Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft
File:                     uREsgEp_SnTOWMxxyZT1qdVhIrE.mft (raw, json)
Hash identifier:          RzR2flGeIryqdQkQNfXbu1YKXzMNAMCj5XysbjhOlQg=
Subject key identifier:   03:D9:BE:EB:7F:3C:51:86:31:93:18:E3:4E:FB:98:B8:2A:FA:1D:C9
Authority key identifier: B9:11:2C:80:4A:7F:4A:74:CE:58:CC:71:C9:94:F5:A9:D5:61:22:B1
Certificate issuer:       /CN=b9112c804a7f4a74ce58cc71c994f5a9d56122b1
Certificate serial:       019DA4543E123D7C9EB380FB86CEDE7F4A10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uREsgEp_SnTOWMxxyZT1qdVhIrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft
Manifest number:          1123
Signing time:             Sun 19 Apr 2026 06:01:17 +0000
Manifest this update:     Sun 19 Apr 2026 06:01:17 +0000
Manifest next update:     Mon 20 Apr 2026 06:01:17 +0000
Files and hashes:         1: Ntq657VT6l4Y2gPWI-QPcLNDXIM.roa (hash: Pt8tZkYbxo4DV40Mb0Y1qZZ49X4ObdKzZapAV4hW5og=)
                          2: uREsgEp_SnTOWMxxyZT1qdVhIrE.crl (hash: MyaaUM7DJhbzqQLicPwy9A+BJQVyNaSPrWiI2X5UNN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uREsgEp_SnTOWMxxyZT1qdVhIrE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:54:3e:12:3d:7c:9e:b3:80:fb:86:ce:de:7f:4a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9112c804a7f4a74ce58cc71c994f5a9d56122b1
        Validity
            Not Before: Apr 19 06:01:17 2026 GMT
            Not After : Apr 20 06:01:17 2026 GMT
        Subject: CN=03d9beeb7f3c5186319318e34efb98b82afa1dc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fd:f9:87:5f:95:e5:bf:73:30:59:cf:a7:dd:
                    57:00:4a:43:3b:3f:48:a8:23:13:07:50:22:76:46:
                    a8:01:fb:d2:c6:6a:2a:ac:43:71:fa:6d:c3:ad:4b:
                    6a:72:b5:2f:d6:2d:32:9b:91:ef:22:f2:3e:2c:3e:
                    85:34:d9:24:3e:38:d5:0a:36:2d:98:2c:d7:d7:07:
                    cb:86:7d:5c:ea:74:bb:c1:10:80:9d:21:4c:3b:ca:
                    90:78:ac:e0:72:d4:d1:d4:e9:e9:90:1a:10:81:7b:
                    86:f6:44:5a:6c:db:2f:80:d8:0a:5a:41:12:ec:d4:
                    fc:9c:14:2f:bc:de:af:6a:6c:99:5b:4c:ac:01:da:
                    3b:ce:33:0f:f5:80:54:2b:6e:26:f6:a4:8e:0d:3e:
                    7d:02:11:51:aa:b6:45:9a:f1:ee:ab:d2:c7:2c:b1:
                    d4:54:1c:be:b9:eb:ab:0a:35:46:0a:23:4f:45:32:
                    0b:57:2f:2f:50:0a:27:6b:c5:e6:f2:4f:4b:0c:42:
                    55:0c:af:3e:78:ef:de:a6:cc:7a:3e:0d:17:2c:c2:
                    7c:25:90:10:d8:da:3b:4f:c5:04:45:10:34:ed:cb:
                    ec:2d:f1:64:83:16:85:87:e4:fc:84:67:65:0e:89:
                    d0:2b:5f:5f:c1:19:88:9f:b6:4a:74:ae:22:33:d2:
                    cc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D9:BE:EB:7F:3C:51:86:31:93:18:E3:4E:FB:98:B8:2A:FA:1D:C9
            X509v3 Authority Key Identifier:
                keyid:B9:11:2C:80:4A:7F:4A:74:CE:58:CC:71:C9:94:F5:A9:D5:61:22:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uREsgEp_SnTOWMxxyZT1qdVhIrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:dd:31:2e:1e:05:29:4a:1c:13:34:d0:c1:67:d0:02:bf:e3:
         a6:3f:6f:fd:f8:30:05:64:a1:07:d0:62:54:66:ee:ea:57:ee:
         25:2c:9f:d1:44:c5:1e:69:0c:35:34:96:aa:9d:11:fb:0f:79:
         00:2d:c3:06:cf:1b:79:28:65:05:ea:09:3d:b3:71:b8:ca:8f:
         60:33:4d:cf:3b:47:6a:b9:b0:8c:0b:8a:98:e9:b8:cf:6a:93:
         3c:91:1c:35:b7:5b:99:cc:dd:89:72:b7:6d:51:d4:02:8d:cf:
         d6:44:7f:ff:88:ee:a8:24:2c:03:e0:e1:49:c2:83:18:ac:a1:
         43:29:2d:53:04:46:8d:d0:8d:a6:79:85:1e:32:ad:c3:17:26:
         98:3e:b8:ce:1b:40:fd:24:d5:5d:62:10:d1:15:81:35:67:75:
         74:92:23:d4:d5:4a:24:7d:b6:77:eb:db:a0:e3:1f:d3:0f:56:
         6b:09:59:bf:08:22:99:90:e2:2d:e6:4c:b7:52:aa:16:de:0f:
         e2:d5:f1:4f:ce:63:68:93:d7:fd:71:ca:99:28:dd:37:50:ad:
         fc:3c:b2:d8:f6:13:64:ba:6d:91:61:0e:fb:33:c2:f4:41:2d:
         75:c6:e6:da:35:5a:d3:c2:90:d9:c6:6f:92:20:ba:c8:4d:88:
         6e:e0:e7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:31 2026 by rpki-client