb:f5:ca:57:b4:ab:60:75:3b:78:9d:ef:
                    3c:89:59:7d:f1:a0:da:24:9f:ca:6d:04:20:1c:ae:
                    ad:b5:a4:22:1f:80:96:f2:04:13:5b:04:9d:0b:df:
                    c3:ab:d9:ae:41:43:ae:13:6f:aa:2b:72:17:0f:d5:
                    97:38:67:80:92:30:a1:6a:04:9e:75:75:8a:69:4a:
                    4c:56:85:c0:ab:6c:8f:8b:71:06:59:8b:3c:e2:2c:
                    37:f1:b0:cb:04:a1:e2:c0:e3:60:da:0c:7b:91:b8:
                    95:91:55:97:04:49:70:33:b5:8d:20:49:65:32:cd:
                    8a:14:62:f3:38:74:71:4a:45:bc:e1:ed:ae:6a:cc:
                    4d:05:95:c6:84:b9:34:10:8a:3f:fd:ea:b1:a3:b9:
                    ca:34:0b:3d:5e:e6:fa:95:98:06:59:f7:ea:2e:8b:
                    7a:2e:41:7e:f7:d7:d9:82:95:e5:9b:49:1e:6e:2e:
                    f2:f7:49:b0:d4:b1:b7:79:30:ea:a2:b3:9d:90:38:
                    ef:92:8b:25:f4:62:67:1b:96:17:8f:d1:36:fb:60:
                    ff:51:3a:76:ef:fd:c7:17:56:de:da:89:10:2c:fb:
                    3f:b0:c0:74:51:e1:27:ca:0b:b3:bd:12:d5:74:d1:
                    12:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:41:AF:92:43:F3:47:A6:BD:01:D8:65:D9:88:C2:93:9E:93:67:B2
            X509v3 Authority Key Identifier:
                keyid:52:AA:A0:A6:18:8C:97:AA:74:2C:C7:86:E3:B7:0B:C9:09:CA:C4:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:35:7b:13:f8:08:9b:de:0c:bd:2f:43:2f:d5:43:c6:60:87:
         df:6d:22:49:9e:8b:9c:4e:25:fc:1c:fd:d0:cc:f1:ec:f2:7c:
         d2:2d:08:e1:0d:7f:77:92:91:2c:92:15:e9:f4:01:f2:4c:8f:
         13:c5:e7:3e:65:24:a6:14:0c:03:12:ae:8d:56:35:7b:00:1d:
         24:f7:32:6a:87:b1:af:f3:1f:57:e4:67:13:a2:eb:b6:d8:14:
         aa:9a:47:d8:45:56:ff:9f:b9:86:e1:b4:3a:0d:0c:f9:d3:3b:
         cd:ce:0f:5f:0c:29:75:e4:ca:9f:e0:ed:70:f8:64:f0:31:30:
         4f:27:95:bc:41:9a:08:46:81:3d:c8:f9:83:1f:da:68:64:0a:
         02:47:8d:ea:65:96:61:09:3b:8a:e0:da:f2:fb:6a:04:2c:84:
         75:74:fe:66:51:22:06:3b:ab:af:64:7f:37:a5:86:2f:a8:b2:
         b1:0a:3e:02:68:03:94:8e:a2:63:99:ca:9a:9a:35:30:b3:f1:
         f8:3b:52:d0:ac:5f:6e:8d:2f:a6:fb:1d:06:54:3b:ff:fa:8d:
         e4:d1:e5:f1:9c:7d:3c:13:37:8c:39:54:7c:22:63:1c:b7:9c:
         02:96:c9:73:eb:6c:74:af:0f:76:4e:ca:c5:7e:bb:49:ad:df:
         d5:63:26:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YT6zpYq/n7v7kQC+r4CLMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYWFhMGE2MTg4Yzk3YWE3NDJjYzc4NmUzYjcwYmM5MDlj
YWM0NGMwHhcNMjYwNDE2MjIwMDUxWhcNMjYwNDE3MjIwMDUxWjAzMTEwLwYDVQQD
Eyg3YTQxYWY5MjQzZjM0N2E2YmQwMWQ4NjVkOTg4YzI5MzllOTM2N2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUE8wZgPscyHOtcor6SsAZrr9cpX
tKtgdTt4ne88iVl98aDaJJ/KbQQgHK6ttaQiH4CW8gQTWwSdC9/Dq9muQUOuE2+q
K3IXD9WXOGeAkjChagSedXWKaUpMVoXAq2yPi3EGWYs84iw38bDLBKHiwONg2gx7
kbiVkVWXBElwM7WNIEllMs2KFGLzOHRxSkW84e2uasxNBZXGhLk0EIo//eqxo7nK
NAs9Xub6lZgGWffqLot6LkF+99fZgpXlm0kebi7y90mw1LG3eTDqorOdkDjvkosl
9GJnG5YXj9E2+2D/UTp27/3HF1be2okQLPs/sMB0UeEnyguzvRLVdNEShwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHpBr5JD80emvQHYZdmIwpOek2eyMB8GA1UdIwQY
MBaAFFKqoKYYjJeqdCzHhuO3C8kJysRMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXFxZ3BoaU1sNnAwTE1lRzQ3Y0x5UW5LeEV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9kOTM3ZTAtNDI3Ny00ZTZhLWI1OTMt
NDZhODgwNDI1Nzk5LzEvVXFxZ3BoaU1sNnAwTE1lRzQ3Y0x5UW5LeEV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9kOTM3ZTAtNDI3Ny00ZTZhLWI1OTMtNDZhODgwNDI1Nzk5
LzEvVXFxZ3BoaU1sNnAwTE1lRzQ3Y0x5UW5LeEV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdzV7E/gI
m94MvS9DL9VDxmCH320iSZ6LnE4l/Bz90Mzx7PJ80i0I4Q1/d5KRLJIV6fQB8kyP
E8XnPmUkphQMAxKujVY1ewAdJPcyaoexr/MfV+RnE6LrttgUqppH2EVW/5+5huG0
Og0M+dM7zc4PXwwpdeTKn+DtcPhk8DEwTyeVvEGaCEaBPcj5gx/aaGQKAkeN6mWW
YQk7iuDa8vtqBCyEdXT+ZlEiBjurr2R/N6WGL6iysQo+AmgDlI6iY5nKmpo1MLPx
+DtS0Kxfbo0vpvsdBlQ7//qN5NHl8Zx9PBM3jDlUfCJjHLecApbJc+tsdK8Pdk7K
xX67Sa3f1WMmYA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:09:06 2026 by rpki-client