Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft
File:                     uaxJ0czcrt2aE_SAPfGu3ObcERI.mft (raw, json)
Hash identifier:          sRkQwiCG/LzPL7ZudwMvn4nPw8lV0O84pJ1RsCpkI/Y=
Subject key identifier:   5C:C6:E6:70:38:37:79:B0:93:95:97:17:09:38:B3:A4:9F:5A:7B:AD
Authority key identifier: B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
Certificate issuer:       /CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Certificate serial:       019D99D09E36E1A7DF01C88FC6C1A0EB97D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft
Manifest number:          0FF6
Signing time:             Fri 17 Apr 2026 05:01:19 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:19 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:19 +0000
Files and hashes:         1: 9C4UVhetymj_o9_0fthWslxme_k.roa (hash: eyldnpoei6ydFrc8FHeRLIEUORDlSxUUouGHL///KPo=)
                          2: AJ6V8jm2bzR7l9LijJnNAo2C1So.roa (hash: JLik9PNu5MZ/DV5ew3sUl3oRvlGdo1/prN1/f8zb8rc=)
                          3: AfH1FsJhmlZzLVv0joRFh8JXKtI.roa (hash: C/QZLCrVXN00Tj2Qh4p+y2MkOW5TtBVj68fBG3TFoNA=)
                          4: DKgccFMMgkvXxZPzFyE3jSvly6U.roa (hash: wKYRpl41eTA9ujV+fUMhtA8JIP0ecSyGtcqw+jTJ19I=)
                          5: cujgOoD9oOnPnWNHQ2oaYF56LYE.roa (hash: NshN4mSKtv5QhJOcEymdQSgMRdJApXgkLCaqG2CcUaU=)
                          6: uaxJ0czcrt2aE_SAPfGu3ObcERI.crl (hash: uia8ZfpsQeon6RbE8OChMkgpqa7IzmVwEtIYxM7JxGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:9e:36:e1:a7:df:01:c8:8f:c6:c1:a0:eb:97:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
        Validity
            Not Before: Apr 17 05:01:19 2026 GMT
            Not After : Apr 18 05:01:19 2026 GMT
        Subject: CN=5cc6e670383779b0939597170938b3a49f5a7bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b9:66:b3:74:0c:b7:6d:ca:55:e4:36:22:7d:
                    2d:88:91:9e:f0:fc:e3:19:46:73:86:da:82:be:1d:
                    b7:64:04:a1:13:86:6d:cb:f2:ee:82:32:ac:c5:7d:
                    a8:f0:e6:3a:e6:cb:15:e0:68:95:63:0d:f4:d0:3a:
                    71:c2:fa:0d:58:0c:fc:e6:d5:81:ac:e5:5d:26:8f:
                    95:a9:5d:01:7f:4a:03:79:ec:a3:f6:c0:a8:f1:9a:
                    91:3a:a3:da:f1:60:60:71:54:7c:1f:19:f7:d6:5d:
                    82:4c:7f:66:04:ec:69:b6:b3:52:87:6b:21:e2:8f:
                    b8:e1:29:59:c6:4b:d1:da:09:ef:f7:6a:83:a7:42:
                    33:dd:17:55:b1:bd:78:84:be:ec:01:7a:92:12:68:
                    57:b7:6d:9c:b5:df:e9:94:19:d8:2c:09:db:71:16:
                    3c:e5:1d:aa:a3:29:5e:49:c6:e1:a5:42:03:01:dc:
                    25:9e:1e:7c:36:7a:62:5c:04:e7:b7:00:68:88:01:
                    4f:d2:3a:81:5b:9e:73:28:98:49:9b:4f:66:4b:d4:
                    2b:92:8e:06:07:c2:a9:70:44:fa:ac:5e:cb:74:c5:
                    dd:cc:a2:0f:91:0c:a1:ca:c7:85:43:32:c9:42:9e:
