Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft
File:                     UWJgaJQlhs6VcCEDusiZ0j_PckI.mft (raw, json)
Hash identifier:          pM+e4JhtYbE/jRlIO9PUel9n+fiFwdf0fHDC/cUWUe0=
Subject key identifier:   07:DD:11:E2:12:97:3F:A4:D8:62:08:D9:CB:BD:71:2B:9C:E7:B6:0A
Authority key identifier: 51:62:60:68:94:25:86:CE:95:70:21:03:BA:C8:99:D2:3F:CF:72:42
Certificate issuer:       /CN=51626068942586ce95702103bac899d23fcf7242
Certificate serial:       019DA30A425E64D04304EF6EA1A5DE9FFA25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft
Manifest number:          18C8
Signing time:             Sun 19 Apr 2026 00:00:51 +0000
Manifest this update:     Sun 19 Apr 2026 00:00:51 +0000
Manifest next update:     Mon 20 Apr 2026 00:00:51 +0000
Files and hashes:         1: H962oq62C4HZ1q-2ZR6ka9i7iTk.roa (hash: BBJJ5WWdTfXTRvB9xlvrZCxW2c0xyH6m419fkAsKFyU=)
                          2: UWJgaJQlhs6VcCEDusiZ0j_PckI.crl (hash: Iy+UHsoUHW9bm37am/KVau/ELGzbXjVP0LVuXAmNZxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 00:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:0a:42:5e:64:d0:43:04:ef:6e:a1:a5:de:9f:fa:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51626068942586ce95702103bac899d23fcf7242
        Validity
            Not Before: Apr 19 00:00:51 2026 GMT
            Not After : Apr 20 00:00:51 2026 GMT
        Subject: CN=07dd11e212973fa4d86208d9cbbd712b9ce7b60a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:24:86:cb:d3:92:b5:52:fe:7e:ae:dd:78:6c:
                    d8:5b:09:45:b5:00:f7:9e:e0:c7:5f:61:00:8c:aa:
                    1d:48:1e:39:a4:f9:ea:ab:c1:de:78:79:0d:09:06:
                    23:80:8e:8c:c9:ed:0b:58:17:be:33:a8:04:34:e1:
                    87:59:36:06:87:f6:0e:5d:01:1d:0f:f3:51:16:a9:
                    e9:29:0e:28:7f:cd:24:bf:67:cd:1e:4c:1f:b1:f3:
                    d4:b0:0c:07:a5:b8:b2:18:d3:db:66:51:fc:c0:84:
                    91:b2:12:6e:9a:15:80:b5:08:b1:a8:fd:a4:e7:4a:
                    d1:e6:23:9e:83:a1:0f:c7:cf:5e:4f:de:7c:f4:4d:
                    1a:14:09:6f:b2:96:8d:33:13:79:7a:b4:47:7f:17:
                    92:f6:62:fd:dd:7e:bd:b0:46:b4:cb:84:de:3c:fb:
                    a1:00:2f:20:0a:bc:c1:f9:48:cd:df:a5:4d:5a:2b:
                    f2:ce:90:ae:8f:1e:36:82:09:f3:dc:9d:bd:d7:ea:
                    ed:03:75:40:14:ab:6d:44:0a:22:1f:68:28:66:1d:
                    08:d8:69:7d:c2:1a:88:7e:ee:a0:b7:77:b5:bf:e0:
                    dd:2d:f4:24:f3:4e:cb:9f:d5:74:fe:e2:d2:8a:36:
                    30:bc:a0:3a:2d:06:3c:40:aa:50:27:66:e5:31:7b:
                    2a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:DD:11:E2:12:97:3F:A4:D8:62:08:D9:CB:BD:71:2B:9C:E7:B6:0A
            X509v3 Authority Key Identifier:
                keyid:51:62:60:68:94:25:86:CE:95:70:21:03:BA:C8:99:D2:3F:CF:72:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:50:7e:56:34:3a:57:4c:1c:7e:a4:ea:06:9a:07:8d:e4:67:
         f2:41:dc:5e:d2:96:4f:d0:38:ac:97:15:36:ff:49:bc:ec:68:
         a9:b3:e9:0c:b6:9d:43:7c:cc:14:02:b7:4c:dd:8e:da:b8:ec:
         b0:b4:27:76:5f:b7:4c:5a:e3:dc:b6:85:5c:5b:e3:05:7f:9c:
         7f:34:fb:eb:c2:31:49:60:30:39:ce:c8:49:7e:2c:1a:a6:56:
         3e:3e:6c:0d:3f:ed:f9:dc:4e:a8:10:93:33:08:cb:77:ed:52:
         34:73:09:2b:d2:11:83:63:c8:26:24:3a:cb:45:e2:2b:b9:ec:
         cd:bf:76:2d:55:2c:a8:1b:63:74:08:89:db:84:e3:57:d5:db:
         20:96:b9:14:4a:7c:1f:b7:1b:0a:83:b1:b9:16:61:9b:01:0d:
         7a:7e:7b:27:ce:d3:0c:fe:c5:2a:74:d8:d4:95:67:f9:56:1f:
         7a:c5:b9:3e:ef:66:c1:fe:80:91:a1:14:8b:2a:e7:81:8b:18:
         21:0f:ff:91:ff:55:f3:ab:fd:73:83:85:38:88:d1:cc:c3:b7:
         9e:fd:46:52:1a:b5:f3:a8:60:75:24:91:83:47:11:bc:ac:69:
         b3:8d:ad:be:08:0b:d9:b1:ce:c5:3a:2e:0c:29:fd:9e:4b:5a:
         04:18:fd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:05:41 2026 by rpki-client