Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft
File:                     Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft (raw, json)
Hash identifier:          2doVVhEmlNsWgATCHGQ5FjdBqpLGTGRj1n+1+B0QEas=
Subject key identifier:   A2:C4:40:00:B4:D6:33:FC:6E:83:7A:80:81:7F:87:D0:C8:12:81:C5
Authority key identifier: 52:EE:48:9F:36:DE:04:21:9C:D2:19:2E:04:A7:BD:B1:39:14:64:8F
Certificate issuer:       /CN=52ee489f36de04219cd2192e04a7bdb13914648f
Certificate serial:       019D9818627C460A26159997319048E418BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uu5InzbeBCGc0hkuBKe9sTkUZI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft
Manifest number:          13EB
Signing time:             Thu 16 Apr 2026 21:00:28 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:28 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:28 +0000
Files and hashes:         1: DPFop1VRWflc2dwO-UaKsnysNA0.roa (hash: TxO2MJ8nHORjvCPU/MK/XDRpBmX4mMRcY4M/4fMMMyw=)
                          2: Uu5InzbeBCGc0hkuBKe9sTkUZI8.crl (hash: S7sCXg0HfxNMoVMzMIfCiacV8GhgiilTGjlUIuXcFgM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uu5InzbeBCGc0hkuBKe9sTkUZI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:62:7c:46:0a:26:15:99:97:31:90:48:e4:18:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52ee489f36de04219cd2192e04a7bdb13914648f
        Validity
            Not Before: Apr 16 21:00:28 2026 GMT
            Not After : Apr 17 21:00:28 2026 GMT
        Subject: CN=a2c44000b4d633fc6e837a80817f87d0c81281c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:56:7b:c8:41:2e:2f:9a:4c:8c:ce:03:92:7b:
                    2a:5b:f6:5a:12:81:f6:90:a5:34:ae:cf:24:a4:b4:
                    a2:c8:50:ce:70:7b:3d:2f:60:84:cc:a9:7c:c2:81:
                    e4:46:88:fa:c1:93:c5:eb:1a:51:0e:08:d1:dd:e6:
                    85:1b:17:e4:4f:00:15:39:2b:e7:30:4e:b9:56:85:
                    01:fb:39:8c:5b:8b:e6:d3:bd:ad:04:9f:d7:8f:2f:
                    75:e8:76:da:03:e6:ba:63:17:a6:94:18:3e:d1:a5:
                    cf:f8:b8:ce:66:fd:ab:a4:c5:62:0b:85:07:a3:7d:
                    3a:5d:2f:ee:29:59:17:e5:71:31:c3:54:44:e3:f4:
                    17:aa:00:5d:9c:ef:d2:f7:ba:37:94:27:7c:64:67:
                    7c:e3:cb:bf:66:64:36:09:14:5b:ad:26:0b:82:ac:
                    0e:bd:ce:3f:b1:cf:7a:68:62:7a:f7:d2:21:5d:0f:
                    a0:d1:e9:1a:ac:15:23:ea:4b:9d:1b:c6:7d:9d:eb:
                    a6:b7:8e:e0:22:2b:b1:34:99:f3:da:44:e4:d1:c6:
                    f2:61:17:27:6f:2a:f6:2d:87:80:bc:52:23:9d:21:
                    04:55:17:06:52:13:82:20:04:f7:59:17:ae:a5:23:
                    77:30:f7:cd:9d:e0:1f:3c:21:ea:be:f3:7d:00:20:
                    5b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C4:40:00:B4:D6:33:FC:6E:83:7A:80:81:7F:87:D0:C8:12:81:C5
            X509v3 Authority Key Identifier:
                keyid:52:EE:48:9F:36:DE:04:21:9C:D2:19:2E:04:A7:BD:B1:39:14:64:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uu5InzbeBCGc0hkuBKe9sTkUZI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:bf:27:1d:b7:83:75:75:80:6d:64:f4:26:9a:2b:98:e5:bd:
         e3:ac:2e:1e:03:5b:5a:46:e0:94:26:06:27:de:34:b3:d3:83:
         18:53:99:9d:7d:ac:0e:9d:71:83:e4:dc:de:61:9a:53:0a:9e:
         54:09:25:fc:ea:e9:6b:d1:f8:b2:ab:82:fd:4a:a9:ca:f1:47:
         a6:42:e8:d8:72:7a:bd:69:8b:0b:d4:ab:ec:48:6d:d4:25:0e:
         0d:cc:bc:69:be:f0:96:46:9e:23:38:c9:c8:ba:69:71:a7:a8:
         aa:65:c0:06:83:94:c5:2c:f3:8e:bd:59:3e:84:a9:43:8e:c9:
         05:16:a4:30:6a:90:f8:be:18:d0:0f:c8:d8:c7:9b:48:26:7b:
         7e:02:30:27:43:c6:de:58:fe:c6:5c:92:20:da:9b:28:40:a3:
         e1:1f:ce:56:13:fd:b1:ea:62:2b:99:cf:ae:f4:ec:e0:00:f7:
         79:9f:5b:99:25:f5:12:60:08:2c:47:a2:16:5f:a2:37:1c:5e:
         32:85:aa:e9:97:53:cc:b6:70:d0:a8:f0:3e:eb:cb:35:87:01:
         8f:5f:fe:7d:33:69:13:af:7a:5e:94:bf:f2:d2:2b:53:fd:45:
         3c:b8:38:15:25:d3:07:37:5f:95:fc:68:e9:cd:18:da:7b:90:
         de:56:60:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:24:56 2026 by rpki-client