Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft
File:                     UAWWzmBz6O3txRBfgU7JcZG14dU.mft (raw, json)
Hash identifier:          mEqacudSM0TFXowk2T6cKOZ2cFvrAKHcD2sbO6Z4C4I=
Subject key identifier:   2C:CA:96:C0:E2:7C:02:E8:4C:49:B2:BE:65:59:46:77:7C:AC:DC:A2
Authority key identifier: 50:05:96:CE:60:73:E8:ED:ED:C5:10:5F:81:4E:C9:71:91:B5:E1:D5
Certificate issuer:       /CN=500596ce6073e8ededc5105f814ec97191b5e1d5
Certificate serial:       019DA2D2E71186160CE1B61EBF6E086E27A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft
Manifest number:          11F1
Signing time:             Sat 18 Apr 2026 23:00:23 +0000
Manifest this update:     Sat 18 Apr 2026 23:00:23 +0000
Manifest next update:     Sun 19 Apr 2026 23:00:23 +0000
Files and hashes:         1: UAWWzmBz6O3txRBfgU7JcZG14dU.crl (hash: aB+T4XZJbf62mY10dzgonwCHOVFiSGLoptSKJi1OHlQ=)
                          2: ajuDEzNJwC4r5rxMhDlnFbCct18.roa (hash: d8WaXIaoocbHmWCmpBjreywqEe6b/owRz1fe/aRzGoQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 23:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a2:d2:e7:11:86:16:0c:e1:b6:1e:bf:6e:08:6e:27:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500596ce6073e8ededc5105f814ec97191b5e1d5
        Validity
            Not Before: Apr 18 23:00:23 2026 GMT
            Not After : Apr 19 23:00:23 2026 GMT
        Subject: CN=2cca96c0e27c02e84c49b2be655946777cacdca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:37:60:87:38:a5:73:1c:f9:da:bb:dc:67:b3:
                    91:ce:61:ac:2c:54:5c:fb:8f:15:5d:51:e0:2f:2f:
                    cd:e0:af:7b:5a:a6:ef:61:98:fe:68:0d:2b:b6:6f:
                    c2:2e:c5:02:4f:b0:b8:cc:87:e9:f0:ab:1f:e2:98:
                    a4:da:3a:c9:6e:60:a4:58:64:91:42:22:2a:06:98:
                    d1:a1:72:66:b3:fb:1e:19:18:38:ca:1b:b5:96:0f:
                    38:3b:ac:4c:0c:7d:58:22:f4:a1:82:b7:bf:ee:d7:
                    c6:73:64:45:5f:2e:ea:7a:cf:bc:fb:1c:eb:cd:37:
                    b9:a6:6c:4b:a5:3d:a3:d1:fd:e2:66:ed:82:cc:76:
                    bd:bf:72:c4:51:40:e5:8a:5a:e4:ba:83:30:df:ff:
                    ac:93:e7:38:a2:56:66:01:f0:d6:85:8f:7e:a9:b1:
                    27:8a:41:f2:aa:12:38:41:de:63:73:6e:ef:f1:86:
                    e2:6f:55:18:19:f1:04:c2:79:05:5a:db:74:f5:48:
                    73:14:9a:c2:1a:18:24:ff:f8:94:94:b1:c1:b7:f3:
                    c4:5e:a0:3a:73:64:92:09:2d:33:0c:76:dc:09:e8:
                    2a:9c:20:89:e9:88:4c:5b:85:de:47:ac:11:fa:4e:
                    86:f5:19:b9:6b:ad:6b:a7:0e:ce:5e:9f:48:59:ad:
                    92:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:CA:96:C0:E2:7C:02:E8:4C:49:B2:BE:65:59:46:77:7C:AC:DC:A2
            X509v3 Authority Key Identifier:
                keyid:50:05:96:CE:60:73:E8:ED:ED:C5:10:5F:81:4E:C9:71:91:B5:E1:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ff:90:9c:2c:8f:f3:1e:22:2c:b7:0a:bc:a4:8b:b0:59:41:
         a5:8a:57:e2:65:0d:a8:3d:b4:e2:0f:f0:ef:c1:0b:25:67:87:
         f1:cd:e4:39:b2:91:7d:01:f8:7b:c1:99:45:7a:fe:2f:c6:8b:
         42:ea:04:ab:9f:5e:a6:42:e2:4f:65:c6:5f:ad:1b:a6:0c:63:
         e0:c3:9b:18:88:58:f6:2e:ab:36:98:d7:89:93:57:ed:db:a3:
         68:26:cc:17:35:1b:b1:9c:46:1d:45:6e:70:53:77:23:60:fd:
         02:dd:f8:c0:8c:5e:61:e0:0b:0d:05:75:91:bc:6f:1a:32:d1:
         88:81:05:0c:e5:91:5d:8e:72:ed:60:1e:32:b8:be:ec:7d:59:
         55:8f:04:8c:45:f6:67:90:5f:da:f2:04:d2:e1:af:5f:64:0b:
         35:3e:6b:b7:b2:3b:b3:5f:4e:31:89:97:ba:59:cb:79:fc:73:
         b0:fb:b6:6c:56:d8:e7:ff:3c:4c:d6:08:f5:21:97:dc:e0:8c:
         75:5a:cf:db:42:0c:d0:e6:43:6e:74:aa:43:ac:8a:76:48:d8:
         75:f8:e2:45:22:41:1e:41:17:33:e3:8a:46:52:e1:33:49:95:
         d9:21:7a:84:8e:a6:64:6b:6a:f4:96:a6:f8:45:80:22:fa:c5:
         55:1c:41:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:55:49 2026 by rpki-client