Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
File:                     uSEnfz55VKSvVSCpkEL7CJOvgE0.mft (raw, json)
Hash identifier:          60HWBDq09+Q+S2gVs1f2WjeSiBWLdadsp2zRzHn+0JQ=
Subject key identifier:   1E:70:2D:39:A7:1F:6A:CD:68:FA:CE:7F:02:59:B3:12:61:56:71:E3
Authority key identifier: B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D
Certificate issuer:       /CN=b921277f3e7954a4af5520a99042fb0893af804d
Certificate serial:       019D98F41D5DFA1971319F36F1E62989BD20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 01:00:28 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:28 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:28 +0000
Files and hashes:         1: 7XorW7ITUOWgP4pU38fX3RKpcv0.roa (hash: dhKstKlCZm4b7W0PXvIWJClLT8IvcIHMNCKR+Y++DYI=)
                          2: hTUAMk4ivW-zcf6qV0iH6m50Tko.roa (hash: VBCrCjN466HYq/3fbWnNr2nU6AFrUJpSz4d+MsDsH6k=)
                          3: po2AjEIA0cEB2DRz3ItNN0tLtJA.roa (hash: emEIyu5B7Cay8ES1oJZR9gyFPVy8pKl4tqO8qQcgwDQ=)
                          4: uSEnfz55VKSvVSCpkEL7CJOvgE0.crl (hash: Hy36IFuTUMjbakZ3lwopEGxiERBydVK5DFdG4tsrM2I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:1d:5d:fa:19:71:31:9f:36:f1:e6:29:89:bd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b921277f3e7954a4af5520a99042fb0893af804d
        Validity
            Not Before: Apr 17 01:00:28 2026 GMT
            Not After : Apr 18 01:00:28 2026 GMT
        Subject: CN=1e702d39a71f6acd68face7f0259b312615671e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2f:a1:cb:8e:d5:35:52:1b:5a:af:3e:6a:c8:
                    62:45:48:b7:51:2e:e4:05:0e:07:a7:ac:c5:f0:53:
                    5d:69:f6:3e:ed:c6:d5:6a:70:3e:4c:dd:39:2f:8c:
                    c2:52:50:d5:37:f6:4b:de:de:d2:96:c7:c0:30:5a:
                    af:0a:f3:a1:04:5f:3e:a8:80:4e:4e:e3:08:f6:d4:
                    cc:95:d2:c9:ce:cd:66:e9:05:fa:7c:d1:78:1e:8d:
                    54:ad:73:12:7d:d2:bc:a5:b7:bf:93:6b:2b:52:01:
                    b2:df:2b:5e:1d:1a:c5:84:0b:9c:8a:21:de:80:42:
                    e2:f2:15:77:3d:b8:92:70:68:13:e8:be:ba:6a:8d:
                    46:13:a6:4e:39:52:ab:38:ef:42:cb:4e:38:3b:5c:
                    6b:e4:b9:3e:3a:21:e1:f9:61:cf:6d:02:55:73:08:
                    89:92:e0:6d:78:cc:60:03:50:bb:2e:c5:d0:26:b6:
                    84:7a:44:c5:6d:a4:30:4a:23:66:22:67:1e:57:66:
                    7a:ab:83:0f:eb:e4:62:9f:75:3b:64:6b:dd:05:a7:
                    38:1c:43:13:07:84:05:18:8b:b3:47:cf:d5:83:7f:
                    c1:ac:d3:34:56:e9:68:2c:e7:2c:7b:90:7e:53:14:
                    18:fd:a5:ea:d0:9d:13:34:82:4e:f0:ba:cf:40:5c:
                    42:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:70:2D:39:A7:1F:6A:CD:68:FA:CE:7F:02:59:B3:12:61:56:71:E3
            X509v3 Authority Key Identifier:
                keyid:B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:01:f1:4b:65:0d:ad:d2:52:06:2c:e7:8b:40:5e:b3:e5:49:
         55:b1:97:4d:db:74:b5:8f:f7:3f:75:9b:33:7a:22:4c:94:6b:
         71:74:f5:12:c8:c0:20:c5:82:11:70:c6:6d:1d:af:ba:26:bc:
         ca:77:75:e7:24:4d:55:70:c7:4f:da:39:94:c9:88:fa:9b:b3:
         f5:8e:de:3f:b5:81:5e:83:e8:5d:e2:e4:15:d0:08:28:68:06:
         29:14:d1:b3:a2:b8:7e:f5:0d:45:e5:5a:a2:49:e2:cd:9d:b5:
         94:49:0f:7e:e2:54:16:3c:6e:b8:33:1c:41:7a:ab:87:0d:58:
         16:1a:ce:cc:bd:61:83:fb:61:a6:cf:64:44:bb:d4:5b:6d:2b:
         ac:9d:de:9a:cd:36:40:7c:8b:b8:36:e8:8a:91:6a:10:7d:d7:
         ab:2a:c9:a9:49:fb:f8:ae:ff:a6:7f:d5:b4:ed:05:3f:18:90:
         96:73:21:9c:aa:95:06:d0:6d:20:e3:14:a8:f5:d1:b0:f6:cd:
         a2:22:8a:38:da:24:64:05:f7:84:09:2b:ae:2e:06:34:68:7d:
         25:e1:b4:21:e6:63:13:e2:5b:24:56:6c:92:da:56:a9:f8:73:
         f6:0f:15:46:ad:f9:7d:f4:05:9d:ac:19:8a:1b:ef:90:d4:49:
         41:2b:f7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:51:44 2026 by rpki-client