Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft
File:                     UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft (raw, json)
Hash identifier:          XdaDdmuZs8OUYAiYznM35Ft2Ec8bRDzd0stWVaGhAYA=
Subject key identifier:   6B:E3:D1:6D:2E:46:AB:9A:C5:A8:E9:73:16:F2:50:E8:1B:56:8E:83
Authority key identifier: 51:40:B5:CB:59:86:08:41:26:F6:8D:60:32:31:6D:3B:1B:57:69:6E
Certificate issuer:       /CN=5140b5cb5986084126f68d6032316d3b1b57696e
Certificate serial:       019DA3E6D74A9FFC2F0E654505AB99B18F20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UUC1y1mGCEEm9o1gMjFtOxtXaW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft
Manifest number:          18CD
Signing time:             Sun 19 Apr 2026 04:01:47 +0000
Manifest this update:     Sun 19 Apr 2026 04:01:47 +0000
Manifest next update:     Mon 20 Apr 2026 04:01:47 +0000
Files and hashes:         1: BU-lqOTzhTE1FvYIzC5QIIuVdd4.roa (hash: URaXV7GxrC/TlLgNF/7cDgKoz0MGZy0H3auR+9Eshag=)
                          2: UUC1y1mGCEEm9o1gMjFtOxtXaW4.crl (hash: GOpjymVnBTLJrzeSJsEMU4jzsPmPPjpjDxvSkSY6mA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UUC1y1mGCEEm9o1gMjFtOxtXaW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:e6:d7:4a:9f:fc:2f:0e:65:45:05:ab:99:b1:8f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5140b5cb5986084126f68d6032316d3b1b57696e
        Validity
            Not Before: Apr 19 04:01:47 2026 GMT
            Not After : Apr 20 04:01:47 2026 GMT
        Subject: CN=6be3d16d2e46ab9ac5a8e97316f250e81b568e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:62:42:22:ef:ce:fe:cd:ac:fb:ea:62:45:e6:
                    91:5c:66:d0:e3:0f:4e:38:e9:4e:39:1d:1a:48:8f:
                    8c:9b:05:02:4f:d9:57:46:97:33:e1:48:a9:06:be:
                    06:0c:53:33:29:1a:9a:60:b9:5f:5a:2d:45:d9:0a:
                    02:4d:71:80:1f:1b:09:e1:93:d0:69:86:fe:c5:07:
                    42:cd:b2:b8:59:3c:38:bf:82:df:f8:b8:3c:c7:f3:
                    d3:13:dd:59:cc:cb:bd:d5:e8:46:72:1a:1c:d6:2d:
                    22:65:fb:7f:55:06:91:fa:98:8e:a0:26:fa:73:e5:
                    73:18:3e:64:fa:cd:75:98:a5:9a:83:d6:9d:d4:b7:
                    c5:40:a5:66:b3:66:12:e3:f9:93:38:3f:1b:17:3b:
                    a1:b3:89:8a:8d:f9:9c:a7:19:cf:5a:c4:47:da:94:
                    70:0a:80:02:1a:72:e6:f2:d6:67:91:17:09:db:36:
                    46:46:47:e2:04:1d:14:8b:49:df:dc:89:73:8d:b5:
                    f4:c8:a7:e4:a2:eb:20:9c:65:06:95:54:6a:04:e1:
                    ff:2c:98:c4:1b:8a:8e:a7:bb:21:66:46:a9:34:12:
                    a5:bc:db:8e:6f:3e:bf:80:54:84:89:f1:5d:c8:6d:
                    13:6b:c7:9d:5d:de:e8:73:ae:5d:c2:84:83:32:4c:
                    2a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E3:D1:6D:2E:46:AB:9A:C5:A8:E9:73:16:F2:50:E8:1B:56:8E:83
