Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
File:                     ug1zjdKP8lSUVs5m50SJg3L8UD0.mft (raw, json)
Hash identifier:          mTOETBmKqQA+V+kvgpsfqVtniVMpPb5LHEISokenWHI=
Subject key identifier:   7C:23:F8:6B:64:DE:89:16:5D:E9:F5:93:DC:97:FC:B0:6A:8F:27:09
Authority key identifier: BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D
Certificate issuer:       /CN=ba0d738dd28ff2549456ce66e744898372fc503d
Certificate serial:       019D9AE2EE0E40E8D50BF456891B0992FD2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
Manifest number:          18C4
Signing time:             Fri 17 Apr 2026 10:00:56 +0000
Manifest this update:     Fri 17 Apr 2026 10:00:56 +0000
Manifest next update:     Sat 18 Apr 2026 10:00:56 +0000
Files and hashes:         1: AlKyY1UFKLIiSwkNxpsgmdrM60E.roa (hash: RVsM/xgSLkhzfMVV3ZGsMCowRm3BI62GEPj6ptHzyso=)
                          2: FG47vsukPFFVqGR7bOnjAT2rp7w.roa (hash: awpRf5Q5mKob7svn8oYO+jlkoCbAPExf5Adoe8FOrnc=)
                          3: G6A1KhUGyTv_ayk63fXoZcf-2FU.roa (hash: FvWxPy4xmiHLhgfYS33DaG1bqGpWvGhVoY87fJXbboE=)
                          4: ug1zjdKP8lSUVs5m50SJg3L8UD0.crl (hash: V/XeE4rF9ZQMzN4Loi3b2t5uGYN8vnn8GZKR47TxxuY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 10:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e2:ee:0e:40:e8:d5:0b:f4:56:89:1b:09:92:fd:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0d738dd28ff2549456ce66e744898372fc503d
        Validity
            Not Before: Apr 17 10:00:56 2026 GMT
            Not After : Apr 18 10:00:56 2026 GMT
        Subject: CN=7c23f86b64de89165de9f593dc97fcb06a8f2709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:53:a5:01:c7:59:b6:8d:c4:e4:28:20:c8:49:
                    35:4c:de:92:76:ce:e0:3e:a5:cc:76:bf:3a:f7:70:
                    a9:cd:b5:79:6f:ee:3a:82:2d:74:5a:16:83:0d:82:
                    8c:ac:dc:53:45:cb:17:84:e3:fd:38:f1:24:46:45:
                    85:72:5d:f5:03:63:b6:07:fb:96:37:9a:57:3b:8a:
                    8d:9a:83:e2:71:e2:fc:bc:0c:06:8a:21:71:78:45:
                    8e:aa:ca:f0:a1:44:14:3f:3c:6e:26:bb:cd:41:f3:
                    66:d5:0b:46:85:8f:66:d0:89:a6:3f:b4:df:c5:03:
                    f3:77:66:52:18:04:a8:26:70:81:25:af:f5:b1:f4:
                    20:77:95:3d:a8:4c:97:bd:98:d1:26:7a:f8:b5:e2:
                    0d:28:93:b0:62:10:bb:d3:2e:50:52:e7:60:07:3d:
                    89:77:82:0d:e5:0f:d2:27:9b:ac:87:f4:c9:4f:ff:
                    27:ba:24:32:ae:71:1b:67:cd:fc:ae:c3:d4:36:b1:
                    28:f7:af:71:8a:10:9f:40:7e:96:3b:9f:7d:9d:ed:
                    5e:df:b9:c5:ca:79:9d:dd:08:98:6e:95:16:d9:d3:
                    08:b6:31:10:33:a9:dd:15:61:95:10:99:22:18:01:
                    e4:2a:80:95:0c:95:af:e7:0d:2d:b0:74:22:86:d6:
