Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
File:                     uiOwejwKyeMz9S6LXUGnaKPTkCU.mft (raw, json)
Hash identifier:          gr0wz9myjOF1H5ohjcPRsIYJqbdA57DTTaBegFIEzao=
Subject key identifier:   C1:2D:D1:A0:20:99:21:23:51:43:63:34:2C:2C:F9:ED:46:36:D4:3A
Authority key identifier: BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25
Certificate issuer:       /CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025
Certificate serial:       019D9A3E322190E66D302C42FA32A309543D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
Manifest number:          0874
Signing time:             Fri 17 Apr 2026 07:01:00 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:00 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:00 +0000
Files and hashes:         1: cYSlOixvw1IRH_A6U1PmGBfOnLc.roa (hash: ObOoQktNn2mk1CLRsAqDNu4BrgB8VABVPaTI7wXzkNQ=)
                          2: cfljug29MBdwZ2IRskxqcwdwGN0.roa (hash: RSO1UVd7bjnpUDUf4c2ob5lCf11GhEF8w59+h0O9Z8s=)
                          3: e-t5BEEANDkjz8TT0h8YEJKZz74.asa (hash: tAn9UqhREKeh/3lPzeJs+A/xlp0r6QrTew+hGnn6pAM=)
                          4: sPDYGaB0jdjNmv_RI00LaumXHZM.roa (hash: cR+r+JhOtPPtk4/8vr8rgMsCxMQVubUz6os2NddknO4=)
                          5: uiOwejwKyeMz9S6LXUGnaKPTkCU.crl (hash: 3GnqnNDoRSuUOhaRUSV41Hv87WPK2eqnBmvtkWQv0CA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:32:21:90:e6:6d:30:2c:42:fa:32:a3:09:54:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025
        Validity
            Not Before: Apr 17 07:01:00 2026 GMT
            Not After : Apr 18 07:01:00 2026 GMT
        Subject: CN=c12dd1a020992123514363342c2cf9ed4636d43a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c0:55:89:20:6d:21:2d:91:4d:66:98:cd:de:
                    b5:ef:a9:51:a6:fe:5d:9f:bc:6c:17:77:83:e7:fa:
                    2d:87:5a:91:03:7c:cb:2d:d0:05:f4:6b:28:c7:5f:
                    17:f9:51:a9:9c:3d:53:be:ec:dc:5e:f4:b2:8b:b5:
                    2f:9c:e3:54:a5:6a:3b:a5:3d:83:22:36:07:b0:83:
                    55:93:12:62:7b:59:d1:e8:9a:b0:bb:d2:64:b8:87:
                    55:cc:6b:74:8c:15:dc:42:3b:56:8e:fb:9e:a0:bf:
                    51:a2:19:95:89:01:59:33:58:d5:ce:83:65:91:7c:
                    b7:c2:0f:07:57:30:e8:b7:04:0f:ee:1c:b1:4a:f5:
                    fd:70:2d:88:ef:31:78:86:07:2b:31:7f:b2:fd:22:
                    25:41:b6:30:13:17:28:80:d9:88:7b:50:90:18:a3:
                    18:9c:23:1b:6b:16:55:4d:0f:fb:88:5c:f4:db:4d:
                    82:2c:ec:74:7f:3e:a5:78:7b:f6:29:65:4f:fc:21:
                    e9:00:71:74:2e:dd:a9:44:83:e6:7e:97:11:d7:53:
                    22:9b:d2:b4:2a:8e:b3:82:b6:03:dd:b8:c3:bb:63:
                    8e:b2:a4:04:c4:11:0d:5d:fd:18:c3:35:2e:d7:05:
                    8f:ef:bb:2a:06:28:56:05:8c:85:ff:39:78:00:a4:
                    8c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:2D:D1:A0:20:99:21:23:51:43:63:34:2C:2C:F9:ED:46:36:D4:3A
            X509v3 Authority Key Identifier:
                keyid:BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:a2:ec:17:99:9a:06:cc:87:08:50:60:ab:49:fc:61:29:91:
         f8:4c:e9:22:6c:f3:b8:30:3d:c1:47:83:62:78:67:ff:a8:fe:
         e6:87:d8:d1:da:85:fc:69:08:5f:72:76:6b:ab:d3:50:20:15:
         44:8a:f8:a9:c7:8a:a4:09:4d:3b:f8:7f:8f:0e:8d:fd:bc:76:
         44:41:af:9e:4d:64:e7:d0:87:95:f1:0b:1f:98:b0:fc:49:82:
         dd:96:f7:af:a6:cf:5d:0f:c1:fd:cc:0f:d9:5a:43:b0:a1:0d:
         28:df:cf:d6:f0:fd:c6:59:4c:35:fe:28:a6:da:9d:15:23:9f:
         ec:59:05:9c:56:ea:5e:8b:9a:d0:72:9a:97:63:6e:42:10:44:
         f7:94:5f:f9:76:6b:ca:12:08:53:46:dd:d3:f7:18:89:b1:31:
         1d:d0:ce:41:b0:38:1c:01:de:93:20:7d:67:1f:8f:ca:89:69:
         7b:2b:7c:f9:fd:a0:f4:1f:54:1d:5f:9e:25:64:1f:ed:03:22:
         ad:9a:b0:18:91:56:70:48:a2:4f:c0:66:a5:36:88:08:ba:c9:
         c2:96:2c:97:f5:40:ac:73:87:9c:e4:bb:46:fb:b2:e0:0a:38:
         24:84:fc:e0:99:05:38:dc:04:81:54:bd:7e:63:3a:58:01:68:
         3b:7a:4a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:14:55 2026 by rpki-client