Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft
File:                     uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft (raw, json)
Hash identifier:          KTv2sA8OD6Jodir+hpTp7N3Ig4vmt2Od7pgnJe/ollM=
Subject key identifier:   C3:88:58:E7:7E:A6:DB:B3:BC:44:09:61:18:61:66:4F:9D:16:8C:23
Authority key identifier: B9:14:53:15:B4:4C:B6:5D:2A:79:1A:0A:E5:82:36:64:D0:C4:44:5E
Certificate issuer:       /CN=b9145315b44cb65d2a791a0ae5823664d0c4445e
Certificate serial:       019DA48B0C95D08E87C1703106B6BE3F791B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRRTFbRMtl0qeRoK5YI2ZNDERF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft
Manifest number:          18C3
Signing time:             Sun 19 Apr 2026 07:01:09 +0000
Manifest this update:     Sun 19 Apr 2026 07:01:09 +0000
Manifest next update:     Mon 20 Apr 2026 07:01:09 +0000
Files and hashes:         1: uRRTFbRMtl0qeRoK5YI2ZNDERF4.crl (hash: 40hEf59wbawqz6CSO9FfbaHL13ZPrhEQ3jxG882LY9Q=)
                          2: x5xm4vdFbBHznlJcV5ZiHWVVd_M.roa (hash: SnPKDlLfVQyV1q/jxDCUh9flkRaLQ6KKhfXTPJRDfDg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRRTFbRMtl0qeRoK5YI2ZNDERF4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:8b:0c:95:d0:8e:87:c1:70:31:06:b6:be:3f:79:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9145315b44cb65d2a791a0ae5823664d0c4445e
        Validity
            Not Before: Apr 19 07:01:09 2026 GMT
            Not After : Apr 20 07:01:09 2026 GMT
        Subject: CN=c38858e77ea6dbb3bc4409611861664f9d168c23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d7:0d:00:4f:40:1d:03:e4:82:41:70:13:29:
                    b5:cb:73:d8:d1:69:00:c9:56:c7:4d:70:28:71:4f:
                    3f:f8:33:b1:b8:4e:b5:d4:b7:33:b2:07:18:b5:78:
                    65:99:94:06:a0:63:f5:a7:2d:73:12:6a:57:70:6d:
                    af:a9:a3:a3:93:60:d9:c4:dc:d3:1c:6c:87:ac:d8:
                    05:99:05:b4:49:2d:f5:8e:0c:c4:82:9e:83:63:d0:
                    3a:01:41:31:87:ac:9e:49:20:ec:b5:ef:d5:5c:b2:
                    99:85:8b:d7:b1:e4:9b:c0:64:5b:b9:4c:40:9d:ae:
                    07:a1:b6:af:4a:f0:cb:20:59:ba:92:32:7d:09:d4:
                    b4:b2:bf:cc:ba:d5:64:70:c6:68:af:32:cd:7c:23:
                    47:0c:cf:3c:d3:ef:01:c3:06:9f:f2:0e:74:22:8e:
                    10:5d:eb:af:cd:7b:b8:c0:49:73:90:8b:1e:31:30:
                    a2:3e:f3:f7:e8:14:a6:ed:11:b7:d3:2a:0b:0a:7f:
                    54:c5:7f:67:f4:39:6b:2a:e5:4c:4c:08:3d:d3:d9:
                    06:76:a6:60:84:11:73:4f:1b:31:3b:0d:d2:8d:41:
                    f7:42:a8:bf:73:9f:4c:03:42:f5:fd:e5:33:6b:15:
                    78:50:c5:e6:8c:27:b1:cd:33:19:18:a2:cc:bb:a9:
                    25:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:88:58:E7:7E:A6:DB:B3:BC:44:09:61:18:61:66:4F:9D:16:8C:23
            X509v3 Authority Key Identifier:
                keyid:B9:14:53:15:B4:4C:B6:5D:2A:79:1A:0A:E5:82:36:64:D0:C4:44:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRTFbRMtl0qeRoK5YI2ZNDERF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:0d:7c:8a:bd:13:f1:27:70:b0:7d:1e:92:7c:ef:b0:fe:8f:
         29:54:89:a6:cf:e2:ab:63:85:eb:2b:34:29:7b:b8:4d:92:21:
         df:c6:ca:34:1f:46:1e:cb:50:ff:bb:6f:cd:81:9f:9f:ef:3d:
         6e:29:b3:9f:33:1b:6d:f6:7f:65:a4:d8:50:9d:d0:9e:63:20:
         2f:cb:c4:e2:f3:db:21:f1:f8:f6:5d:f3:cf:cb:aa:39:dc:a1:
         fb:cc:89:3f:ab:db:32:a2:b9:44:9e:66:a5:c4:78:1c:c4:e9:
         6d:8f:00:81:ce:66:c0:64:24:5c:a3:8c:72:18:78:93:90:31:
         1a:cf:56:19:6a:e3:cd:33:8d:7f:38:d4:08:9a:91:b8:6c:e1:
         fe:c8:65:79:69:52:be:bf:6b:a3:11:b1:47:43:88:2a:90:05:
         48:69:a1:aa:e5:97:72:1b:f4:c0:d7:a7:ee:7a:fe:e9:78:5d:
         d5:a1:42:7d:ad:45:22:81:05:38:65:27:cf:90:8d:89:cb:53:
         e6:13:6c:21:a5:4e:86:c0:48:b6:2c:86:53:6d:1e:35:f4:fe:
         cf:ef:a7:16:31:18:24:a1:9d:75:73:73:18:f2:65:cd:ca:14:
         fd:fe:81:fd:b1:bc:4a:4b:d3:5f:bf:90:20:50:3b:bd:94:91:
         17:c9:60:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:11 2026 by rpki-client