Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/16453d-28d0-46dd-8577-bdd57751c673/1/UNorr8N6OYjdKUyROuUiDgONuWQ.mft
File:                     UNorr8N6OYjdKUyROuUiDgONuWQ.mft (raw, json)
Hash identifier:          X1e87m37mYVYkeizXVag4qlHv7T5VzgKZeuTVDPOLd0=
Subject key identifier:   D1:2C:13:00:D4:BE:C7:A6:F7:C7:61:9E:60:BB:85:B9:96:1C:85:44
Authority key identifier: 50:DA:2B:AF:C3:7A:39:88:DD:29:4C:91:3A:E5:22:0E:03:8D:B9:64
Certificate issuer:       /CN=50da2bafc37a3988dd294c913ae5220e038db964
Certificate serial:       019D9C2C5CDFBAE24A054CA0183CDA3EB90A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UNorr8N6OYjdKUyROuUiDgONuWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/16453d-28d0-46dd-8577-bdd57751c673/1/UNorr8N6OYjdKUyROuUiDgONuWQ.mft
Manifest number:          180F
Signing time:             Fri 17 Apr 2026 16:00:46 +0000
Manifest this update:     Fri 17 Apr 2026 16:00:46 +0000
Manifest next update:     Sat 18 Apr 2026 16:00:46 +0000
Files and hashes:         1: UNorr8N6OYjdKUyROuUiDgONuWQ.crl (hash: +r6SpvF8HbKvm3gAZ439zZuscixO3/9qA02w0X/9HwI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/16453d-28d0-46dd-8577-bdd57751c673/1/UNorr8N6OYjdKUyROuUiDgONuWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/16453d-28d0-46dd-8577-bdd57751c673/1/UNorr8N6OYjdKUyROuUiDgONuWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UNorr8N6OYjdKUyROuUiDgONuWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:2c:5c:df:ba:e2:4a:05:4c:a0:18:3c:da:3e:b9:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50da2bafc37a3988dd294c913ae5220e038db964
        Validity
            Not Before: Apr 17 16:00:46 2026 GMT
            Not After : Apr 18 16:00:46 2026 GMT
        Subject: CN=d12c1300d4bec7a6f7c7619e60bb85b9961c8544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:13:07:0a:a3:7f:ff:43:dc:ee:72:b7:36:ed:
                    d6:68:62:73:c8:5b:de:4e:e2:72:2a:b2:07:59:61:
                    56:12:a8:5e:a2:62:10:db:0c:21:7e:11:0f:d1:89:
                    e5:92:dd:97:f4:10:0b:6d:3a:ad:15:14:6c:8b:53:
                    70:3a:63:a6:1e:90:3a:33:36:b0:6d:af:5d:f2:dd:
                    49:fe:7f:00:16:98:f6:79:d3:c4:83:8a:fb:62:1c:
                    f4:9d:78:c3:c1:ed:9a:b0:2c:20:20:18:82:6e:5e:
                    a4:ce:7b:e8:d2:cf:e1:e4:de:c0:a7:35:b4:7a:1f:
                    2f:dd:11:95:6f:6a:fd:c2:98:ee:47:eb:56:15:5e:
                    50:c5:30:60:27:21:fc:7b:34:d4:11:90:6a:0f:68:
                    f2:2f:8a:bb:b2:1f:83:5b:96:a0:92:df:0c:77:0f:
                    c7:59:48:67:41:af:b2:ab:50:bf:7b:96:56:7e:3e:
                    11:c5:b0:eb:5a:89:31:12:4c:c2:ef:b7:1d:62:43:
                    64:20:aa:d1:e4:95:98:d9:d2:19:2c:f8:d7:e0:12:
                    a0:11:a8:38:95:c5:a3:57:8b:f3:82:ae:8d:62:d2:
                    2d:90:0d:b8:7e:3a:81:a1:bf:6f:96:d1:e3:e6:1f:
                    c0:ca:f1:77:1b:ab:82:33:3b:fd:d4:47:89:6c:85:
                    f5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2C:13:00:D4:BE:C7:A6:F7:C7:61:9E:60:BB:85:B9:96:1C:85:44
            X509v3 Authority Key Identifier:
                keyid:50:DA:2B:AF:C3:7A:39:88:DD:29:4C:91:3A:E5:22:0E:03:8D:B9:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNorr8N6OYjdKUyROuUiDgONuWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/16453d-28d0-46dd-8577-bdd57751c673/1/UNorr8N6OYjdKUyROuUiDgONuWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/16453d-28d0-46dd-8577-bdd57751c673/1/UNorr8N6OYjdKUyROuUiDgONuWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:2d:3f:07:b0:98:8b:dc:4c:f6:89:b9:80:16:50:3d:30:68:
         38:33:1a:f7:4b:d6:a2:8c:a4:55:b4:a7:87:6f:bd:0f:ef:ad:
         94:e4:ce:f6:ac:20:a5:06:c4:2d:9b:5f:8a:9c:36:b9:ec:33:
         cb:f9:4a:c9:d2:ba:e3:b2:0f:b0:97:20:3c:83:73:cd:46:db:
         7b:e4:49:fd:8a:56:1f:aa:01:28:27:7d:86:8a:de:2f:b0:c1:
         17:23:95:35:9e:1f:94:97:7d:a5:2a:0d:8d:97:19:b3:2d:6e:
         7f:bb:1c:66:8c:78:47:77:42:16:29:e8:01:94:f5:e4:3c:3f:
         31:e7:be:02:43:21:4f:30:5e:27:4d:3c:86:fb:d3:c0:47:2f:
         bf:aa:06:53:12:f3:bb:56:ca:27:3d:8d:97:d9:53:67:24:45:
         fe:63:b8:ea:69:3a:ca:01:2d:e4:91:5f:6f:c0:dc:cb:9c:78:
         4b:7c:00:09:5b:51:11:a9:56:82:50:13:fc:e2:14:f8:99:c3:
         6d:f8:32:ec:d5:6b:ea:e8:b1:98:ba:63:bb:06:d3:c7:4b:ca:
         1c:9d:9a:4d:59:ea:a9:b5:e7:de:3f:62:6e:b1:3b:ed:3b:20:
         55:83:d7:c9:3d:bc:8f:f0:b1:48:5d:ea:2f:97:c6:f0:27:b6:
         17:b5:a2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:01:54 2026 by rpki-client