Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft
File:                     uNJRxL_VJtoGLUzir1a25G6SURc.mft (raw, json)
Hash identifier:          9lGhZpiZ1tDdqf1f+HRqf1ubbVfYSg+B6Xcu4NaS0Yw=
Subject key identifier:   4B:2D:48:AE:50:21:9A:FC:14:CD:6A:9C:76:5C:4A:E9:CF:7A:D8:23
Authority key identifier: B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17
Certificate issuer:       /CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
Certificate serial:       019D9CD1FF0E1576F36D0ABBCCE13E4A4BB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft
Manifest number:          18C6
Signing time:             Fri 17 Apr 2026 19:01:41 +0000
Manifest this update:     Fri 17 Apr 2026 19:01:41 +0000
Manifest next update:     Sat 18 Apr 2026 19:01:41 +0000
Files and hashes:         1: 9Q6nU6Ov__KOkTwmSpk1ZBP9x4s.roa (hash: zRA5CI+R45kbSe5Kp/RvwdAAuwY45TD/QhpgQ2cow9Q=)
                          2: 9zanIZ7MEeT1oHmM73KPnI3KUEM.roa (hash: Jme7qQGkxTK5eI1p9XNoTtTYwDVKr6hYwFmD3XiO9Sk=)
                          3: Et1_SdwbVg4dskwSsE8Bb6_r0BQ.roa (hash: fkDE9HZ2X/FoPpPBL/xBOgXNWoBnauSZriz8/UyefOQ=)
                          4: nJVTV_xC46i_jMWC0u5aQlLsYTI.roa (hash: 1PR1dDwuBSuvJYidaakEzx/AJjq3GTgS+XI3K+QB2/k=)
                          5: uNJRxL_VJtoGLUzir1a25G6SURc.crl (hash: LZMOB/bFTOE9XTLsFd8ck16ZQG/8t3TLYB9G71oHmkY=)
                          6: xUOg3UnR5NzZnsoqQTCM2z8QcuA.roa (hash: 1+/9Z/D/KU/a6AJWSS+7jp2T1wnZtSaOlAbOLEGldwc=)
                          7: yN-B2V0Dka04y-vFp5uchumgtKY.roa (hash: HJDoxjycVkfIV6zIX1nmMl83dxZXyYJ/bjTRUSF4UQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:d1:ff:0e:15:76:f3:6d:0a:bb:cc:e1:3e:4a:4b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
        Validity
            Not Before: Apr 17 19:01:41 2026 GMT
            Not After : Apr 18 19:01:41 2026 GMT
        Subject: CN=4b2d48ae50219afc14cd6a9c765c4ae9cf7ad823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bd:30:7e:1b:0d:35:86:36:fe:74:3a:20:10:
                    54:18:92:b5:e4:01:f3:78:28:88:39:73:f5:6c:cd:
                    89:56:23:83:5b:c0:62:6e:b4:fd:8b:96:c1:41:86:
                    4d:ac:86:e5:24:c0:ae:3f:bc:28:de:cb:9a:a0:26:
                    f6:d1:3f:ab:cd:8a:a3:d4:64:78:b8:f6:ed:32:8e:
                    1c:64:e8:64:33:97:fd:39:2d:e0:82:e7:0f:76:98:
                    c1:2a:ef:61:5f:49:92:33:7a:b4:58:29:5f:20:a5:
                    a9:77:f1:18:85:cb:05:c8:b6:e4:2e:da:47:c9:88:
                    c5:21:fc:01:18:f1:13:49:a6:fd:1a:4b:e6:9e:99:
                    68:a5:e4:70:73:08:b3:dc:cd:20:64:5b:0d:f3:8c:
                    a4:e2:5d:12:1a:21:a2:e0:b1:27:9e:fb:f6:3e:77:
                    06:f8:d1:9d:a5:c8:59:c5:69:89:c0:d0:cf:8f:5b:
                    72:33:7b:3f:c3:53:4c:c6:0e:32:9d:17:8e:e5:36:
                    49:02:6f:5b:99:3d:52:48:cf:43:db:8a:43:15:f7:
                    d0:35:95:ff:71:4d:ab:dd:50:5b:98:7c:b0:7c:f1:
                    57:6a:3f:31:1b:24:5e:26:d4:16:36:ea:dc:59:a6:
                    a1:85:a9:e7:ff:5e:b3:20:9c:24:5f:ac:20:5b:21:
                    cd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:2D:48:AE:50:21:9A:FC:14:CD:6A:9C:76:5C:4A:E9:CF:7A:D8:23
            X509v3 Authority Key Identifier:
                keyid:B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:6a:06:af:35:7f:8e:b0:93:4f:09:96:c3:23:19:d1:8c:32:
         cb:b7:a0:e9:e7:64:9b:0d:e5:15:45:7a:9c:db:b5:60:99:b2:
         63:6d:5e:fd:a1:a3:e5:1f:8a:cc:a2:bc:88:cc:d4:03:48:89:
         f5:c2:57:b6:b2:bc:a8:b2:be:0a:3e:c8:1f:66:70:35:df:7b:
         b6:85:73:94:69:50:22:5c:aa:69:71:70:ae:92:50:60:28:07:
         9c:42:2d:16:14:41:47:27:c0:aa:44:73:b3:a1:42:be:57:07:
         94:87:da:e8:59:fe:f4:0c:9e:8a:5b:dc:e8:0b:ac:3c:95:2c:
         f2:cf:88:bb:61:97:47:ae:cf:6d:12:cc:7c:ad:b3:f1:dd:b1:
         87:7d:3f:0a:4c:ad:ff:bf:ca:a0:8f:9b:4c:68:68:32:3d:82:
         e2:6c:5b:6d:be:c2:b2:db:21:8e:ee:d1:3b:c0:79:c8:8d:10:
         f0:d6:3a:8e:17:bf:1f:60:11:1f:c1:8d:fa:ed:60:13:e5:55:
         5b:58:6f:fd:24:3c:e6:7a:4e:b2:19:c4:f6:8c:f2:93:89:6e:
         35:93:04:23:16:0c:b9:b7:22:aa:40:0f:b6:e4:62:92:d5:d6:
         0e:d5:79:d1:ed:c9:ce:17:8b:b8:a3:82:cd:5e:a1:32:44:54:
         41:18:28:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:02:02 2026 by rpki-client