Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft
File:                     Urm54lZYDENEuyQURbTVLlT91Qs.mft (raw, json)
Hash identifier:          24c4uGIEtRLeqHVajTs6toQA2+TOiGsdAwfRpCzinhs=
Subject key identifier:   B3:D2:0A:8C:AB:E0:30:E7:4A:7F:BE:87:E2:D2:67:F6:6C:57:D6:01
Authority key identifier: 52:B9:B9:E2:56:58:0C:43:44:BB:24:14:45:B4:D5:2E:54:FD:D5:0B
Certificate issuer:       /CN=52b9b9e256580c4344bb241445b4d52e54fdd50b
Certificate serial:       019D9B19C572437502D619CA49D37F9DCB43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft
Manifest number:          1599
Signing time:             Fri 17 Apr 2026 11:00:50 +0000
Manifest this update:     Fri 17 Apr 2026 11:00:50 +0000
Manifest next update:     Sat 18 Apr 2026 11:00:50 +0000
Files and hashes:         1: 9Eqe7E3eMUevbHUKUUW_q13KWD4.roa (hash: fY8VfaNE5VXikKhOcBEnGn5MdcBWXx3SvzvPlkIQeaM=)
                          2: GJJ58FIls1lHjVVLLrf2JDQD3W4.roa (hash: l4YjelWHKqcJNFE4+5c8SK1AWUNzmjFYH0lSLSmVQek=)
                          3: N4EQgttBYT2mp-p45DhZLmHfzTQ.roa (hash: Wo3GDFi8E/bJVIRvrii7wyqBFcy3ToYvmvXUkuPDxm0=)
                          4: Urm54lZYDENEuyQURbTVLlT91Qs.crl (hash: k7gf9PJ7nWzsnkxBvKqIemI7asLoylHwVYOOtlGr5DA=)
                          5: ZzgxUr7465xAKyVi3HDIHGueP3k.roa (hash: 2NJYjrGz8rRWAAvm63thzeaecXROIhhwMcqdePuSy00=)
                          6: afKwRxk1ZzUuMbqjhAMAsR8SW7k.roa (hash: 36wIpsjr4F5SRwjTUDc1wC/5dcZLwPECLsusWpMpGsA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:19:c5:72:43:75:02:d6:19:ca:49:d3:7f:9d:cb:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52b9b9e256580c4344bb241445b4d52e54fdd50b
        Validity
            Not Before: Apr 17 11:00:50 2026 GMT
            Not After : Apr 18 11:00:50 2026 GMT
        Subject: CN=b3d20a8cabe030e74a7fbe87e2d267f66c57d601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ae:f0:8b:73:e6:b8:b0:f9:40:e5:b0:1d:40:
                    81:0b:28:25:54:3b:f7:37:9b:5a:fd:86:f1:e8:5d:
                    5f:ed:72:a6:43:11:78:d1:e0:68:f0:14:fb:f7:e2:
                    52:6f:d6:eb:cc:ea:67:3f:38:37:54:a5:94:ec:04:
                    8e:71:a7:bb:c1:27:c4:76:ce:08:99:d7:22:8e:53:
                    cb:2a:a4:6a:ad:ef:e5:9d:b8:8b:72:5d:39:95:a6:
                    6f:02:62:fe:01:b0:4f:1a:a0:c0:ac:12:ab:1d:eb:
                    fa:cc:5c:b6:bc:6c:2b:78:ca:82:97:bb:b2:31:70:
                    7b:9b:b4:da:50:1a:bb:3b:12:f9:1c:af:5d:ea:64:
                    5c:15:ea:12:c3:c6:4e:f0:31:55:c7:6b:ec:29:e3:
                    ba:b7:e0:a4:d9:df:0e:2f:d2:a0:60:56:a9:89:fc:
                    74:5f:65:21:c8:b5:f8:47:49:7f:d1:b2:76:20:98:
                    d1:76:b2:97:ee:50:d6:10:fd:80:63:41:ef:c1:10:
                    50:b2:32:bd:9d:27:0f:84:ca:a7:10:c3:96:7a:fa:
                    14:76:01:45:0a:4b:34:6d:32:5a:e7:7f:be:e5:b6:
                    fe:2d:74:d7:d4:86:6f:36:4a:83:d5:e5:fd:a3:bb:
                    87:4a:43:6a:7c:0e:af:fe:cb:c0:e7:fb:0e:80:22:
                    f0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D2:0A:8C:AB:E0:30:E7:4A:7F:BE:87:E2:D2:67:F6:6C:57:D6:01
            X509v3 Authority Key Identifier:
                keyid:52:B9:B9:E2:56:58:0C:43:44:BB:24:14:45:B4:D5:2E:54:FD:D5:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:17:ff:b6:09:8d:3d:16:7b:b7:a6:f8:88:46:70:6a:69:fc:
         bf:62:a7:a0:f4:dd:92:3b:43:ce:9b:5e:52:c6:09:55:6a:32:
         84:c6:18:5b:c8:04:1b:21:97:51:2e:6f:e3:7f:e7:bf:f0:87:
         c9:d6:9e:da:b8:86:ed:23:1d:c8:c1:78:74:24:cd:ef:0d:c4:
         a3:b7:9f:bb:1e:4b:b5:94:10:6d:bb:d1:73:37:ac:c3:11:c8:
         9e:40:13:52:18:8c:83:13:d3:25:0a:c8:0e:81:63:fc:3b:63:
         61:6c:1f:b5:39:b2:4b:23:75:71:51:3c:1c:98:73:67:66:36:
         1d:8e:1a:7d:33:ce:04:b4:5e:41:8b:0f:74:b4:58:2a:5b:11:
         f0:96:93:f3:80:1d:b8:87:c2:3b:11:ae:ed:a9:96:b2:ad:83:
         6d:bf:74:c4:e3:d9:59:ea:fb:1f:f1:60:c6:3c:d9:8d:6c:d6:
         bc:42:85:82:91:53:54:55:0e:09:55:71:4d:15:ff:07:cc:9a:
         62:f1:78:6a:5b:8c:89:10:e6:97:43:0a:6f:cc:3f:60:ca:72:
         fd:da:fe:9d:a4:90:91:88:42:82:08:6d:fb:98:3b:9f:64:f5:
         ae:b2:af:f2:9d:07:8e:a6:64:af:bd:b6:53:3f:16:cf:75:38:
         5f:24:7f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:36:32 2026 by rpki-client