Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
File:                     Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft (raw, json)
Hash identifier:          HxR/BabS+9iin2M4zYQRVcljqcViRwrWBK3MAhnz63c=
Subject key identifier:   87:84:A5:65:7E:C5:E1:2C:3E:1F:EA:84:3F:4C:C9:56:DF:EA:0D:22
Authority key identifier: 51:FE:4D:48:AA:01:3D:40:E0:6C:31:2F:F7:10:48:9B:20:DF:E0:7F
Certificate issuer:       /CN=51fe4d48aa013d40e06c312ff710489b20dfe07f
Certificate serial:       019D98F428A0B39081775BE7BABB9FCE6F8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
Manifest number:          0FA6
Signing time:             Fri 17 Apr 2026 01:00:31 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:31 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:31 +0000
Files and hashes:         1: Uf5NSKoBPUDgbDEv9xBImyDf4H8.crl (hash: fpClqFoiwMorY3puxXoZD4nSipzdneNHPpexFIu0lXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:28:a0:b3:90:81:77:5b:e7:ba:bb:9f:ce:6f:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51fe4d48aa013d40e06c312ff710489b20dfe07f
        Validity
            Not Before: Apr 17 01:00:31 2026 GMT
            Not After : Apr 18 01:00:31 2026 GMT
        Subject: CN=8784a5657ec5e12c3e1fea843f4cc956dfea0d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4b:af:b1:41:1f:66:14:12:9f:02:c6:86:95:
                    98:0a:1a:db:7e:95:89:33:77:5e:6a:d5:48:68:fc:
                    63:db:99:63:7b:16:88:4a:ea:b9:fe:5f:4e:24:9e:
                    b2:16:dd:30:9f:ad:0b:9a:da:6a:fb:f3:cf:68:39:
                    af:fb:a2:29:3c:65:8b:29:7d:48:e2:df:59:52:1c:
                    f1:d6:4c:f2:37:01:f7:97:de:05:d2:3c:23:e5:29:
                    a3:60:bf:b2:1d:d7:98:b6:50:be:82:a0:6e:1c:51:
                    9c:7e:84:a5:25:ba:7a:11:8d:ef:46:c2:8a:22:75:
                    8a:79:56:b7:38:4c:27:d8:8a:56:42:77:c2:d9:c9:
                    5c:35:d4:fe:25:f2:9c:69:a5:15:74:57:60:2c:cd:
                    ae:41:38:f1:6d:f7:f5:de:a8:cb:ad:b2:71:20:d1:
                    9d:c6:0a:e9:0b:21:bc:08:5f:50:ee:21:a6:24:cb:
                    e6:42:2d:18:de:3a:e0:c2:69:a7:57:bc:74:fc:ab:
                    ee:e4:83:a0:79:7f:38:9a:b3:6c:b3:82:8d:e6:a4:
                    19:54:32:28:65:c1:2e:7c:c1:e1:cb:91:0c:f4:03:
                    b0:1a:9e:60:7e:f2:64:79:36:a2:67:d3:7b:42:1e:
                    ee:a4:78:57:02:48:17:61:ee:55:d5:66:d7:e9:5a:
                    29:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:84:A5:65:7E:C5:E1:2C:3E:1F:EA:84:3F:4C:C9:56:DF:EA:0D:22
            X509v3 Authority Key Identifier:
