Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
File:                     UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft (raw, json)
Hash identifier:          4rLZGYh8gaMJCGipAKdFeascf3//boIe5FuwGekKVMQ=
Subject key identifier:   4F:E5:50:CA:D8:23:1E:FC:07:EC:E0:2C:AD:ED:30:44:A5:B2:DA:8A
Authority key identifier: 50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
Certificate issuer:       /CN=509df728d1b46634054972d2945fda58073b5762
Certificate serial:       019D9774861B3A03DE30E659C0D83E42DE1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
Manifest number:          18C6
Signing time:             Thu 16 Apr 2026 18:01:29 +0000
Manifest this update:     Thu 16 Apr 2026 18:01:29 +0000
Manifest next update:     Fri 17 Apr 2026 18:01:29 +0000
Files and hashes:         1: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl (hash: Bp1w+VyMLib/ufiSI2mjhk5SwHg9Kib8uDzvBhlBo7U=)
                          2: YiTZyM0LJDlibzSScA19n-r_1NA.roa (hash: xUwCbyrQAmjQ9KEmQXtJqtnkqDlVNHnF+1vzDoqaWUE=)
                          3: iLi7f9ZUhRFIePAx_CbpyKFYVLY.roa (hash: +jK5YhwAWuiSD7jiuyksRnOSQ26Q7wRKEX5irQTiJO4=)
                          4: jaFu9pBfM8muxEa6Z1M7bqPV5TY.roa (hash: D7hQEIQMJfA1ZdopDczTPfE2hg2zaIc0IFSTi8hUD0k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 18:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:74:86:1b:3a:03:de:30:e6:59:c0:d8:3e:42:de:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509df728d1b46634054972d2945fda58073b5762
        Validity
            Not Before: Apr 16 18:01:29 2026 GMT
            Not After : Apr 17 18:01:29 2026 GMT
        Subject: CN=4fe550cad8231efc07ece02caded3044a5b2da8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:41:00:46:4f:ba:76:45:b8:ff:d2:3d:9e:c3:
                    1d:6e:a2:46:1e:4a:66:ba:fd:72:95:27:fa:8d:15:
                    af:c2:c4:90:e5:27:54:1d:05:99:64:d8:a7:28:b8:
                    99:7e:af:ee:91:49:54:08:c5:0e:d2:38:17:a5:b3:
                    de:7b:03:e9:81:d3:b5:ed:69:29:27:41:1f:29:c9:
                    ab:a0:47:95:e7:5e:86:b1:46:d9:bf:73:e7:22:07:
                    28:48:18:9b:9f:08:e2:51:45:22:33:3a:ab:e1:12:
                    80:f0:61:be:58:3b:c4:40:cb:e9:7c:36:f9:e8:24:
                    3c:69:22:75:43:95:0b:14:0b:1e:57:3d:7e:78:60:
                    8e:6d:95:b9:06:3d:6b:bd:3d:ca:d2:18:a9:a3:96:
                    12:8d:7b:87:1d:4a:63:79:ba:cf:dd:4f:2b:75:d1:
                    d3:90:41:ba:59:20:74:42:ae:0e:32:d9:98:c1:64:
                    ee:ac:c2:20:da:f8:bc:dd:47:08:b0:41:0b:70:f7:
                    e4:91:6c:ab:41:30:ce:3d:81:93:35:0c:0b:59:61:
                    82:c6:f0:31:ef:51:84:c5:71:4c:ef:9b:55:89:fd:
                    74:76:c0:18:21:4c:ce:ab:5f:e4:1f:0e:a2:45:3c:
                    05:a8:7d:51:22:bf:82:7c:c8:7a:5d:20:25:c4:e4:
                    66:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E5:50:CA:D8:23:1E:FC:07:EC:E0:2C:AD:ED:30:44:A5:B2:DA:8A
            X509v3 Authority Key Identifier:
                keyid:50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:8b:71:62:5e:7d:22:ec:1a:dd:ea:9e:65:5e:4f:8a:60:d1:
         20:83:89:9b:a8:b9:24:c0:ad:0c:76:8f:e2:42:8a:bb:13:3c:
         ce:7b:a6:75:b5:bb:9c:24:63:7c:e5:e6:77:72:f5:eb:4e:16:
         72:74:78:5e:2a:8b:0a:8e:47:48:95:5d:17:7d:a2:fb:5b:83:
         73:d1:c0:16:7e:0f:38:17:bf:2c:73:4d:3d:3c:03:a5:2a:bd:
         e6:4b:ee:6f:f0:80:8a:6e:a0:dd:8b:48:dd:5e:d4:35:47:6d:
         4b:0d:7c:47:aa:4f:ee:64:54:bd:57:3e:2b:b3:73:47:2b:d9:
         7e:71:c5:b5:ca:ad:60:3d:db:bd:89:71:64:9c:f7:53:31:bf:
         83:14:e8:91:ad:07:eb:bc:86:8c:ca:53:65:65:a2:b8:a8:e0:
         da:dd:6c:57:18:cb:fe:66:14:b8:da:7a:d2:fe:c8:be:09:95:
         ca:fe:d1:83:44:42:50:75:36:c4:d1:94:cb:f7:0b:77:47:07:
         8c:ed:35:55:0d:27:31:9b:5c:50:31:8e:49:60:e7:42:da:5c:
         8a:ed:89:9b:77:43:97:f4:4e:f2:f7:c0:2c:9b:6a:88:c3:8c:
         0c:ca:01:45:40:1f:ed:28:0e:bb:40:43:68:96:42:e3:49:a6:
         9a:9e:b7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:44 2026 by rpki-client