Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
File:                     UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft (raw, json)
Hash identifier:          2G2iu1OFU1HxQ7lh8FmxoHCq/NbeSXxPUxgqHKw6hOs=
Subject key identifier:   E4:F1:27:BA:87:D2:79:92:CF:C0:25:4A:2A:AF:C4:44:AB:CA:29:8A
Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
Certificate issuer:       /CN=52226f671c2643a5c04846264fee01f943ac2bfc
Certificate serial:       019D9A50D094C0AD3E07ECC850EDADD9C082
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
Manifest number:          18C3
Signing time:             Fri 17 Apr 2026 07:21:20 +0000
Manifest this update:     Fri 17 Apr 2026 07:21:20 +0000
Manifest next update:     Sat 18 Apr 2026 07:21:20 +0000
Files and hashes:         1: KlidTRE0Ld2vhd7LchTBrjDXtCM.roa (hash: oYu7FrAcgyOmxnR9Y/a2v7qA05r9PwyCGoG1X5C3eMU=)
                          2: UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl (hash: xxNTglcg7H5G4V8gOYiz1N4ATF+SyYc84axEmHjeyUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:50:d0:94:c0:ad:3e:07:ec:c8:50:ed:ad:d9:c0:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc
        Validity
            Not Before: Apr 17 07:21:20 2026 GMT
            Not After : Apr 18 07:21:20 2026 GMT
        Subject: CN=e4f127ba87d27992cfc0254a2aafc444abca298a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:14:7e:bc:3c:f7:eb:5a:59:5a:81:70:b6:b3:
                    e9:a4:cd:4f:60:a7:de:7c:68:c9:e0:42:69:d4:3f:
                    41:f9:57:be:cb:21:d1:1d:e0:3c:05:48:72:cc:61:
                    36:ad:3d:3f:fc:93:29:f5:3a:6d:46:9e:2c:f5:59:
                    45:e8:61:15:07:bd:55:27:3f:d4:03:d7:94:0f:15:
                    a0:8e:aa:ed:9f:17:83:18:88:e8:48:fb:cb:a8:aa:
                    8f:c7:06:54:22:2a:fa:f0:80:84:9b:e4:52:c9:c7:
                    9a:2e:a6:9b:9c:ff:84:9e:31:1a:31:de:83:ab:ce:
                    3f:ac:63:ae:a5:db:e3:de:22:f2:b2:f1:82:8f:d5:
                    59:be:47:61:7c:50:e0:94:4a:c6:67:86:64:46:90:
                    4c:09:06:69:ce:b8:50:c4:a3:61:e7:61:17:c0:55:
                    9a:49:52:95:ec:64:21:91:ee:b7:90:81:d4:e9:87:
                    8e:e1:7a:ea:f2:0c:23:6b:3c:f8:8a:76:3c:07:eb:
                    8c:ca:08:0f:6b:ac:79:4f:87:15:6c:b4:f8:52:7d:
                    b3:cd:80:15:af:5b:52:59:23:34:59:7e:f1:70:9c:
                    38:91:8c:74:bc:3c:55:53:bc:f1:35:a5:a0:72:1a:
                    3f:10:9a:d4:fd:02:9c:82:c7:ae:d4:01:f8:3e:e3:
                    61:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F1:27:BA:87:D2:79:92:CF:C0:25:4A:2A:AF:C4:44:AB:CA:29:8A
            X509v3 Authority Key Identifier:
                keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:f0:a5:26:97:a3:80:d1:f1:a2:5a:53:41:9c:b7:6f:c5:b1:
         08:48:c0:42:a3:11:e6:9e:e4:b3:04:f0:30:c9:99:97:f3:68:
         5a:a7:4f:fa:e8:da:29:33:48:98:bd:1b:bf:d4:05:4b:c3:be:
         fe:6f:5f:58:57:86:c2:c9:28:81:21:18:88:fb:f9:fa:d6:71:
         2e:84:1d:23:1e:23:6d:82:36:c7:86:bc:21:02:11:98:21:82:
         27:03:ce:28:c9:5c:5b:dc:45:88:f7:b1:b9:c0:1b:df:5a:08:
         6a:1d:80:e5:ab:ee:a0:5e:a0:78:2b:6f:df:57:43:0b:ed:5d:
         0e:27:84:d3:bc:4f:60:dc:51:ab:84:ae:16:6b:fd:0f:34:5e:
         f7:7f:bd:bd:0e:ff:8b:f0:b1:3f:af:a6:77:08:5d:d8:4d:1b:
         13:1a:88:cf:22:dd:43:f1:c2:d4:91:cd:01:03:61:80:03:94:
         3f:2a:e5:2b:0c:c8:88:c3:b9:95:b9:58:dc:3a:7e:14:92:00:
         de:53:a2:ce:de:e7:36:e3:7e:8f:6b:bc:b3:ec:1c:3a:76:78:
         44:3b:81:32:6d:5f:ba:82:ef:2a:7d:39:c9:4b:8f:f5:87:36:
         ca:72:da:95:64:43:72:a8:41:41:5c:49:49:a1:88:f5:07:65:
         98:d6:df:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:45:56 2026 by rpki-client