Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft
File:                     uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft (raw, json)
Hash identifier:          jkchQYskS3MNyKghodSUZBmt0ZLisSckG7RAkxLUdA4=
Subject key identifier:   E5:93:60:32:55:F1:5B:45:DE:5E:D1:5B:08:43:38:31:DD:E9:56:BD
Authority key identifier: B8:62:B8:5A:1D:2C:51:D9:90:69:CA:3A:5A:FF:52:EC:C6:A9:AA:B4
Certificate issuer:       /CN=b862b85a1d2c51d99069ca3a5aff52ecc6a9aab4
Certificate serial:       019DA309E8BD5D054A207E79CDFBF1094044
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft
Manifest number:          1267
Signing time:             Sun 19 Apr 2026 00:00:28 +0000
Manifest this update:     Sun 19 Apr 2026 00:00:28 +0000
Manifest next update:     Mon 20 Apr 2026 00:00:28 +0000
Files and hashes:         1: HeIDI7yWmckcG1zV0KhzrSK8Vmc.roa (hash: GFNEMZ7WA1uMS1R9uNab5giImHYRdz7pCsvuE9ixotI=)
                          2: uGK4Wh0sUdmQaco6Wv9S7MapqrQ.crl (hash: kVL/wPJP1K72tzn4kDBR83OhQZU6mnUC4vvZSisjx8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 00:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:09:e8:bd:5d:05:4a:20:7e:79:cd:fb:f1:09:40:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b862b85a1d2c51d99069ca3a5aff52ecc6a9aab4
        Validity
            Not Before: Apr 19 00:00:28 2026 GMT
            Not After : Apr 20 00:00:28 2026 GMT
        Subject: CN=e593603255f15b45de5ed15b08433831dde956bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:78:00:f1:e5:b9:37:37:35:a5:d5:80:83:b0:
                    bb:a1:59:8a:6f:79:30:f3:c7:c3:27:e3:f3:dc:90:
                    ca:bf:33:dc:1c:50:17:d1:ac:ce:87:43:51:38:fb:
                    69:a1:9f:89:d7:3c:d7:8e:0b:15:9e:11:0a:2f:26:
                    e5:e9:18:c4:87:a1:2a:4a:13:c2:c0:11:47:c8:6f:
                    1b:36:e9:c8:67:14:f4:62:c8:7b:8c:eb:6f:fc:00:
                    91:a9:12:a4:25:91:7a:51:38:97:d3:33:40:60:4e:
                    b8:76:2e:76:e8:c9:da:19:94:25:34:be:a9:dd:34:
                    c7:49:9a:a9:81:02:1b:d2:7d:ca:8d:63:d2:d6:21:
                    2f:21:6b:01:55:68:ee:e8:45:9a:de:d6:c3:f9:01:
                    42:59:ea:f3:21:89:7e:05:1d:5e:77:d3:d3:1f:23:
                    1d:18:54:3c:51:09:1f:55:96:73:17:bb:fb:d0:b4:
                    e2:69:9f:27:fc:18:49:72:a4:1f:ab:b6:a3:84:9d:
                    22:3d:89:8c:d2:c6:ab:c9:66:11:cd:d4:49:d4:f5:
                    b4:c7:32:56:8a:d4:ea:c4:54:4c:ba:7a:a4:20:1a:
                    3c:23:ab:b7:61:8f:99:75:e8:94:d8:7f:f9:3e:4f:
                    76:7c:1c:08:9f:53:da:02:dd:e2:a4:64:52:38:79:
                    f1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:93:60:32:55:F1:5B:45:DE:5E:D1:5B:08:43:38:31:DD:E9:56:BD