            X509v3 Authority Key Identifier:
                keyid:51:40:B5:CB:59:86:08:41:26:F6:8D:60:32:31:6D:3B:1B:57:69:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUC1y1mGCEEm9o1gMjFtOxtXaW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:61:b9:7f:0c:26:98:72:af:9d:e5:a3:56:cd:53:63:3c:a3:
         ba:c2:d1:4a:0a:e3:b2:93:67:c4:7b:2d:c7:d1:54:db:60:58:
         fb:2c:33:c1:5e:2f:da:f6:ba:70:4e:01:07:55:3e:b4:82:3f:
         9e:45:64:8c:8c:4f:cf:94:fb:9f:d0:7b:d4:ef:2c:29:db:cd:
         fb:b7:b9:54:68:14:ba:0e:72:f7:ba:7a:e5:7f:b9:a0:0e:aa:
         4d:3f:c0:72:6b:b2:45:20:55:40:32:d8:28:b9:76:4d:d6:92:
         37:fa:09:94:21:5b:42:b2:bc:80:10:c4:17:cb:14:d2:e3:3b:
         be:49:bc:6a:12:38:0f:3e:dc:9c:14:d4:11:f6:e2:96:f4:6e:
         78:9a:59:d1:b7:5f:34:4a:ee:e4:7f:45:fb:de:16:95:e7:27:
         89:f1:a4:03:2b:0b:94:7c:b8:bf:3b:eb:6c:cd:c5:68:48:64:
         eb:dc:df:8b:a5:c8:6c:84:13:bf:36:a3:0e:54:3d:36:57:0a:
         88:ab:70:7c:e9:6f:d4:cb:b2:49:45:e3:d9:cd:5b:a8:46:fc:
         7c:1d:a7:89:ae:71:a9:6a:9c:f6:21:8c:3b:75:55:e6:91:20:
         51:0c:90:c1:76:49:f1:55:03:74:d3:0d:d5:df:d3:3c:c5:20:
         ee:6c:b6:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2j5tdKn/wvDmVFBauZsY8gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNDBiNWNiNTk4NjA4NDEyNmY2OGQ2MDMyMzE2ZDNiMWI1
NzY5NmUwHhcNMjYwNDE5MDQwMTQ3WhcNMjYwNDIwMDQwMTQ3WjAzMTEwLwYDVQQD
Eyg2YmUzZDE2ZDJlNDZhYjlhYzVhOGU5NzMxNmYyNTBlODFiNTY4ZTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mJCIu/O/s2s++piReaRXGbQ4w9O
OOlOOR0aSI+MmwUCT9lXRpcz4UipBr4GDFMzKRqaYLlfWi1F2QoCTXGAHxsJ4ZPQ
aYb+xQdCzbK4WTw4v4Lf+Lg8x/PTE91ZzMu91ehGchoc1i0iZft/VQaR+piOoCb6
c+VzGD5k+s11mKWag9ad1LfFQKVms2YS4/mTOD8bFzuhs4mKjfmcpxnPWsRH2pRw
CoACGnLm8tZnkRcJ2zZGRkfiBB0Ui0nf3IlzjbX0yKfkousgnGUGlVRqBOH/LJjE
G4qOp7shZkapNBKlvNuObz6/gFSEifFdyG0Ta8edXd7oc65dwoSDMkwqbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGvj0W0uRquaxajpcxbyUOgbVo6DMB8GA1UdIwQY
MBaAFFFAtctZhghBJvaNYDIxbTsbV2luMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVVDMXkxbUdDRUVtOW8xZ01qRnRPeHRYYVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9kMTlmMmQtOTY1OS00OGIxLWIxZTgt
ZGUxM2E1NTJkZjYzLzEvVVVDMXkxbUdDRUVtOW8xZ01qRnRPeHRYYVc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9kMTlmMmQtOTY1OS00OGIxLWIxZTgtZGUxM2E1NTJkZjYz
LzEvVVVDMXkxbUdDRUVtOW8xZ01qRnRPeHRYYVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGG5fwwm
mHKvneWjVs1TYzyjusLRSgrjspNnxHstx9FU22BY+ywzwV4v2va6cE4BB1U+tII/
nkVkjIxPz5T7n9B71O8sKdvN+7e5VGgUug5y97p65X+5oA6qTT/AcmuyRSBVQDLY
KLl2TdaSN/oJlCFbQrK8gBDEF8sU0uM7vkm8ahI4Dz7cnBTUEfbilvRueJpZ0bdf
NEru5H9F+94WlecnifGkAysLlHy4vzvrbM3FaEhk69zfi6XIbIQTvzajDlQ9NlcK
iKtwfOlv1MuySUXj2c1bqEb8fB2nia5xqWqc9iGMO3VV5pEgUQyQwXZJ8VUDdNMN
1d/TPMUg7my2hw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:07:02 2026 by rpki-client