Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
File:                     UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft (raw, json)
Hash identifier:          E3/HqVyyogKhU5IO4R7vgDQ0k9Es73nA546+zqCZBh8=
Subject key identifier:   C3:3E:17:1A:06:17:5C:8B:E8:05:D6:00:BF:57:1F:1D:0D:60:DC:69
Authority key identifier: 51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37
Certificate issuer:       /CN=51476318d71bf658f9a845f54ab27bd899892437
Certificate serial:       019D992B1339E156499EC004EA857BC0DEFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 02:00:30 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:30 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:30 +0000
Files and hashes:         1: UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl (hash: 2PWpGckfin/zkyLAzFXByAYP2Vv9XIEa8t5hC9WVQUw=)
                          2: j_DUMdAnZ9L25T_DLZEtDSOt7Jg.roa (hash: HhU7n7OhPQgUoe1hdC5otibZ4YzWb9TWF6sNGUEEoek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:13:39:e1:56:49:9e:c0:04:ea:85:7b:c0:de:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51476318d71bf658f9a845f54ab27bd899892437
        Validity
            Not Before: Apr 17 02:00:30 2026 GMT
            Not After : Apr 18 02:00:30 2026 GMT
        Subject: CN=c33e171a06175c8be805d600bf571f1d0d60dc69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c3:cf:75:b2:66:6a:e8:b1:1e:71:3a:1d:8d:
                    51:3a:bb:51:3f:f0:2b:8a:97:74:d3:9e:2c:6d:20:
                    9e:e2:a5:cc:d3:10:b3:b9:b1:9f:34:b2:e1:79:09:
                    b8:64:ad:45:d5:14:62:7e:36:b4:aa:83:36:6c:3f:
                    e6:c9:62:cd:e5:b8:15:f1:91:24:70:cd:27:12:c0:
                    c4:56:04:96:e0:91:e5:e0:50:fa:ca:f0:21:a8:73:
                    c7:db:b4:f2:de:0c:06:54:1b:b5:c8:74:e6:7f:b5:
                    a5:8e:42:fc:d9:a1:2d:e1:b0:b8:3f:fb:3b:d7:00:
                    d1:a3:3a:38:7e:9a:07:ba:19:ee:2a:e2:19:0f:26:
                    38:a2:83:cc:dd:f3:bd:98:7f:e5:dd:38:68:60:14:
                    eb:be:d4:ae:e6:a8:71:4a:0e:a2:00:27:86:55:97:
                    bc:0d:c2:5a:ca:76:27:2d:cb:63:04:e2:fd:8b:b8:
                    b2:66:85:2b:24:2d:6f:6a:81:22:88:ca:91:da:93:
                    ed:f4:07:f6:a3:7c:ec:79:13:07:2f:34:b0:25:5e:
                    bd:bb:cf:63:e2:f3:5d:43:13:21:ea:b1:54:c7:07:
                    7c:f4:40:d4:40:46:9a:b0:44:b4:ac:3c:f5:5a:2d:
                    b0:be:79:b3:b4:2e:ae:55:5f:b7:30:29:41:7a:99:
                    11:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:3E:17:1A:06:17:5C:8B:E8:05:D6:00:BF:57:1F:1D:0D:60:DC:69
            X509v3 Authority Key Identifier:
                keyid:51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:bb:ea:42:0e:04:59:7b:36:04:8e:a4:c2:93:bb:2a:52:81:
         80:f4:7e:ee:5c:60:63:56:c0:b3:83:bc:ea:18:3d:71:5d:2a:
         3b:66:40:a9:99:7f:a2:15:09:2c:94:a2:f0:fa:a5:93:cc:cd:
         60:5c:76:7b:04:13:6f:fa:9e:6d:a7:1e:d6:84:72:0d:d5:90:
         cd:69:de:91:a6:6c:4c:a4:fb:4a:3f:ff:f5:44:ce:5d:6a:09:
         ff:7e:47:42:5d:7c:55:43:fc:ea:32:ec:f1:1a:52:18:d2:c2:
         67:c5:af:37:e0:80:ea:9f:14:38:af:da:e3:ff:ce:46:a9:70:
         5d:a9:a4:aa:aa:d5:35:6f:6b:47:e8:10:e3:42:c6:65:05:d9:
         15:12:55:27:e2:ad:64:d1:76:93:ea:56:8b:b9:7c:c8:bf:35:
         c3:8e:a8:ca:82:25:a2:a9:b3:cb:54:75:47:55:3b:b7:f4:59:
         66:b7:3c:b4:02:f7:5d:17:06:ca:71:0e:6c:d1:0d:35:5f:e1:
         87:c5:14:3c:0f:a3:c2:b2:65:9c:38:af:78:d9:6d:77:6c:3f:
         f3:92:29:4d:6f:24:f1:e5:1d:6c:30:59:28:a5:56:99:6d:dd:
         0a:c9:c3:5a:78:c9:c9:3d:45:a5:f3:3f:2f:69:b1:66:aa:e4:
         c2:27:aa:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:57:10 2026 by rpki-client