            X509v3 Authority Key Identifier:
                keyid:B8:62:B8:5A:1D:2C:51:D9:90:69:CA:3A:5A:FF:52:EC:C6:A9:AA:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:49:3a:cc:28:e2:47:7a:73:3d:60:57:ca:e0:a9:48:d5:bd:
         ec:65:c2:6c:96:da:bf:a3:74:67:91:9a:d7:4d:d4:44:c6:86:
         77:dd:71:ad:a6:56:ad:33:0f:2c:a0:2f:50:ae:4b:78:67:9f:
         fe:04:6b:46:f3:78:19:fe:35:6c:b0:f2:15:fc:09:a1:5d:59:
         c5:47:a2:36:b3:82:f5:f6:3e:b2:a8:e8:7c:b7:7e:97:58:93:
         1b:e9:8b:d0:f2:1c:88:72:2e:f8:e4:00:a3:f8:b3:69:cc:16:
         37:2b:e8:26:b8:0c:26:ab:1d:d3:f0:7c:b1:be:14:c9:0e:88:
         5d:35:8a:f7:cd:d5:32:54:7d:a8:83:5a:6f:54:ae:59:9f:22:
         7d:45:39:69:f6:6c:09:72:79:46:1a:13:db:e6:13:49:04:0e:
         4a:03:cf:0b:60:4a:5e:db:7d:47:47:f6:11:5e:7f:3a:20:f1:
         15:e4:74:f1:10:0d:e6:3c:c9:72:4d:20:4a:6b:57:9a:f7:a4:
         99:f3:eb:36:fe:8d:7e:36:01:ea:05:34:e1:ce:70:14:45:29:
         06:6a:cd:10:0a:43:61:58:a4:a0:89:5f:18:5d:2f:5f:1c:b3:
         eb:da:0c:a1:4c:30:b0:64:bd:5f:c9:2f:c1:9c:99:b4:84:67:
         8a:92:32:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jCei9XQVKIH55zfvxCUBEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NjJiODVhMWQyYzUxZDk5MDY5Y2EzYTVhZmY1MmVjYzZh
OWFhYjQwHhcNMjYwNDE5MDAwMDI4WhcNMjYwNDIwMDAwMDI4WjAzMTEwLwYDVQQD
EyhlNTkzNjAzMjU1ZjE1YjQ1ZGU1ZWQxNWIwODQzMzgzMWRkZTk1NmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHgA8eW5Nzc1pdWAg7C7oVmKb3kw
88fDJ+Pz3JDKvzPcHFAX0azOh0NROPtpoZ+J1zzXjgsVnhEKLybl6RjEh6EqShPC
wBFHyG8bNunIZxT0Ysh7jOtv/ACRqRKkJZF6UTiX0zNAYE64di526MnaGZQlNL6p
3TTHSZqpgQIb0n3KjWPS1iEvIWsBVWju6EWa3tbD+QFCWerzIYl+BR1ed9PTHyMd
GFQ8UQkfVZZzF7v70LTiaZ8n/BhJcqQfq7ajhJ0iPYmM0saryWYRzdRJ1PW0xzJW
itTqxFRMunqkIBo8I6u3YY+ZdeiU2H/5Pk92fBwIn1PaAt3ipGRSOHnx8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWTYDJV8VtF3l7RWwhDODHd6Va9MB8GA1UdIwQY
MBaAFLhiuFodLFHZkGnKOlr/UuzGqaq0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUdLNFdoMHNVZG1RYWNvNld2OVM3TWFwcXJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jYjIyMGYtMWEzYS00Y2JhLTgyY2Yt
Mjc4ZmQ0NzVmM2ZiLzEvdUdLNFdoMHNVZG1RYWNvNld2OVM3TWFwcXJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9jYjIyMGYtMWEzYS00Y2JhLTgyY2YtMjc4ZmQ0NzVmM2Zi
LzEvdUdLNFdoMHNVZG1RYWNvNld2OVM3TWFwcXJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEkk6zCji
R3pzPWBXyuCpSNW97GXCbJbav6N0Z5Ga103URMaGd91xraZWrTMPLKAvUK5LeGef
/gRrRvN4Gf41bLDyFfwJoV1ZxUeiNrOC9fY+sqjofLd+l1iTG+mL0PIciHIu+OQA
o/izacwWNyvoJrgMJqsd0/B8sb4UyQ6IXTWK983VMlR9qINab1SuWZ8ifUU5afZs
CXJ5RhoT2+YTSQQOSgPPC2BKXtt9R0f2EV5/OiDxFeR08RAN5jzJck0gSmtXmvek
mfPrNv6NfjYB6gU04c5wFEUpBmrNEApDYVikoIlfGF0vXxyz69oMoUwwsGS9X8kv
wZyZtIRnipIynw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:41 2026 by rpki-client