Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.mft
File:                     ueJzyLoLCvsgXQCzFw5puBZ0M5c.mft (raw, json)
Hash identifier:          CBmXyph0AeRe+tWpKSBcI1KWax3Tmkcf+EU6vWwb2ww=
Subject key identifier:   11:C1:C5:9E:33:A0:3F:13:1E:9F:D8:42:E4:F1:5A:47:C4:23:62:46
Authority key identifier: B9:E2:73:C8:BA:0B:0A:FB:20:5D:00:B3:17:0E:69:B8:16:74:33:97
Certificate issuer:       /CN=b9e273c8ba0b0afb205d00b3170e69b816743397
Certificate serial:       019D98BD287AEBFE55C4C9CF98A961350E2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ueJzyLoLCvsgXQCzFw5puBZ0M5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.mft
Manifest number:          15AE
Signing time:             Fri 17 Apr 2026 00:00:26 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:26 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:26 +0000
Files and hashes:         1: rFK8GjN2rJ85aojBVP2_PQQhy8o.roa (hash: gNBa3QSYdll6/GhpimLS6/sCTODaV0osUFe+WXDUhNU=)
                          2: ueJzyLoLCvsgXQCzFw5puBZ0M5c.crl (hash: cJVwIpG1qMIdbOko1yrA1jT9twYv8Gkl+w9AuJ7ruuQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ueJzyLoLCvsgXQCzFw5puBZ0M5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:28:7a:eb:fe:55:c4:c9:cf:98:a9:61:35:0e:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9e273c8ba0b0afb205d00b3170e69b816743397
        Validity
            Not Before: Apr 17 00:00:26 2026 GMT
            Not After : Apr 18 00:00:26 2026 GMT
        Subject: CN=11c1c59e33a03f131e9fd842e4f15a47c4236246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b5:78:91:83:0f:07:30:49:68:b6:89:87:4f:
                    dd:7a:06:29:9b:46:bd:3d:3b:d1:38:ec:59:bb:37:
                    b0:84:8c:5d:56:90:26:27:e3:68:e5:f2:af:2c:61:
                    cd:83:8b:a8:94:d1:ea:04:77:b5:82:1b:25:9e:26:
                    36:16:26:81:eb:a6:04:c3:ab:f0:fe:41:d8:6b:be:
                    d8:79:d7:13:4b:15:48:99:52:ac:ad:4a:96:f9:ef:
                    cf:98:24:ce:58:22:21:72:1f:8b:18:99:85:ec:26:
                    28:57:57:10:a0:4d:43:fe:7d:83:f3:be:31:15:39:
                    8b:47:c0:94:b6:39:40:70:5b:5a:8e:37:64:92:d3:
                    ec:9f:ae:09:86:b0:ef:ad:51:43:10:ed:ff:a0:19:
                    02:1a:71:60:03:bc:bc:e6:ee:19:b1:c7:db:0a:0e:
                    83:ae:b4:65:db:46:74:5a:c3:74:28:0e:28:75:c8:
                    52:9f:76:51:78:1a:f7:14:a9:e4:09:f0:1e:ad:0d:
                    de:84:01:34:66:02:16:1c:15:ea:82:3d:f8:85:c6:
                    fd:09:a7:7b:82:7f:e6:a5:57:15:ca:c4:39:0a:bf:
                    0a:83:e7:c7:97:d2:d4:31:c7:9f:0b:27:31:20:5f:
                    6a:0a:b4:20:56:c7:05:61:d7:8c:a3:76:7d:15:12:
                    a0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C1:C5:9E:33:A0:3F:13:1E:9F:D8:42:E4:F1:5A:47:C4:23:62:46
            X509v3 Authority Key Identifier:
                keyid:B9:E2:73:C8:BA:0B:0A:FB:20:5D:00:B3:17:0E:69:B8:16:74:33:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueJzyLoLCvsgXQCzFw5puBZ0M5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7781fe-1304-43f8-b77c-3d96bd3e7853/1/ueJzyLoLCvsgXQCzFw5puBZ0M5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:bf:92:7f:5b:a4:ef:26:51:a2:95:35:1c:b1:99:0c:84:fe:
         76:6f:04:14:d3:8c:43:d9:17:07:5a:a0:f4:6e:a5:15:60:0f:
         da:fa:67:25:9c:e4:a8:fa:47:f9:f2:30:ed:4c:62:56:ce:c3:
         ab:9d:bb:3e:13:dc:9d:6f:d0:ec:9c:da:05:a9:bb:88:90:8d:
         5b:ed:9f:c8:46:30:df:0b:c6:17:62:1f:9e:47:06:d8:36:68:
         11:57:fd:9d:ce:0b:68:ee:a6:99:9f:b7:dc:0a:c4:d7:2f:96:
         fc:72:07:ea:8e:f6:c4:90:47:12:e3:48:7b:ac:8e:73:7f:0d:
         97:c5:da:44:09:56:4a:ee:15:21:a6:75:1d:26:98:8f:6b:a4:
         9c:06:c6:bd:ae:37:f7:39:a7:ff:16:1b:1e:c3:3e:bf:68:c4:
         4e:37:7b:a5:f4:9c:d4:a1:06:ed:91:45:67:f1:6c:0f:3a:6b:
         27:cd:dd:d7:78:c2:7d:d3:91:b1:1a:e0:00:a7:df:0c:c4:e2:
         64:bf:bb:3a:71:21:1c:b2:b7:f5:80:09:34:9e:6f:fd:63:d9:
         ed:0a:17:c8:eb:c8:88:73:33:c1:78:d1:78:aa:0c:ae:da:28:
         40:ac:91:ef:0b:45:de:bb:cf:43:af:4c:97:e2:0a:78:74:af:
         f6:f8:c2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:54:58 2026 by rpki-client