Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
File:                     UJvGPmjJCTK0_CiZf8O_eN47N0M.mft (raw, json)
Hash identifier:          bDmv5s/amBY6BCoKmrkHNEn6iyDdQSn9gA/UB2sgHis=
Subject key identifier:   E2:38:40:27:12:ED:01:9F:2E:1D:6A:F3:B5:B7:D0:0E:98:A7:7D:33
Authority key identifier: 50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43
Certificate issuer:       /CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
Certificate serial:       019D98BD692AA974B9274ED19BA76A70D290
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
Manifest number:          11C8
Signing time:             Fri 17 Apr 2026 00:00:43 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:43 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:43 +0000
Files and hashes:         1: 6TGUfIQg-VBwQ1TSjbACENP0Fuk.roa (hash: KbUe0U97E5HGIjpIMaXPTxhvroq3ZGOD2BiTeZCgmUA=)
                          2: UJvGPmjJCTK0_CiZf8O_eN47N0M.crl (hash: ziUJwZs4NQYEuB6qfksQuwb7VuP0mHUYInYzAlrdmuM=)
                          3: vFIy0amMxxYp6t0XVtNNLn2R_I8.roa (hash: vax2PUgWucdwxjsswO26V1j+tAN7zRvvsr/R7FSg7S0=)
                          4: zr2faZR5YeSQwhfP1BestpJXC-c.roa (hash: l0wUse8So6p8HXiUpDrAoN5JVZGYHdfzX/5wlHsppLs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:69:2a:a9:74:b9:27:4e:d1:9b:a7:6a:70:d2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
        Validity
            Not Before: Apr 17 00:00:43 2026 GMT
            Not After : Apr 18 00:00:43 2026 GMT
        Subject: CN=e238402712ed019f2e1d6af3b5b7d00e98a77d33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7a:f1:dc:33:b9:c9:08:84:6f:4d:ef:44:db:
                    9e:ff:bc:9d:c7:78:be:53:b9:36:84:25:3f:d9:fb:
                    a4:4e:72:5d:ff:06:01:02:b7:ec:da:ae:bb:50:3d:
                    f3:a0:30:36:f2:38:19:81:bb:44:6f:71:fc:06:ea:
                    e5:70:ec:c5:40:82:09:a7:b6:90:e5:58:3e:96:e1:
                    4e:fb:ec:5a:27:30:21:e6:6e:88:77:ed:0e:dd:fb:
                    b8:5c:36:6f:e1:b2:06:76:0e:16:71:4b:00:85:56:
                    fa:3a:72:34:7b:c0:73:93:de:6f:87:ff:17:08:b5:
                    5d:95:b4:3a:96:05:7a:f0:a2:53:ae:f8:63:bc:9a:
                    45:81:24:0b:9c:3d:eb:00:94:5d:7c:26:d2:76:7f:
                    66:19:e1:19:7a:58:ea:08:fd:a5:c5:39:94:95:f1:
                    2a:70:83:0f:66:2d:19:f3:4b:87:61:6a:51:14:7b:
                    bc:1f:1d:68:64:7f:88:04:2a:29:c8:75:26:79:c2:
                    79:f7:47:59:93:4e:cd:1b:22:5a:0c:e7:86:87:f4:
                    a0:5e:c9:12:19:a1:d2:6a:7a:b5:2d:c7:0c:1a:ef:
                    b7:cc:7a:f8:8b:0d:fb:8d:47:b2:1f:0e:b9:82:15:
                    f9:b0:92:4a:d2:4c:79:b7:8f:25:28:f5:26:2a:47:
