Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
File:                     U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft (raw, json)
Hash identifier:          ebpvjq3p/eVoS29jTomN6Cye+MdpzNNLHQS37CxqEMY=
Subject key identifier:   4C:8F:86:10:CB:0F:D1:F7:41:9A:7A:44:D0:5E:01:BD:6B:82:31:DA
Authority key identifier: 53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
Certificate issuer:       /CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Certificate serial:       019D9C2CB796E336128668C6C066384683CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
Manifest number:          0D23
Signing time:             Fri 17 Apr 2026 16:01:09 +0000
Manifest this update:     Fri 17 Apr 2026 16:01:09 +0000
Manifest next update:     Sat 18 Apr 2026 16:01:09 +0000
Files and hashes:         1: 7La-XtrD4ICECjNRbJUhIiiRnLs.asa (hash: wZ15akcqN9GVHDKumXc8j8JGV1U6ZmvopBISyG0HrcI=)
                          2: RTU6VofFZkwFIunmV0I-5I8oeHk.roa (hash: qhsuUJ7AU4eP2XOXpcbSiz+ICmJsl3rcfd5Kjo6p8AI=)
                          3: U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl (hash: iDWtsLsxqlu4JcGVVEOCnV3RSdFUs26k8FiRyuG7TaM=)
                          4: nr6yHLuwHJ6lw5JAwW5qDlsOfpA.roa (hash: iorIqxAuAmSRl6sCok02BcX/HwiRBqyHoRRMc0hDdTA=)
                          5: txFn_1w2AEjDCv0xGCqMhMdB6Ik.roa (hash: QZ5s1i5lWCJAEXaeHEkM7u2xMiicds/V8SZeoAg+i98=)
                          6: yrqi6IRlcDIv3grXoPIY4FbOeoA.roa (hash: ALG9r0dMs7ceV0uJepoVr46+adHsA89Wj6LXqqE3rOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:2c:b7:96:e3:36:12:86:68:c6:c0:66:38:46:83:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
        Validity
            Not Before: Apr 17 16:01:09 2026 GMT
            Not After : Apr 18 16:01:09 2026 GMT
        Subject: CN=4c8f8610cb0fd1f7419a7a44d05e01bd6b8231da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:77:52:cf:d1:86:38:9f:cf:51:9a:46:b9:04:
                    5b:10:e9:d3:4c:61:da:3e:60:3a:69:ba:8e:6a:70:
                    5f:c1:7c:b8:22:1f:b6:99:29:d7:ce:96:1b:e4:97:
                    fd:d9:5d:e9:c6:81:b6:6f:1b:00:b2:be:0d:55:9e:
                    4e:0a:e2:10:ee:7c:30:f3:f3:2f:f2:45:26:b7:fc:
                    e7:f6:38:42:24:4e:db:1e:6b:ef:64:88:15:e7:9d:
                    e7:80:86:8f:e9:5a:59:28:fd:bb:5a:f5:2c:ed:c3:
                    47:22:2c:3a:90:d2:14:d6:98:0d:f4:a7:0d:4a:b5:
                    49:70:57:be:cc:56:df:05:ed:38:6d:f3:09:b8:7f:
                    78:8b:d3:52:28:3c:50:31:9d:24:d4:5d:e4:34:6c:
                    59:5b:0c:73:86:b8:44:66:6d:74:88:85:4b:00:57:
                    f9:32:a1:62:2a:5b:89:72:fc:0c:19:71:88:3f:1d:
                    83:b2:c2:4b:30:1a:d9:92:fb:5e:16:a5:63:2d:94:
                    1f:e7:e9:f6:96:be:19:e3:6e:6e:1c:08:e1:e2:01:
                    35:6e:9d:a1:99:58:ca:05:64:c3:7c:60:a2:c7:ba:
                    0c:7c:7b:07:11:6d:d2:08:70:6b:18:e4:19:35:a2:
                    a9:e5:c8:67:8f:9f:71:f9:8a:ef:85:a4:e2:c5:8c:
                    76:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:8F:86:10:CB:0F:D1:F7:41:9A:7A:44:D0:5E:01:BD:6B:82:31:DA
            X509v3 Authority Key Identifier:
                keyid:53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:53:8d:78:ca:f7:8f:6b:83:97:85:3c:a6:a9:31:00:08:cc:
         53:b6:27:59:fd:64:a0:b2:d3:ff:69:46:56:c0:e1:ff:ba:e7:
         f7:9b:ef:a4:1a:01:c1:c3:b9:96:f5:22:b6:d8:fb:cc:3e:06:
         e0:6e:bb:5a:b0:7c:0c:10:c7:27:4a:af:d8:aa:cb:de:fd:25:
         6e:43:b2:fe:64:08:7e:60:6f:44:ee:24:79:a7:10:64:8e:5e:
         fe:67:82:f9:e0:6c:57:2e:9f:36:70:19:25:90:99:d2:41:35:
         a6:e3:48:97:e4:14:1b:c9:29:08:6d:dc:99:3a:25:b3:a3:14:
         6d:ab:52:45:8b:4e:b2:76:be:82:f8:04:68:74:07:04:ab:f2:
         fa:02:fb:54:12:26:12:0b:4a:c4:b9:8c:61:29:53:ee:2c:3a:
         41:97:da:92:22:1f:51:60:b9:db:02:f0:b5:bb:d7:3f:dd:3e:
         71:b8:bf:7b:6a:35:2a:68:39:a4:e5:28:6a:45:c5:15:7b:8d:
         ef:3b:92:2a:1c:0f:42:92:c6:35:bc:58:59:c1:e8:78:0a:fe:
         ad:cd:b1:de:82:59:f1:b5:e8:1f:87:aa:14:9b:5d:cf:6e:94:
         0f:bc:71:c4:d0:0e:37:a4:95:af:2b:4e:01:fe:e2:93:ca:0e:
         4b:11:92:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:03:15 2026 by rpki-client