                    e4:f1:d5:9a:f6:0d:5b:a6:f4:f9:60:be:b1:b0:4d:
                    bc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C6:E6:70:38:37:79:B0:93:95:97:17:09:38:B3:A4:9F:5A:7B:AD
            X509v3 Authority Key Identifier:
                keyid:B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:a9:ac:e3:67:fb:c0:42:c0:b1:22:7f:3e:2b:00:15:37:d2:
         0f:31:43:15:83:b4:75:07:5d:b3:f3:90:17:68:75:63:bd:69:
         7a:cc:85:61:37:31:5d:78:0a:39:6c:8b:21:29:6a:55:cd:4a:
         a5:17:29:09:a0:ca:be:fa:cf:04:ab:86:87:50:6c:9b:d7:7b:
         a2:47:e9:8f:da:f3:6e:b9:f4:47:70:0e:9f:2a:ed:ec:8c:40:
         e0:7e:f0:c3:88:fc:e6:92:bf:8f:ea:a8:bf:b9:76:85:18:5d:
         bf:e2:53:40:6a:b4:85:55:b6:88:6f:12:d0:c6:c2:65:e5:58:
         24:5a:91:a7:c9:51:06:18:ea:e5:da:7d:a6:1d:90:5e:bc:42:
         71:99:b7:f7:e8:0e:9d:b3:70:ba:22:a5:8d:33:23:46:0b:ee:
         09:03:0a:11:99:59:46:8b:d8:4a:57:b5:f2:a1:06:5c:6f:18:
         ec:7c:f8:89:47:52:65:94:31:be:a8:17:e9:32:1c:cd:bc:8e:
         78:c0:3e:f1:9e:22:a8:11:55:f3:32:60:b8:e4:97:e6:24:c8:
         b9:4f:ed:d3:34:da:ef:5b:cd:95:57:50:54:6a:41:ed:fb:43:
         08:fe:63:55:f6:b6:6a:13:7e:f7:a8:3f:02:b1:b7:e9:97:d6:
         a6:f8:08:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0J424affAciPxsGg65fZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YWM0OWQxY2NkY2FlZGQ5YTEzZjQ4MDNkZjFhZWRjZTZk
YzExMTIwHhcNMjYwNDE3MDUwMTE5WhcNMjYwNDE4MDUwMTE5WjAzMTEwLwYDVQQD
Eyg1Y2M2ZTY3MDM4Mzc3OWIwOTM5NTk3MTcwOTM4YjNhNDlmNWE3YmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7lms3QMt23KVeQ2In0tiJGe8Pzj
GUZzhtqCvh23ZAShE4Zty/LugjKsxX2o8OY65ssV4GiVYw300DpxwvoNWAz85tWB
rOVdJo+VqV0Bf0oDeeyj9sCo8ZqROqPa8WBgcVR8Hxn31l2CTH9mBOxptrNSh2sh
4o+44SlZxkvR2gnv92qDp0Iz3RdVsb14hL7sAXqSEmhXt22ctd/plBnYLAnbcRY8
5R2qoyleScbhpUIDAdwlnh58NnpiXATntwBoiAFP0jqBW55zKJhJm09mS9Qrko4G
B8KpcET6rF7LdMXdzKIPkQyhyseFQzLJQp7k8dWa9g1bpvT5YL6xsE28bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFzG5nA4N3mwk5WXFwk4s6SfWnutMB8GA1UdIwQY
MBaAFLmsSdHM3K7dmhP0gD3xrtzm3BESMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWF4SjBjemNydDJhRV9TQVBmR3UzT2JjRVJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC81MzcxOTEtMTE3OS00OGVjLWFkOWYt
ZmZlNDNhNTJkM2Y2LzEvdWF4SjBjemNydDJhRV9TQVBmR3UzT2JjRVJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC81MzcxOTEtMTE3OS00OGVjLWFkOWYtZmZlNDNhNTJkM2Y2
LzEvdWF4SjBjemNydDJhRV9TQVBmR3UzT2JjRVJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvKms42f7
wELAsSJ/PisAFTfSDzFDFYO0dQdds/OQF2h1Y71pesyFYTcxXXgKOWyLISlqVc1K
pRcpCaDKvvrPBKuGh1Bsm9d7okfpj9rzbrn0R3AOnyrt7IxA4H7ww4j85pK/j+qo
v7l2hRhdv+JTQGq0hVW2iG8S0MbCZeVYJFqRp8lRBhjq5dp9ph2QXrxCcZm39+gO
nbNwuiKljTMjRgvuCQMKEZlZRovYSle18qEGXG8Y7Hz4iUdSZZQxvqgX6TIczbyO
eMA+8Z4iqBFV8zJguOSX5iTIuU/t0zTa71vNlVdQVGpB7ftDCP5jVfa2ahN+96g/
ArG36ZfWpvgIdQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:43:01 2026 by rpki-client