                    e2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:38:40:27:12:ED:01:9F:2E:1D:6A:F3:B5:B7:D0:0E:98:A7:7D:33
            X509v3 Authority Key Identifier:
                keyid:50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:34:fa:1f:b2:c1:6d:bf:8d:16:76:ef:74:4a:12:43:04:a0:
         dc:15:b6:8c:14:a5:de:89:b7:de:ba:d3:01:e5:85:8a:b1:09:
         bc:90:2d:1e:93:c8:56:e0:73:ce:ba:2c:5b:6a:a4:cf:d4:fc:
         ee:fc:4a:8a:ce:cb:61:87:32:d1:0f:5a:bf:62:7b:df:1f:88:
         60:5f:19:c0:43:98:ba:8c:c9:d2:91:5d:ab:7a:81:c1:02:49:
         91:47:d8:6e:eb:34:9e:ce:db:7f:92:c1:b2:49:91:96:61:81:
         de:d6:2a:9d:25:0a:fd:24:17:86:58:d6:6c:8c:60:02:7e:d2:
         40:fb:6e:2f:bc:d0:27:a8:48:6f:e3:9a:1a:db:5c:09:92:ef:
         df:65:69:e7:30:1c:53:f1:3c:68:06:e3:19:79:ba:61:bd:2f:
         f1:ac:f8:a3:45:3f:f9:06:ad:ba:df:d4:87:21:d9:c7:d1:2a:
         c4:95:28:c6:ec:2e:ee:65:ba:80:09:88:e0:c8:2b:db:40:50:
         b0:e7:26:34:5d:ad:12:91:db:4a:e2:b2:a4:ce:fb:78:58:74:
         94:64:48:39:31:57:83:8a:b2:83:47:62:c9:74:9a:83:76:90:
         2e:24:ca:e5:e2:75:34:96:fc:da:ef:04:d8:26:a7:91:09:97:
         42:d6:36:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvWkqqXS5J07Rm6dqcNKQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwOWJjNjNlNjhjOTA5MzJiNGZjMjg5OTdmYzNiZjc4ZGUz
YjM3NDMwHhcNMjYwNDE3MDAwMDQzWhcNMjYwNDE4MDAwMDQzWjAzMTEwLwYDVQQD
EyhlMjM4NDAyNzEyZWQwMTlmMmUxZDZhZjNiNWI3ZDAwZTk4YTc3ZDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHrx3DO5yQiEb03vRNue/7ydx3i+
U7k2hCU/2fukTnJd/wYBArfs2q67UD3zoDA28jgZgbtEb3H8BurlcOzFQIIJp7aQ
5Vg+luFO++xaJzAh5m6Id+0O3fu4XDZv4bIGdg4WcUsAhVb6OnI0e8Bzk95vh/8X
CLVdlbQ6lgV68KJTrvhjvJpFgSQLnD3rAJRdfCbSdn9mGeEZeljqCP2lxTmUlfEq
cIMPZi0Z80uHYWpRFHu8Hx1oZH+IBCopyHUmecJ590dZk07NGyJaDOeGh/SgXskS
GaHSanq1LccMGu+3zHr4iw37jUeyHw65ghX5sJJK0kx5t48lKPUmKkfiOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOI4QCcS7QGfLh1q87W30A6Yp30zMB8GA1UdIwQY
MBaAFFCbxj5oyQkytPwomX/Dv3jeOzdDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUp2R1BtakpDVEswX0NpWmY4T19lTjQ3TjBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8zNGM1YjItYjZlMy00YjIzLWE2MDkt
MTZlZDNjZDBjNzJhLzEvVUp2R1BtakpDVEswX0NpWmY4T19lTjQ3TjBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8zNGM1YjItYjZlMy00YjIzLWE2MDktMTZlZDNjZDBjNzJh
LzEvVUp2R1BtakpDVEswX0NpWmY4T19lTjQ3TjBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAozT6H7LB
bb+NFnbvdEoSQwSg3BW2jBSl3om33rrTAeWFirEJvJAtHpPIVuBzzrosW2qkz9T8
7vxKis7LYYcy0Q9av2J73x+IYF8ZwEOYuozJ0pFdq3qBwQJJkUfYbus0ns7bf5LB
skmRlmGB3tYqnSUK/SQXhljWbIxgAn7SQPtuL7zQJ6hIb+OaGttcCZLv32Vp5zAc
U/E8aAbjGXm6Yb0v8az4o0U/+Qatut/UhyHZx9EqxJUoxuwu7mW6gAmI4Mgr20BQ
sOcmNF2tEpHbSuKypM77eFh0lGRIOTFXg4qyg0diyXSag3aQLiTK5eJ1NJb82u8E
2CankQmXQtY21A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:09:51 2026 by rpki-client