                keyid:51:FE:4D:48:AA:01:3D:40:E0:6C:31:2F:F7:10:48:9B:20:DF:E0:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:8b:88:d1:e2:b3:9d:6a:a7:78:05:9a:c0:81:ac:f7:f9:b1:
         79:70:35:24:28:7d:0a:7e:88:d8:ba:e5:2e:66:9c:36:fa:da:
         92:de:19:ab:93:71:ea:63:ca:f9:ea:37:53:e9:2e:3b:6d:0d:
         81:06:85:8a:32:a9:b2:00:08:a7:a7:bc:73:87:a0:bd:70:30:
         b6:04:fc:1f:05:68:41:e5:4b:75:53:86:7d:ef:b5:08:cc:c1:
         9e:9c:40:1a:fd:22:54:5f:2b:1e:35:3a:02:7b:c5:4a:6a:f2:
         e2:45:34:bc:df:15:b4:e5:5f:dd:15:f2:79:16:5a:d4:74:07:
         46:49:78:49:29:86:9d:8f:a6:91:da:54:b2:9f:5b:58:87:93:
         ef:db:ab:fb:ca:0e:ff:6f:3f:b7:bf:e9:ff:a2:c2:28:51:d5:
         e6:af:cb:b8:3b:9c:e1:73:38:1a:8d:94:86:05:8c:34:19:75:
         8b:f4:e0:36:15:6c:b1:a1:f3:d3:d3:28:64:37:34:1e:41:72:
         b6:f8:9b:65:c3:80:da:b7:34:47:b5:2f:41:3c:0d:f9:da:a2:
         12:1e:3e:9f:e1:bc:10:f1:44:7f:d1:04:da:ee:96:a5:aa:ad:
         c6:c0:31:ec:33:5b:95:e5:d2:39:8c:b1:de:8f:5e:97:a0:7e:
         ba:42:32:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9Cigs5CBd1vnurufzm+MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZmU0ZDQ4YWEwMTNkNDBlMDZjMzEyZmY3MTA0ODliMjBk
ZmUwN2YwHhcNMjYwNDE3MDEwMDMxWhcNMjYwNDE4MDEwMDMxWjAzMTEwLwYDVQQD
Eyg4Nzg0YTU2NTdlYzVlMTJjM2UxZmVhODQzZjRjYzk1NmRmZWEwZDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EuvsUEfZhQSnwLGhpWYChrbfpWJ
M3deatVIaPxj25ljexaISuq5/l9OJJ6yFt0wn60Lmtpq+/PPaDmv+6IpPGWLKX1I
4t9ZUhzx1kzyNwH3l94F0jwj5SmjYL+yHdeYtlC+gqBuHFGcfoSlJbp6EY3vRsKK
InWKeVa3OEwn2IpWQnfC2clcNdT+JfKcaaUVdFdgLM2uQTjxbff13qjLrbJxINGd
xgrpCyG8CF9Q7iGmJMvmQi0Y3jrgwmmnV7x0/Kvu5IOgeX84mrNss4KN5qQZVDIo
ZcEufMHhy5EM9AOwGp5gfvJkeTaiZ9N7Qh7upHhXAkgXYe5V1WbX6VopuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIeEpWV+xeEsPh/qhD9MyVbf6g0iMB8GA1UdIwQY
MBaAFFH+TUiqAT1A4GwxL/cQSJsg3+B/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWY1TlNLb0JQVURnYkRFdjl4QklteURmNEg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jN2Q3MjItZGQxYi00NWNkLTk5ODMt
Y2MzYjc4ZTc3YTA3LzEvVWY1TlNLb0JQVURnYkRFdjl4QklteURmNEg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9jN2Q3MjItZGQxYi00NWNkLTk5ODMtY2MzYjc4ZTc3YTA3
LzEvVWY1TlNLb0JQVURnYkRFdjl4QklteURmNEg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4uI0eKz
nWqneAWawIGs9/mxeXA1JCh9Cn6I2LrlLmacNvrakt4Zq5Nx6mPK+eo3U+kuO20N
gQaFijKpsgAIp6e8c4egvXAwtgT8HwVoQeVLdVOGfe+1CMzBnpxAGv0iVF8rHjU6
AnvFSmry4kU0vN8VtOVf3RXyeRZa1HQHRkl4SSmGnY+mkdpUsp9bWIeT79ur+8oO
/28/t7/p/6LCKFHV5q/LuDuc4XM4Go2UhgWMNBl1i/TgNhVssaHz09MoZDc0HkFy
tvibZcOA2rc0R7UvQTwN+dqiEh4+n+G8EPFEf9EE2u6WpaqtxsAx7DNbleXSOYyx
3o9el6B+ukIyIw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:29:53 2026 by rpki-client