Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft
File:                     uqftCLjp6O71-D48yyZ0X4s4hec.mft (raw, json)
Hash identifier:          8gLfdTfVSI2D3R5CmI+9WqX7oQNcW7tJbCpQp0uF5E0=
Subject key identifier:   2C:63:BD:A7:73:52:23:C4:70:59:55:58:A0:90:16:18:D2:91:07:A4
Authority key identifier: BA:A7:ED:08:B8:E9:E8:EE:F5:F8:3E:3C:CB:26:74:5F:8B:38:85:E7
Certificate issuer:       /CN=baa7ed08b8e9e8eef5f83e3ccb26745f8b3885e7
Certificate serial:       019D98BD49E60302CABAB1EC250ED7B77B38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft
Manifest number:          05EC
Signing time:             Fri 17 Apr 2026 00:00:35 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:35 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:35 +0000
Files and hashes:         1: 33c8wPPk4IqhYynLyu73Se9qFUk.roa (hash: Wbj/39E/doWmUOgZqhAuudDtqXbvmhYxyd8kh6N55tc=)
                          2: QZYePRxM0mJaSAeUZyFdlg4Y3j8.roa (hash: Wq16h2TiQPpMic9yFlGNnTcF/OWQfdzHJMLMT4XQ2ds=)
                          3: RQO_LmTpcF6RDmMYZxn24ZfpcEI.roa (hash: bKbLY5d9ZhHhcSI9cPlryPqGLtUgv5OwLq161+ZKhKM=)
                          4: YUutX2q-6h-kjm6bkVZeIBea8dw.roa (hash: hkrM73+bjlug/F/AlsaAA4Q5+v3HYLxKdCmHlwN+CiM=)
                          5: uqftCLjp6O71-D48yyZ0X4s4hec.crl (hash: O/s3du6D8FnjuWYgrzQzfx/Qz+4Ur2CaWq8DfnDliV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:49:e6:03:02:ca:ba:b1:ec:25:0e:d7:b7:7b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baa7ed08b8e9e8eef5f83e3ccb26745f8b3885e7
        Validity
            Not Before: Apr 17 00:00:35 2026 GMT
            Not After : Apr 18 00:00:35 2026 GMT
        Subject: CN=2c63bda7735223c470595558a0901618d29107a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d8:c7:e7:47:79:2f:9c:8e:d2:71:bc:e1:71:
                    6b:d4:80:7e:3c:47:7c:06:90:87:dc:d2:db:24:86:
                    3c:a8:97:b7:bd:64:a7:32:14:9c:23:79:f6:e5:c3:
                    75:62:c2:ea:ca:08:64:1a:66:90:67:29:05:29:58:
                    85:86:b6:8e:7d:32:e5:af:73:b7:be:6e:a5:d7:6e:
                    cd:bf:e6:f7:6b:54:51:ab:a6:f9:03:93:60:6a:ed:
                    2a:2c:3f:e8:42:ec:d3:e3:0b:d7:55:93:fe:72:ad:
                    db:36:19:42:07:d5:f3:cf:5f:05:05:f0:2f:2d:27:
                    c2:51:2a:d6:ea:3a:b3:45:39:e5:7e:53:9a:61:c8:
                    5b:f4:b4:88:e4:34:da:c0:95:e9:6e:2b:60:2b:77:
                    d3:1d:c2:aa:80:0b:0f:04:61:64:41:22:1b:04:a9:
                    98:a2:f0:52:55:b2:7c:59:e5:06:6b:fb:24:d1:96:
                    f2:93:59:4e:62:6c:4b:5f:06:16:d0:b4:cb:80:89:
                    8a:91:dc:15:35:15:a2:4f:59:79:2e:56:65:43:3b:
                    a7:99:a0:32:18:f1:09:4a:d3:f0:64:ea:b3:af:5f:
                    22:f8:3d:8a:5a:00:64:3e:23:e8:92:c1:a8:05:74:
                    a8:d4:ce:24:5a:75:38:37:ce:72:84:a2:dd:6e:21:
                    a0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:63:BD:A7:73:52:23:C4:70:59:55:58:A0:90:16:18:D2:91:07:A4
            X509v3 Authority Key Identifier:
                keyid:BA:A7:ED:08:B8:E9:E8:EE:F5:F8:3E:3C:CB:26:74:5F:8B:38:85:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:95:ed:05:64:47:a5:ec:f0:c0:36:ea:53:09:0f:41:be:aa:
         29:a3:37:7d:a2:75:49:15:25:c2:26:fc:6f:b8:96:d6:73:a2:
         07:40:1c:ea:fa:33:e4:90:fc:12:e1:74:19:7e:ff:45:94:61:
         dd:b7:4c:6f:8c:f4:de:ca:08:fa:0d:46:07:18:d3:1f:a9:42:
         46:a2:fc:5d:89:27:c2:a8:bd:00:49:34:b0:10:d4:c6:d9:ed:
         d4:96:e6:2f:36:1e:5a:f8:ac:9c:15:db:8f:b5:91:d6:40:89:
         90:f3:a6:9e:e0:76:9f:38:4c:09:5a:5a:f0:e8:62:69:69:9c:
         f6:03:43:75:e7:5a:83:af:da:21:a5:82:ad:3f:a3:7e:0c:4e:
         e8:25:59:c2:4d:b8:9a:c7:75:53:b3:e6:a1:fe:63:1a:3b:05:
         b5:f6:bf:d9:07:80:37:01:be:af:2d:ab:5e:d5:48:97:04:b6:
         82:76:20:9d:bb:43:e3:41:59:4f:e8:f1:7c:80:0c:93:42:07:
         dc:11:68:38:0d:0e:61:73:46:b2:44:1f:c2:db:73:c6:d5:73:
         be:45:ca:20:f8:60:b2:d0:90:74:57:b1:c9:91:e3:12:d4:2d:
         06:ab:fe:3a:39:3f:87:33:e0:d4:75:d7:13:39:29:1e:a9:b5:
         2a:32:ce:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:18:59 2026 by rpki-client