Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
File:                     uGWF0IuX5nnwgovxAr6rUdza-oc.mft (raw, json)
Hash identifier:          BTzzuiwwec5y9zn2nEhW3zVZBKBNprBurbaJiKGVg9A=
Subject key identifier:   48:6B:CC:79:E5:E4:BC:A0:AB:3B:62:26:CC:20:1A:7E:C6:A3:0C:8B
Authority key identifier: B8:65:85:D0:8B:97:E6:79:F0:82:8B:F1:02:BE:AB:51:DC:DA:FA:87
Certificate issuer:       /CN=b86585d08b97e679f0828bf102beab51dcdafa87
Certificate serial:       019D9B50DD20A87A0961509BC73E51E4918D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
Manifest number:          027D
Signing time:             Fri 17 Apr 2026 12:01:01 +0000
Manifest this update:     Fri 17 Apr 2026 12:01:01 +0000
Manifest next update:     Sat 18 Apr 2026 12:01:01 +0000
Files and hashes:         1: Ga14DKlkNtPaU4_WDklMXTBEZd0.roa (hash: 51BV+zXQbnh+NfWZphUfXu97WrA83bdxjQhGkdY1730=)
                          2: uGWF0IuX5nnwgovxAr6rUdza-oc.crl (hash: Ol9fe5m88D9dfjLqQsmTUvEeIs1j6GNkn8M0B6G7AOw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 12:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:50:dd:20:a8:7a:09:61:50:9b:c7:3e:51:e4:91:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b86585d08b97e679f0828bf102beab51dcdafa87
        Validity
            Not Before: Apr 17 12:01:01 2026 GMT
            Not After : Apr 18 12:01:01 2026 GMT
        Subject: CN=486bcc79e5e4bca0ab3b6226cc201a7ec6a30c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7e:98:84:8c:a4:85:db:d0:cb:7f:93:4f:a2:
                    37:f9:49:2b:4c:d0:45:4d:72:0f:36:89:c8:78:8c:
                    d5:c5:f2:b8:94:1b:fd:97:4f:dd:c7:35:b6:2e:b4:
                    80:8f:08:97:d1:24:46:ca:a6:8d:d7:22:15:a0:ab:
                    19:5b:a6:d8:61:49:0b:46:71:3e:e2:49:d5:3b:9c:
                    59:2f:9e:1a:d3:53:c5:1f:71:eb:3f:e3:ef:c5:46:
                    85:fb:5a:73:ee:df:50:58:ef:59:4c:e5:c2:9d:a2:
                    20:45:f0:84:95:01:5b:be:5b:6d:98:29:f9:e2:cd:
                    76:51:f6:e3:94:a7:15:e9:33:4b:a1:4d:0f:2a:9d:
                    4d:43:40:50:d8:07:8d:74:65:af:5a:35:de:36:6e:
                    f1:dc:c2:28:c2:9c:3f:d8:89:b1:40:b4:cd:64:69:
                    41:35:41:41:58:c8:86:c5:bf:66:0b:21:0f:86:fb:
                    30:ea:92:51:27:7d:f0:58:02:6f:03:29:d3:0f:6d:
                    d4:4b:06:cc:19:dd:b3:96:a8:6b:76:85:4e:c9:cd:
                    6f:36:f9:41:0a:5a:4e:ce:c9:ae:a3:50:e9:a1:11:
                    f0:03:4e:2c:20:0f:6d:e3:ff:dc:1d:84:7a:fe:b9:
                    c6:bf:a4:75:aa:44:47:9d:2e:56:7d:bf:ed:b5:37:
                    6b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:6B:CC:79:E5:E4:BC:A0:AB:3B:62:26:CC:20:1A:7E:C6:A3:0C:8B
            X509v3 Authority Key Identifier:
                keyid:B8:65:85:D0:8B:97:E6:79:F0:82:8B:F1:02:BE:AB:51:DC:DA:FA:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:a0:7c:4b:fb:83:26:63:b9:95:dc:89:8a:bb:64:84:2c:b0:
         33:ac:e4:92:35:01:2e:52:cd:e5:40:05:9f:4c:41:b3:e6:ac:
         45:93:51:26:8a:dc:26:6b:40:75:21:2e:d0:ca:08:89:c1:00:
         12:30:70:c9:2d:ff:48:33:59:d7:89:8d:55:49:34:45:ce:4d:
         5a:b4:05:f6:91:be:42:77:35:83:29:3a:ed:2d:db:96:6b:bc:
         91:5a:f8:c7:33:28:47:a0:20:dd:ed:d3:25:3e:09:f7:77:e2:
         a8:ed:2d:c4:2f:f2:fa:b3:c7:df:27:13:e0:1e:c2:46:0a:8c:
         25:22:f2:85:00:79:6d:7b:2f:9d:8f:cc:a2:f3:e6:29:67:fd:
         91:ae:b0:9b:cc:d6:26:12:7f:e4:90:19:83:1a:6e:83:64:71:
         44:b4:a4:3a:a5:14:fd:4a:6f:48:f1:aa:80:26:da:c4:09:cc:
         80:b0:d6:33:1d:76:d8:f8:49:cd:91:ef:61:98:81:bc:d2:5d:
         4a:bc:1e:32:9a:63:62:c8:82:fd:9c:53:2d:e6:93:dd:f6:55:
         04:53:82:d0:32:b9:4d:c8:83:72:06:b9:c6:a9:28:20:a3:61:
         a1:65:3f:63:19:aa:d4:bc:ed:d9:64:94:7d:24:0b:91:20:70:
         24:f4:9b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:03:30 2026 by rpki-client