Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft
File:                     UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft (raw, json)
Hash identifier:          tSn/Ok+2R1mDCNEUDiNRDS16kkn7GinnkEmTUwpt/Go=
Subject key identifier:   C6:A0:B9:E1:6F:3A:58:89:AD:EE:7E:FC:55:D2:F0:14:D4:83:37:7E
Authority key identifier: 50:1C:10:57:BC:B9:D1:E0:D1:57:48:B7:F3:2C:59:F8:C7:B7:2A:4E
Certificate issuer:       /CN=501c1057bcb9d1e0d15748b7f32c59f8c7b72a4e
Certificate serial:       019D99D00CE48A46BBE89A983F2DEEC88537
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft
Manifest number:          0792
Signing time:             Fri 17 Apr 2026 05:00:41 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:41 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:41 +0000
Files and hashes:         1: UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl (hash: Y/Gff0SKUyV1uHl24psXc1/g34tEU5Cpk5mjQHJ6Gbg=)
                          2: kyxqx7NPhGb4ggxOfoZpnu1n_S0.roa (hash: TCL6ozSUuPbHKcQL9MhFYjm+l3Ilnl3GbAL+XQhGlFc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:0c:e4:8a:46:bb:e8:9a:98:3f:2d:ee:c8:85:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501c1057bcb9d1e0d15748b7f32c59f8c7b72a4e
        Validity
            Not Before: Apr 17 05:00:41 2026 GMT
            Not After : Apr 18 05:00:41 2026 GMT
        Subject: CN=c6a0b9e16f3a5889adee7efc55d2f014d483377e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7e:db:e0:10:7b:1b:9c:d1:c8:01:f0:a2:45:
                    71:04:76:e4:67:9f:06:76:a8:b8:ae:f6:60:c4:27:
                    04:70:d1:5d:29:c0:ad:79:95:b2:98:b7:a3:a2:28:
                    cf:d1:e2:1f:8c:e2:0a:6b:52:c2:7b:ef:be:87:40:
                    88:60:13:ea:63:36:b4:7d:82:f9:92:05:40:96:81:
                    f8:2a:cb:38:6d:91:ff:8b:77:b9:16:8f:fc:eb:47:
                    96:48:22:cf:0f:ec:47:8c:52:08:f7:fd:20:63:76:
                    8a:d6:f3:91:b9:a6:92:4f:50:aa:c1:60:12:f6:88:
                    e1:21:82:ac:60:9d:6c:e5:e0:f0:d2:63:46:25:b2:
                    e4:28:cb:75:f5:85:fd:7b:87:38:09:b3:72:98:80:
                    91:5a:50:a7:e5:be:0c:68:8e:30:b2:ce:21:ab:78:
                    29:d6:0e:9b:9e:4f:96:83:67:f2:78:e4:1f:4e:85:
                    c9:30:7b:a9:1a:a2:e1:5a:e7:8f:d9:20:69:ce:31:
                    1a:d5:f7:27:b5:89:c9:ab:2e:db:79:2d:4f:17:57:
                    b4:77:ab:be:5c:5b:cf:2a:84:2e:83:90:9d:88:e0:
                    99:f2:66:3a:ea:b1:d0:9f:31:b1:0f:3f:22:69:76:
                    a4:3b:0d:0b:29:e1:f9:c0:c1:df:14:4a:39:53:f7:
                    a9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A0:B9:E1:6F:3A:58:89:AD:EE:7E:FC:55:D2:F0:14:D4:83:37:7E
            X509v3 Authority Key Identifier:
                keyid:50:1C:10:57:BC:B9:D1:E0:D1:57:48:B7:F3:2C:59:F8:C7:B7:2A:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:41:a2:92:c4:60:ee:e1:d2:f9:33:ff:9f:c9:8c:58:3d:1f:
         af:dc:25:19:41:5c:80:d7:45:cf:06:cb:5c:c9:b6:7d:5c:92:
         24:ac:7e:4d:60:69:c1:09:0b:8f:df:45:ea:1c:53:1d:9a:4c:
         c5:d2:07:df:af:fd:92:b0:ed:12:a0:cc:4a:9f:68:4d:ca:b9:
         ad:d7:74:41:0d:ed:01:ad:0b:97:0a:c1:3c:75:be:96:4e:74:
         be:93:99:a2:4c:1a:b5:83:12:c7:52:1f:02:95:28:f3:1e:2c:
         bb:67:07:56:c0:c9:74:aa:1e:24:61:76:51:ef:f5:e0:6d:21:
         e8:33:79:6c:19:40:8a:62:20:e0:4a:93:ad:54:16:c2:ec:97:
         87:ec:ec:b1:76:aa:3e:0a:ed:37:c5:61:f9:3f:72:36:43:c0:
         58:dc:a8:b2:36:41:55:5b:51:a3:9e:24:0a:ae:e4:0b:e8:de:
         bf:07:74:c0:de:7a:e2:83:e1:1a:ad:ac:ba:64:e3:5e:e8:3f:
         b2:02:e6:16:c6:08:2e:f8:01:63:5d:44:1c:ac:9e:db:83:f7:
         eb:9f:58:62:24:e7:2d:fd:16:1b:1a:84:e1:dc:c4:69:ae:85:
         e3:9b:2d:26:c4:a6:b1:38:83:88:03:76:67:c7:3e:5d:79:d2:
         c9:c9:62:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:39:48 2026 by rpki-client