Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
File:                     0uTP5_R_UkZFRa27C7xNM0eKrrI.mft (raw, json)
Hash identifier:          AREdqjPP41H8tyCU9Y15YtDnaTJgw34buTea3QFQAI4=
Subject key identifier:   A6:11:97:B4:4F:4F:A9:3D:6A:EE:BF:5D:EF:B4:01:FA:CA:FB:87:A3
Authority key identifier: D2:E4:CF:E7:F4:7F:52:46:45:45:AD:BB:0B:BC:4D:33:47:8A:AE:B2
Certificate issuer:       /CN=d2e4cfe7f47f52464545adbb0bbc4d33478aaeb2
Certificate serial:       019D999944A7DF3354C5E99C1B64CD6A2CAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
Manifest number:          049C
Signing time:             Fri 17 Apr 2026 04:00:51 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:51 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:51 +0000
Files and hashes:         1: 0uTP5_R_UkZFRa27C7xNM0eKrrI.crl (hash: BY5QbO2IspYmcnnyiN5VYzwfncQ2rCLnMt1e6J/wGhU=)
                          2: j330ZQOtQiCZJuxomPWTMdBKcHQ.roa (hash: MzEVW/Ea4Il5bIfwlWQJ+ibRovLnW9XexRlsZqbNutk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:44:a7:df:33:54:c5:e9:9c:1b:64:cd:6a:2c:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2e4cfe7f47f52464545adbb0bbc4d33478aaeb2
        Validity
            Not Before: Apr 17 04:00:51 2026 GMT
            Not After : Apr 18 04:00:51 2026 GMT
        Subject: CN=a61197b44f4fa93d6aeebf5defb401facafb87a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:03:6a:59:b0:64:92:3c:81:fe:95:c0:6f:2e:
                    2d:d4:08:e5:f7:de:bf:47:d2:b6:46:ec:0d:ae:b9:
                    3b:a3:54:bd:d0:bf:02:67:c0:93:c8:7b:e4:3f:90:
                    90:3d:33:c6:4b:bb:a9:04:07:11:c8:0b:7f:3e:b1:
                    b5:bd:32:c9:99:eb:84:c3:37:50:ae:cf:b2:b4:54:
                    2d:b3:a2:92:54:9b:63:2d:d6:e1:1c:7e:89:e2:10:
                    e5:47:26:75:fa:af:97:4a:dc:40:42:3a:35:45:41:
                    be:0c:23:b7:9f:e4:a1:02:29:be:6d:8e:81:99:95:
                    e9:04:a8:aa:7d:13:f3:1d:0b:c0:2a:06:0d:12:72:
                    b2:87:cf:c0:62:0e:60:0e:a1:91:d6:e9:9e:2e:29:
                    0b:48:3f:68:1e:01:a5:85:ef:66:e1:09:cf:02:7b:
                    bf:f7:e6:c1:f7:62:c4:64:e9:9d:7b:2c:1f:1b:b1:
                    78:3c:9c:dc:90:37:8d:f1:4e:fa:b6:b8:97:65:18:
                    78:e1:0d:2c:31:cc:28:9b:13:53:33:8e:5f:7f:f9:
                    60:eb:90:3e:2c:07:a7:c1:bf:3c:ba:36:c0:f6:55:
                    54:6a:8f:21:f7:c8:37:d8:c1:15:19:c7:64:95:6c:
                    35:40:94:a6:a7:3a:b6:13:eb:80:aa:f0:00:fa:91:
                    41:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:11:97:B4:4F:4F:A9:3D:6A:EE:BF:5D:EF:B4:01:FA:CA:FB:87:A3
            X509v3 Authority Key Identifier:
                keyid:D2:E4:CF:E7:F4:7F:52:46:45:45:AD:BB:0B:BC:4D:33:47:8A:AE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:31:a2:f3:55:41:8e:8d:6b:8c:0e:e6:76:6a:62:4a:93:68:
         f7:f9:b1:c2:d3:e2:89:89:53:5f:05:4a:67:ed:63:59:9a:bc:
         c0:98:32:c8:98:97:2b:54:1e:db:c5:53:c5:77:50:2c:6f:77:
         b2:ab:80:e8:1f:a6:93:da:77:d5:89:47:4e:76:bd:b1:43:f8:
         35:c7:ea:c4:1a:2a:7b:77:d4:9f:2b:25:7e:28:a8:70:ea:6f:
         17:3e:12:17:35:f4:d0:fb:e6:62:04:83:5f:b0:38:c8:b7:bc:
         47:4f:d6:94:c1:a8:a8:c2:b0:d5:04:d0:9b:a5:ce:61:ef:0f:
         3f:ea:f0:74:0d:10:ab:6f:ae:7b:f8:9d:ae:98:b6:57:f4:94:
         c5:0d:e0:6c:cb:b1:3d:41:c4:e0:cd:68:79:a7:21:9a:1d:19:
         2b:95:d7:bc:49:b5:93:80:bf:f7:b2:51:3e:2d:7e:f6:f3:96:
         2c:6b:d8:0a:c3:82:94:5f:30:fa:71:e1:d8:00:88:79:95:fe:
         a8:78:50:08:cf:73:35:6d:66:b0:b7:c8:32:36:d2:ab:b4:fa:
         b0:22:98:7c:6d:7a:2f:c3:02:c3:42:70:62:81:c0:78:a5:2a:
         8b:50:95:21:89:23:b3:67:3b:f5:e4:6b:7d:3e:70:5a:ce:1f:
         14:dc:be:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:16:11 2026 by rpki-client