Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft
File:                     uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft (raw, json)
Hash identifier:          FKhJHGxlJprb8Ms4IF6NE/rqd8ryr/Hxm/U0dmhSgGI=
Subject key identifier:   55:B6:01:51:E6:04:A2:96:35:65:49:6F:20:44:8A:84:D2:0B:BC:E5
Authority key identifier: B8:F7:F2:4D:E3:A9:E5:2C:94:C6:CA:68:03:12:44:1D:D9:C0:88:04
Certificate issuer:       /CN=b8f7f24de3a9e52c94c6ca680312441dd9c08804
Certificate serial:       019DA41CAA75F820A062D46025975A5E2EBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft
Manifest number:          18C9
Signing time:             Sun 19 Apr 2026 05:00:35 +0000
Manifest this update:     Sun 19 Apr 2026 05:00:35 +0000
Manifest next update:     Mon 20 Apr 2026 05:00:35 +0000
Files and hashes:         1: m1puyXsqifJhZhUWL-_6YnwL1mI.roa (hash: fIIYEWkHjVVTWq75uZEvzmf8hXUsvrfxvNJcwhLVfwI=)
                          2: uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl (hash: pA71H1V7JcdTsqWJLZc6lXCriet2NWmDEXW6NuqDp58=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:1c:aa:75:f8:20:a0:62:d4:60:25:97:5a:5e:2e:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8f7f24de3a9e52c94c6ca680312441dd9c08804
        Validity
            Not Before: Apr 19 05:00:35 2026 GMT
            Not After : Apr 20 05:00:35 2026 GMT
        Subject: CN=55b60151e604a2963565496f20448a84d20bbce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8f:6a:3f:4e:45:a6:5d:21:78:f1:27:19:52:
                    ee:38:1c:28:ff:2f:d2:c7:eb:3f:d8:2f:2c:48:7d:
                    7d:1b:57:99:47:93:71:3f:66:af:18:b7:80:46:8b:
                    b0:20:f0:2a:01:16:d1:19:69:64:63:fd:ad:57:f6:
                    c0:97:3e:a5:6d:cd:a4:c4:cc:48:98:65:a3:84:58:
                    41:d2:c1:49:60:52:96:a2:c2:8b:79:f0:7f:e3:45:
                    00:94:58:e6:3f:da:75:47:40:2a:29:33:68:23:0f:
                    6c:11:22:40:b9:e3:82:59:87:ea:81:bf:62:bd:b2:
                    29:ef:67:cb:15:1a:2e:1e:bb:56:9e:9e:20:3d:fd:
                    64:fe:f0:4f:c5:a5:03:34:e4:ba:07:d0:50:a4:c2:
                    c8:2a:b1:c2:18:f6:b4:59:29:99:9b:d3:a1:75:f4:
                    db:be:97:7c:1b:1a:bb:06:6b:ed:8a:37:83:a0:50:
                    74:6a:50:4e:45:c1:34:59:8a:40:9d:62:3a:c4:45:
                    46:88:b3:42:3a:b1:d2:2d:26:e2:a0:28:74:12:cf:
                    93:3e:de:9e:9d:5c:e1:b0:22:1e:a2:91:c6:a4:e4:
                    5d:b9:c5:59:92:bd:1d:6a:ac:d0:79:48:ba:02:50:
                    98:60:ff:a8:7f:6f:13:9b:c7:30:8a:c1:a4:9a:6b:
                    79:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B6:01:51:E6:04:A2:96:35:65:49:6F:20:44:8A:84:D2:0B:BC:E5
            X509v3 Authority Key Identifier:
                keyid:B8:F7:F2:4D:E3:A9:E5:2C:94:C6:CA:68:03:12:44:1D:D9:C0:88:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:93:da:ad:ac:f3:57:e3:9f:b8:c8:56:59:85:ac:19:0f:06:
         ff:e8:35:c4:3d:94:9d:73:02:95:a0:8d:55:ca:42:aa:2b:6f:
         cb:64:d0:12:26:fd:b0:c9:2b:36:1d:03:7a:bf:04:c6:61:5d:
         2d:b3:22:a2:12:a7:58:e6:7a:a2:3f:f5:e4:e1:41:1a:5e:7e:
         69:3c:68:35:30:4c:93:82:a6:cd:23:ee:ee:0b:eb:83:57:d7:
         ea:91:00:9a:1d:d5:ad:03:df:2c:16:6d:44:6b:41:f8:58:26:
         f3:51:cf:24:22:c0:78:83:43:27:39:62:73:d3:4a:8e:6a:54:
         22:42:58:27:33:bd:4f:2e:a5:63:d8:a0:ff:d5:0b:12:30:dc:
         cc:63:29:b5:7d:68:20:c8:9f:6d:1d:ce:4b:6c:11:41:09:ad:
         cb:a6:30:7e:b8:9b:36:5e:07:7f:94:99:80:e4:e3:25:73:44:
         07:82:30:44:10:2a:37:e7:00:be:7e:9b:05:bf:4a:ec:02:11:
         3c:f0:06:8a:1c:eb:65:81:1f:fb:76:2e:bb:a7:e3:66:32:73:
         9b:a0:cd:dd:b1:d7:4f:3d:19:23:2b:7f:27:41:ec:cd:1a:d2:
         07:c0:1e:2c:cc:32:59:28:8a:8f:9a:16:87:ca:44:40:01:7f:
         dc:f7:99:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:07:02 2026 by rpki-client