Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft
File:                     uNJRxL_VJtoGLUzir1a25G6SURc.mft (raw, json)
Hash identifier:          vMihPIRhIdhuqRRsuAXff/k61QezEKOslZvLEHza0G4=
Subject key identifier:   BD:D4:A6:90:F8:35:F0:18:29:75:57:82:D8:14:4A:77:8D:1E:CF:54
Authority key identifier: B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17
Certificate issuer:       /CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
Certificate serial:       019D9AE3750FFECEE9BE3BFC49DD58C83D04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft
Manifest number:          18C5
Signing time:             Fri 17 Apr 2026 10:01:30 +0000
Manifest this update:     Fri 17 Apr 2026 10:01:30 +0000
Manifest next update:     Sat 18 Apr 2026 10:01:30 +0000
Files and hashes:         1: 9Q6nU6Ov__KOkTwmSpk1ZBP9x4s.roa (hash: zRA5CI+R45kbSe5Kp/RvwdAAuwY45TD/QhpgQ2cow9Q=)
                          2: 9zanIZ7MEeT1oHmM73KPnI3KUEM.roa (hash: Jme7qQGkxTK5eI1p9XNoTtTYwDVKr6hYwFmD3XiO9Sk=)
                          3: Et1_SdwbVg4dskwSsE8Bb6_r0BQ.roa (hash: fkDE9HZ2X/FoPpPBL/xBOgXNWoBnauSZriz8/UyefOQ=)
                          4: nJVTV_xC46i_jMWC0u5aQlLsYTI.roa (hash: 1PR1dDwuBSuvJYidaakEzx/AJjq3GTgS+XI3K+QB2/k=)
                          5: uNJRxL_VJtoGLUzir1a25G6SURc.crl (hash: yC+w8sCSUQcLFjGTNBNYaftUSsJtcCF3gCW91nI9kMg=)
                          6: xUOg3UnR5NzZnsoqQTCM2z8QcuA.roa (hash: 1+/9Z/D/KU/a6AJWSS+7jp2T1wnZtSaOlAbOLEGldwc=)
                          7: yN-B2V0Dka04y-vFp5uchumgtKY.roa (hash: HJDoxjycVkfIV6zIX1nmMl83dxZXyYJ/bjTRUSF4UQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 10:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e3:75:0f:fe:ce:e9:be:3b:fc:49:dd:58:c8:3d:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
        Validity
            Not Before: Apr 17 10:01:30 2026 GMT
            Not After : Apr 18 10:01:30 2026 GMT
        Subject: CN=bdd4a690f835f01829755782d8144a778d1ecf54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fc:89:ee:f2:14:9c:49:c4:a5:07:d0:72:d0:
                    e6:43:8c:12:03:0b:06:88:71:44:27:be:de:24:3d:
                    d3:bd:aa:2f:74:d3:26:1d:f5:39:b6:23:f3:06:8d:
                    61:4f:4e:7e:83:55:f7:b5:b8:8c:88:44:c9:61:be:
                    2f:3e:47:0e:8a:5f:a1:2c:20:b0:66:7f:79:aa:fa:
                    d1:c6:fb:55:ea:f7:a8:e7:7a:4d:f8:04:e8:d3:98:
                    e2:1d:39:da:a1:ea:07:99:91:95:c6:7c:78:0c:82:
                    3c:63:de:e8:27:d4:1d:1c:8d:d2:45:c5:16:8b:5b:
                    ce:6c:7e:a9:4b:10:05:40:2b:5d:27:19:0d:04:29:
                    9f:b1:72:b7:7b:43:1d:cf:70:09:89:95:b8:c7:79:
                    68:f8:e6:7e:2a:a0:8e:50:df:19:14:78:d4:1d:02:
                    73:40:a8:07:f6:3f:71:c5:bd:e1:b9:4a:a3:9a:c4:
                    72:5f:67:3e:96:21:8c:42:c4:c1:c5:3f:7b:a3:4e:
                    ce:3a:75:4c:91:be:3e:1a:9b:53:ef:11:f5:16:8f:
                    8e:45:85:20:f0:ba:b7:3a:4d:76:d2:40:8b:65:34:
                    e8:14:3c:ea:a3:46:92:be:a3:8b:63:a3:a3:6d:f8:
                    cb:3a:6b:34:f5:fe:23:1d:a9:98:b3:9a:11:d8:fb:
                    f6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D4:A6:90:F8:35:F0:18:29:75:57:82:D8:14:4A:77:8D:1E:CF:54
            X509v3 Authority Key Identifier:
                keyid:B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:8f:b6:22:a6:07:5f:40:6c:b4:95:2b:9c:9e:19:92:49:88:
         0b:f3:44:d9:3d:a1:5a:69:8e:cf:d0:a8:39:65:ef:44:a3:7e:
         f3:f5:e3:fb:a4:12:b5:42:e5:aa:42:4c:cf:83:a0:72:36:53:
         3c:f4:e9:ca:98:a0:55:2d:52:40:e7:61:85:ec:00:ea:17:05:
         ac:94:97:04:07:1e:df:61:5a:79:e8:ce:2b:16:78:16:15:77:
         c3:19:98:8f:fd:4f:5e:20:da:3c:35:ee:f6:c4:5f:8d:b5:7e:
         c8:07:73:ff:92:f9:5c:ba:7f:72:34:df:25:65:74:f7:cf:49:
         c8:a1:17:f6:36:56:a2:e8:6c:ad:f0:32:20:0b:d0:5d:1b:6c:
         6b:5b:3f:3b:31:9c:d2:22:43:55:5a:cd:96:d8:a3:bb:8f:40:
         22:ad:d1:a2:af:e7:61:8b:df:05:f9:d0:78:de:17:c8:a3:b9:
         85:f1:9c:73:00:d8:70:e8:c3:a4:ad:f6:9f:e1:1b:48:90:e9:
         d4:cb:0c:da:f5:db:57:a7:8c:58:de:f2:b8:6b:37:da:c2:54:
         a3:6d:36:ad:9b:b8:1d:58:45:10:10:30:a3:57:d8:2a:d8:2b:
         19:cb:86:9a:93:ea:04:25:2c:5c:8a:ac:05:7f:31:3e:64:4f:
         1e:fa:4d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:34:34 2026 by rpki-client