Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
File:                     ui1f0wndbMbPeIYEHl6cLBomzqs.mft (raw, json)
Hash identifier:          VNlb1K9/JTAIc08XYjwaTc9sgxAq7zpf3L3Ina3DYJc=
Subject key identifier:   BE:B3:5E:B9:D5:A2:A2:9C:0C:B4:0B:DE:AB:5C:D9:51:4C:87:B9:92
Authority key identifier: BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB
Certificate issuer:       /CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab
Certificate serial:       019D9AABE2E9A2BC55CD1F1BEB84335A0EC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
Manifest number:          1856
Signing time:             Fri 17 Apr 2026 09:00:49 +0000
Manifest this update:     Fri 17 Apr 2026 09:00:49 +0000
Manifest next update:     Sat 18 Apr 2026 09:00:49 +0000
Files and hashes:         1: NuqvGLGVW54T2_CK4Y8l2k93wFg.roa (hash: DT5naWAM2r0ZiUJDhX9HJ7rLzQINkgWuAJdmInUQ/sA=)
                          2: ui1f0wndbMbPeIYEHl6cLBomzqs.crl (hash: uKjngqJsUaO+eiNZLICLMkuftCQRcXM9JuOBLGGIwbo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ab:e2:e9:a2:bc:55:cd:1f:1b:eb:84:33:5a:0e:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab
        Validity
            Not Before: Apr 17 09:00:49 2026 GMT
            Not After : Apr 18 09:00:49 2026 GMT
        Subject: CN=beb35eb9d5a2a29c0cb40bdeab5cd9514c87b992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0f:d7:e0:28:3d:b5:65:87:9b:5f:94:30:a0:
                    e5:d5:7d:b0:fb:86:82:14:14:b6:b1:b2:a4:72:1e:
                    e3:1f:3b:bb:38:54:70:32:07:8c:d7:f5:19:ed:ff:
                    20:be:fd:6a:ec:b2:2d:33:b5:06:49:e7:5a:ba:4d:
                    ff:8a:dd:59:4a:58:a5:81:e8:93:2b:bc:43:95:c3:
                    17:43:df:ce:68:ba:e4:09:bf:dd:16:3e:ba:49:48:
                    08:c2:e7:16:7d:56:0b:e5:f9:53:5c:58:c9:ba:1f:
                    1b:e9:95:d8:25:1e:c1:53:e8:b3:59:d2:94:62:71:
                    90:89:c4:e1:4c:7f:c0:35:42:22:7f:9c:d2:ab:54:
                    79:9c:72:f3:90:3b:44:56:03:a2:cb:33:ff:6b:bb:
                    25:14:49:05:c4:72:38:da:ec:bc:d6:5d:de:5a:b7:
                    f9:a3:99:b8:9d:a1:f5:73:eb:6c:b4:97:7a:41:2b:
                    ef:95:4a:f6:79:3c:1d:dd:cb:64:e8:99:d9:39:bc:
                    23:cb:9e:fb:b3:d7:42:5b:fa:db:87:34:05:28:63:
                    81:59:0e:c6:cc:1c:f0:01:d6:09:f3:cb:b3:61:40:
                    15:1f:e8:86:e6:37:5c:91:ec:65:57:cd:ef:99:f5:
                    e0:99:66:fd:ad:97:1f:08:53:24:05:8e:f6:3a:09:
                    f4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B3:5E:B9:D5:A2:A2:9C:0C:B4:0B:DE:AB:5C:D9:51:4C:87:B9:92
            X509v3 Authority Key Identifier:
                keyid:BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:47:25:41:3d:ce:d0:14:1a:e3:29:bf:14:15:34:ad:01:70:
         7b:9b:1e:fd:47:7b:67:9a:c3:77:45:01:c5:dd:f1:c8:c8:8a:
         49:1b:b4:80:f4:d1:50:a1:37:9f:7d:7f:4c:4d:be:f6:af:5a:
         11:2e:04:c1:75:3a:f1:db:be:61:86:4d:2e:5c:fd:3a:74:df:
         52:52:c5:b1:da:96:85:60:b7:b0:72:93:a5:60:1e:07:f3:32:
         7d:23:40:68:3d:46:27:e7:4b:ae:cf:3b:c2:10:8f:f5:6d:c2:
         cd:c1:f4:7c:4b:11:55:9f:53:a8:83:d1:c8:bb:f9:c6:c8:f5:
         cb:0a:45:99:d8:ac:6b:3b:b6:e5:0d:e8:12:ce:cc:a2:da:a2:
         ed:45:08:c0:f0:7c:5e:a6:dc:78:64:be:54:ad:69:86:18:f5:
         35:66:82:b7:68:c5:6b:b2:4c:9c:0d:a1:fb:e9:33:3c:5b:56:
         31:81:83:07:1a:bc:82:07:a9:58:cf:1d:04:98:e3:95:92:b1:
         2d:b1:ff:12:1a:3a:96:fb:93:72:5b:c2:f6:d9:c5:a3:b8:ca:
         58:c6:03:85:85:10:52:96:2f:1f:ff:05:70:89:cc:02:44:c4:
         8e:ef:ed:35:d6:b2:8c:73:ca:d3:ff:fd:9c:82:9a:ef:f5:90:
         80:45:22:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:15:57 2026 by rpki-client