                    3e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:23:F8:6B:64:DE:89:16:5D:E9:F5:93:DC:97:FC:B0:6A:8F:27:09
            X509v3 Authority Key Identifier:
                keyid:BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:b9:a3:e6:1d:7e:eb:7e:3c:54:47:67:71:b5:d0:32:83:a2:
         9c:d8:e2:f8:32:d3:49:f4:81:f0:63:d8:6e:4e:f4:7b:f9:e8:
         f9:bc:8b:1e:51:13:1c:a0:b0:eb:4d:67:34:56:64:5d:91:82:
         26:0b:dd:e3:6f:bc:cb:de:2a:a7:5d:74:96:e6:f6:4f:80:2e:
         7c:15:d3:63:2b:35:e2:90:27:b2:72:6a:80:00:b4:05:dc:48:
         86:ab:22:01:8d:41:2a:af:65:45:89:26:48:c5:48:8e:88:6c:
         2f:a4:72:0d:d2:30:f3:22:f9:cd:f6:28:4e:e5:60:bf:2f:10:
         1e:a4:56:98:0f:80:ef:e4:16:18:6e:95:94:b7:e2:48:e5:3a:
         df:ed:4d:36:c1:28:7e:3b:ad:8a:e8:1b:99:78:1f:a3:ff:22:
         2d:9e:22:2a:4e:86:4a:f9:45:78:c3:68:d1:19:09:e0:ef:24:
         4d:6b:54:85:5f:45:21:db:df:4e:90:8c:c8:83:ec:19:b0:ab:
         87:d1:f0:c9:3c:9e:f4:a3:6c:74:22:09:81:a1:27:0a:21:e1:
         32:1b:c3:90:02:78:a8:6c:76:83:80:67:c4:9d:ac:04:05:03:
         58:de:40:0a:37:03:cb:44:24:d6:ae:bf:d3:7d:b0:bf:35:51:
         58:0c:ef:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4u4OQOjVC/RWiRsJkv0vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhMGQ3MzhkZDI4ZmYyNTQ5NDU2Y2U2NmU3NDQ4OTgzNzJm
YzUwM2QwHhcNMjYwNDE3MTAwMDU2WhcNMjYwNDE4MTAwMDU2WjAzMTEwLwYDVQQD
Eyg3YzIzZjg2YjY0ZGU4OTE2NWRlOWY1OTNkYzk3ZmNiMDZhOGYyNzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VOlAcdZto3E5CggyEk1TN6Sds7g
PqXMdr8693CpzbV5b+46gi10WhaDDYKMrNxTRcsXhOP9OPEkRkWFcl31A2O2B/uW
N5pXO4qNmoPiceL8vAwGiiFxeEWOqsrwoUQUPzxuJrvNQfNm1QtGhY9m0ImmP7Tf
xQPzd2ZSGASoJnCBJa/1sfQgd5U9qEyXvZjRJnr4teINKJOwYhC70y5QUudgBz2J
d4IN5Q/SJ5ush/TJT/8nuiQyrnEbZ838rsPUNrEo969xihCfQH6WO599ne1e37nF
ynmd3QiYbpUW2dMItjEQM6ndFWGVEJkiGAHkKoCVDJWv5w0tsHQihtY+/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHwj+Gtk3okWXen1k9yX/LBqjycJMB8GA1UdIwQY
MBaAFLoNc43Sj/JUlFbOZudEiYNy/FA9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWcxempkS1A4bFNVVnM1bTUwU0pnM0w4VUQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8xY2Q3NmMtMDIwMS00NzAzLThlZDYt
YmViNmRhMDM3NTVlLzEvdWcxempkS1A4bFNVVnM1bTUwU0pnM0w4VUQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8xY2Q3NmMtMDIwMS00NzAzLThlZDYtYmViNmRhMDM3NTVl
LzEvdWcxempkS1A4bFNVVnM1bTUwU0pnM0w4VUQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw7mj5h1+
6348VEdncbXQMoOinNji+DLTSfSB8GPYbk70e/no+byLHlETHKCw601nNFZkXZGC
Jgvd42+8y94qp110lub2T4AufBXTYys14pAnsnJqgAC0BdxIhqsiAY1BKq9lRYkm
SMVIjohsL6RyDdIw8yL5zfYoTuVgvy8QHqRWmA+A7+QWGG6VlLfiSOU63+1NNsEo
fjutiugbmXgfo/8iLZ4iKk6GSvlFeMNo0RkJ4O8kTWtUhV9FIdvfTpCMyIPsGbCr
h9HwyTye9KNsdCIJgaEnCiHhMhvDkAJ4qGx2g4BnxJ2sBAUDWN5ACjcDy0Qk1q6/
032wvzVRWAzvRg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:06:04 2026 by rpki-client