Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/UwUgCbp4mNI2HKLufRMBJPnSUSU.mft
File:                     UwUgCbp4mNI2HKLufRMBJPnSUSU.mft (raw, json)
Hash identifier:          rZlzCDSmcIWSIFT3vCdceBaP1YPtsptAbtvNQ3Jwv2I=
Subject key identifier:   51:2C:36:75:5E:3F:97:9B:CE:75:36:62:A9:5A:D5:2F:04:41:F1:2A
Authority key identifier: 53:05:20:09:BA:78:98:D2:36:1C:A2:EE:7D:13:01:24:F9:D2:51:25
Certificate issuer:       /CN=53052009ba7898d2361ca2ee7d130124f9d25125
Certificate serial:       019D9AAC0DC2A40EDA0462E05B80C8C87666
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UwUgCbp4mNI2HKLufRMBJPnSUSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/UwUgCbp4mNI2HKLufRMBJPnSUSU.mft
Manifest number:          18C8
Signing time:             Fri 17 Apr 2026 09:01:00 +0000
Manifest this update:     Fri 17 Apr 2026 09:01:00 +0000
Manifest next update:     Sat 18 Apr 2026 09:01:00 +0000
Files and hashes:         1: SudVkAFlp8-hG_iKZQs9aJll_Hc.roa (hash: kla2lqRrJihGumafhiDJOUyE1ZtF4ClNy+SQx6UHQd0=)
                          2: UwUgCbp4mNI2HKLufRMBJPnSUSU.crl (hash: LgybHJZ4Kyb9Yr//OAYxso1lr5KLZzIRVbxfocUiV60=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/UwUgCbp4mNI2HKLufRMBJPnSUSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/UwUgCbp4mNI2HKLufRMBJPnSUSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UwUgCbp4mNI2HKLufRMBJPnSUSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ac:0d:c2:a4:0e:da:04:62:e0:5b:80:c8:c8:76:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53052009ba7898d2361ca2ee7d130124f9d25125
        Validity
            Not Before: Apr 17 09:01:00 2026 GMT
            Not After : Apr 18 09:01:00 2026 GMT
        Subject: CN=512c36755e3f979bce753662a95ad52f0441f12a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0d:50:4a:01:08:3e:5c:3a:b2:cb:7c:d2:7f:
                    94:a5:12:c2:8a:f1:bf:4d:ff:5a:db:69:54:cc:3d:
                    0e:a3:ec:1f:a2:97:da:10:12:cb:dd:8b:98:94:cc:
                    33:f1:b4:26:62:70:7a:8b:69:19:d8:9f:b8:b8:e8:
                    7a:b3:33:bf:d8:93:6e:e3:d3:69:02:a6:7e:d3:95:
                    ac:f4:dc:c3:2d:e1:17:a7:88:48:ea:fc:9c:7c:d4:
                    70:33:6f:e6:bb:1f:fe:12:15:fe:cc:cf:42:ea:9b:
                    e8:8c:57:a8:e1:5c:64:c6:73:da:2c:ea:90:d3:1e:
                    43:f9:09:ba:ca:6a:3c:0a:86:c4:0f:16:3e:f5:4e:
                    64:ba:9e:4d:98:fb:3a:03:f1:48:40:26:9f:d6:0d:
                    f5:a6:5b:c2:2a:85:08:f9:92:58:32:a4:4d:87:f5:
                    bb:78:04:a1:37:7c:08:0b:77:29:6d:79:6b:b5:9f:
                    a4:3c:60:b3:2a:27:9f:e9:a7:f4:9f:98:61:df:7e:
                    d5:a0:b6:f1:1d:6f:6f:9e:a4:7a:93:b5:fb:b5:7e:
                    a5:a7:48:c1:5e:b6:41:29:9b:6a:ec:1d:b7:3a:05:
                    6f:3a:91:46:7a:d7:4e:a4:ad:6b:db:29:6c:cc:d2:
                    dc:31:9d:e1:88:2f:25:73:9c:af:f7:b7:8b:98:5b:
                    f8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2C:36:75:5E:3F:97:9B:CE:75:36:62:A9:5A:D5:2F:04:41:F1:2A
            X509v3 Authority Key Identifier:
                keyid:53:05:20:09:BA:78:98:D2:36:1C:A2:EE:7D:13:01:24:F9:D2:51:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UwUgCbp4mNI2HKLufRMBJPnSUSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/UwUgCbp4mNI2HKLufRMBJPnSUSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/UwUgCbp4mNI2HKLufRMBJPnSUSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:f4:d7:6c:5f:54:d2:fe:d3:f4:17:71:c9:d9:f4:29:61:35:
         e2:ee:e7:12:4f:04:99:9c:4e:d6:72:55:d3:06:7e:ff:d7:d4:
         bb:95:8e:c5:08:41:f7:32:c6:f6:c9:51:07:73:b6:63:df:30:
         45:70:3d:00:39:bc:75:24:1c:0e:3f:23:e1:ba:1e:06:e2:f1:
         46:87:4d:17:87:f9:43:37:c6:63:62:a4:46:a5:a3:9b:e7:59:
         46:03:d9:d7:c9:e0:90:97:a5:e6:56:25:b0:10:73:a0:83:f3:
         96:f6:f2:ca:24:ab:36:5d:60:34:74:3f:ff:9a:f7:b4:be:44:
         84:71:a4:f8:bd:da:22:6c:2c:a3:70:33:93:d2:b3:71:f3:4c:
         2a:23:54:db:5d:81:3c:ba:c0:b3:26:3d:ac:e0:72:58:9a:a9:
         04:a6:d9:96:f3:df:23:ec:ad:21:a0:25:14:54:3b:22:8f:e4:
         97:92:6e:f2:6c:a3:83:88:22:6f:be:15:da:66:ac:28:8d:2b:
         3b:bf:3e:9e:04:bd:9f:36:f7:0d:1c:d5:ae:7c:da:f9:6e:96:
         8b:df:ca:dd:29:14:bb:72:17:b6:16:81:db:61:84:8b:0c:87:
         85:51:4b:c9:f3:2c:75:0d:df:67:27:3c:f6:e9:db:40:f8:d8:
         eb:fc:66:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:51:48 2026 by rpki-client