Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
File:                     RbUATsPPXBp1UYXW9AaDxkbMlOw.mft (raw, json)
Hash identifier:          JPZIVS3zTahmpOZ+isKZUs24hqKUb9cVzuQAX6kO918=
Subject key identifier:   ED:74:C9:E5:3B:FA:DC:FF:95:05:46:BD:C9:43:55:1F:D9:96:8E:9D
Authority key identifier: 45:B5:00:4E:C3:CF:5C:1A:75:51:85:D6:F4:06:83:C6:46:CC:94:EC
Certificate issuer:       /CN=45b5004ec3cf5c1a755185d6f40683c646cc94ec
Certificate serial:       019D9B50799068954D5206D24D96EB81C69F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
Manifest number:          0CFF
Signing time:             Fri 17 Apr 2026 12:00:35 +0000
Manifest this update:     Fri 17 Apr 2026 12:00:35 +0000
Manifest next update:     Sat 18 Apr 2026 12:00:35 +0000
Files and hashes:         1: 8PoZgyeee-3NyutlenTuH9T7Nno.roa (hash: 9N/nhd5C7s33+6YWS7dQM0ugP84B2/FwTC6YAlckydw=)
                          2: RbUATsPPXBp1UYXW9AaDxkbMlOw.crl (hash: 2+FZfCajtghAJPUZGieQe90Rcjg5hRCPcInyfuIwsUA=)
                          3: zvHw3KmhzvEgU4W6InBqUBX0yjg.roa (hash: CGIpxT3J1vn2/tgM/8XQPPrlvlWSOI9UHhs/JfCuu68=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 12:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:50:79:90:68:95:4d:52:06:d2:4d:96:eb:81:c6:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45b5004ec3cf5c1a755185d6f40683c646cc94ec
        Validity
            Not Before: Apr 17 12:00:35 2026 GMT
            Not After : Apr 18 12:00:35 2026 GMT
        Subject: CN=ed74c9e53bfadcff950546bdc943551fd9968e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a7:37:13:d8:94:74:5b:ee:99:a5:dd:f9:b3:
                    f1:c8:71:98:48:6f:ee:b2:ed:2a:bc:3e:cf:9d:5c:
                    79:4e:e8:76:b5:2b:e5:3e:64:01:68:fe:9d:7d:0f:
                    dd:12:c6:fa:ce:fd:d0:9e:52:85:3e:57:34:1f:65:
                    33:27:ad:2f:00:36:f4:ad:8b:25:1c:4b:e0:ac:ee:
                    f4:33:91:b4:af:e0:d1:f4:04:08:c2:73:e0:5e:e0:
                    e1:f7:10:8f:cf:3a:de:44:7e:97:be:b1:7b:d3:80:
                    cf:63:c6:3d:e3:36:04:da:ab:b3:8b:2d:36:84:64:
                    4a:d6:84:9f:e1:d2:00:6a:65:63:bd:4b:b4:07:8a:
                    e7:a4:d8:66:23:3b:b5:c0:2b:f3:c5:2b:99:25:f3:
                    f1:93:56:e0:bd:ca:d4:85:8e:7a:22:d6:d0:03:70:
                    9b:a3:a0:e1:1d:ec:86:8d:30:f7:53:8d:92:d1:f0:
                    ee:1b:1b:fe:d6:38:41:56:97:17:d8:ab:3d:36:94:
                    aa:66:1b:69:3e:7a:36:6e:d0:cb:d7:39:c8:3b:98:
                    62:4d:44:57:71:18:1a:3b:02:14:97:5d:08:7c:fa:
                    84:9d:cf:eb:22:9f:51:e4:49:be:6a:30:9b:54:0c:
                    d7:8d:f0:54:f3:ab:c9:88:00:76:91:da:74:1f:94:
                    e8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:74:C9:E5:3B:FA:DC:FF:95:05:46:BD:C9:43:55:1F:D9:96:8E:9D
            X509v3 Authority Key Identifier:
                keyid:45:B5:00:4E:C3:CF:5C:1A:75:51:85:D6:F4:06:83:C6:46:CC:94:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:2b:0d:07:5c:24:fe:e7:e4:44:0f:23:c6:33:aa:ad:15:79:
         d8:4c:51:3d:e5:af:01:35:3f:e7:4d:ea:a9:33:e7:c1:66:f1:
         d2:6a:75:e6:ab:c8:e0:e5:c9:04:3a:d5:64:fe:6f:88:75:4d:
         bf:3f:72:42:b8:a0:e4:76:fe:49:be:2d:a8:10:ed:d0:52:df:
         44:76:8b:75:a8:6a:4c:40:2f:5f:8f:ed:c2:1f:cf:73:05:cf:
         8f:38:7a:b6:25:8b:17:6c:83:8a:97:47:1d:61:89:c4:31:6c:
         ff:43:02:99:2c:16:db:62:bf:ee:1b:25:e0:29:a6:01:fd:43:
         56:50:5e:ac:06:e9:47:43:58:d7:07:ef:27:11:30:eb:8c:1b:
         60:09:d5:89:49:dc:6d:ba:06:c4:bd:54:0e:9d:ff:46:69:bb:
         77:50:1f:32:f3:97:82:ed:34:43:c8:74:b7:53:44:60:4e:ae:
         30:27:a2:21:f0:7b:25:16:c9:53:e3:da:62:cd:40:92:5e:ee:
         87:d8:fe:54:c9:34:c0:2b:b3:dd:2b:a5:1f:d9:c7:2a:cb:45:
         8e:ec:c1:96:fa:e5:b6:04:d4:5b:b0:8f:20:f9:3c:8d:f1:2e:
         8f:47:1f:2e:d9:0f:62:33:9b:1c:4a:5a:62:99:8c:26:4c:a6:
         73:ff:aa:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:28:56 2026 by rpki-client