Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
File:                     UaLCwG3bhGaaiamfuHVglRNMh2Y.mft (raw, json)
Hash identifier:          7ompvzwyAD6o481JMRmn6tk9wbCyrgj6z3jq6bwgz0Q=
Subject key identifier:   8C:2B:BC:88:2D:B0:A0:87:D2:06:AE:E7:B0:5A:5C:E2:56:C1:19:92
Authority key identifier: 51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66
Certificate issuer:       /CN=51a2c2c06ddb84669a89a99fb8756095134c8766
Certificate serial:       019D9AAB9A234CED7F9AB27DC9A7816E5F4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
Manifest number:          0722
Signing time:             Fri 17 Apr 2026 09:00:30 +0000
Manifest this update:     Fri 17 Apr 2026 09:00:30 +0000
Manifest next update:     Sat 18 Apr 2026 09:00:30 +0000
Files and hashes:         1: UaLCwG3bhGaaiamfuHVglRNMh2Y.crl (hash: fGBagQyZCcwxY0iOY+zr4NVxKYAD795mTpD89z5/t1o=)
                          2: Zw0BJ60leHVrZJiWPzlXTx_gu-g.roa (hash: zMGa6j4ctCusyJp2LtMLsXdNvm0G2MCLxoW8FpfFI3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ab:9a:23:4c:ed:7f:9a:b2:7d:c9:a7:81:6e:5f:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51a2c2c06ddb84669a89a99fb8756095134c8766
        Validity
            Not Before: Apr 17 09:00:30 2026 GMT
            Not After : Apr 18 09:00:30 2026 GMT
        Subject: CN=8c2bbc882db0a087d206aee7b05a5ce256c11992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c3:80:4c:64:54:0b:33:0c:46:e0:9f:c8:53:
                    54:4e:c7:2b:6b:1f:05:32:c7:aa:8d:db:0e:89:2b:
                    29:30:3e:03:ba:c6:7e:bf:6f:50:0e:dc:2b:c9:2e:
                    0c:e5:2c:44:61:a9:4b:df:6f:db:78:a2:25:f3:48:
                    b3:3f:fd:11:2f:94:bf:6e:b1:9b:4e:f1:a9:0d:e3:
                    a0:e1:2d:c6:60:1c:ba:90:61:c8:4d:73:77:bd:63:
                    af:74:7a:93:38:92:20:47:46:48:22:24:04:b9:1c:
                    96:58:84:09:04:a4:0f:be:9a:87:3f:a1:eb:91:98:
                    0e:b6:16:ce:8f:da:07:e5:85:c3:63:ee:fb:16:ed:
                    aa:29:3b:63:e9:63:ba:04:ff:3e:4a:6e:af:e6:76:
                    50:ee:4f:fa:2d:e9:70:b0:9d:75:bb:96:f8:27:5a:
                    9a:aa:91:d2:d9:fd:0d:c5:25:c1:28:2c:80:7b:13:
                    d9:1d:2e:97:9b:4c:f3:ff:88:71:4e:17:30:59:19:
                    c4:0b:3d:d6:54:b0:db:5b:14:88:ce:8d:b9:03:8e:
                    2c:15:80:78:58:9d:c7:16:78:2f:99:be:26:73:84:
                    5d:33:e8:2f:c5:05:9a:85:3d:25:a4:86:c5:c5:47:
                    e2:78:a5:b2:21:eb:51:d3:fb:24:d2:40:86:09:6f:
                    21:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2B:BC:88:2D:B0:A0:87:D2:06:AE:E7:B0:5A:5C:E2:56:C1:19:92
            X509v3 Authority Key Identifier:
                keyid:51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:c0:09:0a:31:ae:00:3d:60:db:3d:3f:13:0a:c5:37:9e:e4:
         dc:fa:93:38:a7:f9:b4:28:e7:41:e1:4b:a3:a2:fb:cb:82:33:
         58:71:0d:10:fb:28:93:3e:d4:37:ed:b1:e5:7a:94:4f:92:6d:
         03:07:7b:01:7b:6a:11:f9:d8:a4:e6:4c:5d:b2:c4:6b:65:31:
         62:c1:f7:bb:14:28:06:74:9e:a3:46:a3:56:d0:ed:2e:88:21:
         72:1e:07:ff:74:2b:70:5c:5d:fc:4a:d6:ad:0b:db:55:8a:eb:
         3a:e8:0c:cd:93:f2:69:57:c1:e5:c4:b6:0c:60:44:38:c4:9b:
         19:a2:4c:6c:be:1c:27:76:9e:8b:08:d1:45:5e:38:28:ff:86:
         2e:35:4d:cf:fe:3d:b8:b2:9c:d7:0f:71:16:a4:ce:c9:07:a8:
         83:7c:31:0d:11:77:01:8f:59:cb:21:72:a9:17:d2:c1:9f:11:
         98:58:b7:73:bb:bb:78:82:ff:84:4b:dd:c2:3d:29:4e:84:26:
         56:93:b4:c7:14:53:6d:67:ec:bc:89:e6:38:66:74:52:bd:a7:
         f5:60:1a:aa:ec:1b:f4:8f:67:b1:2e:4a:72:14:eb:e3:30:ae:
         1d:89:0d:a5:a8:04:b0:0a:c3:6d:9c:2f:49:54:00:9a:bc:ac:
         c4:dc:6e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:56:17 2026 by rpki-client