Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft
File:                     U9qZ-TUY4pqUWwf2ChjvhumznmU.mft (raw, json)
Hash identifier:          ckCpIlY0oH8aCOhdRNNQ7mcysiqgG+b5OLTPdor+HmA=
Subject key identifier:   B1:BC:72:0F:ED:DC:DD:81:36:20:14:5C:7A:B8:40:4F:25:F1:93:81
Authority key identifier: 53:DA:99:F9:35:18:E2:9A:94:5B:07:F6:0A:18:EF:86:E9:B3:9E:65
Certificate issuer:       /CN=53da99f93518e29a945b07f60a18ef86e9b39e65
Certificate serial:       019D9A3EA68C2B2690971AE3F09605CBAF7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft
Manifest number:          1606
Signing time:             Fri 17 Apr 2026 07:01:30 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:30 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:30 +0000
Files and hashes:         1: U9qZ-TUY4pqUWwf2ChjvhumznmU.crl (hash: e2dW2pssTQV+WDUjm4nDkOmuPaFWaV1wxosZe1kVR+c=)
                          2: lqa3yfi-IJTce6zbolyaur2GC34.roa (hash: euw2FgarLlwQhKJB1B+fQ7g3yZOfq06R+9gYUXAI1v0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:a6:8c:2b:26:90:97:1a:e3:f0:96:05:cb:af:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53da99f93518e29a945b07f60a18ef86e9b39e65
        Validity
            Not Before: Apr 17 07:01:30 2026 GMT
            Not After : Apr 18 07:01:30 2026 GMT
        Subject: CN=b1bc720feddcdd813620145c7ab8404f25f19381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0c:f9:8d:c2:b5:1f:55:b5:49:40:ea:30:45:
                    91:20:35:a9:f0:be:2b:05:0b:2b:1e:5d:c4:67:8d:
                    05:60:41:89:95:5e:3c:33:37:f9:f5:01:60:34:27:
                    65:6c:20:2c:73:b6:89:4d:c2:57:b3:03:6a:2a:ff:
                    ce:93:7a:ee:97:94:5e:00:a3:8e:74:30:10:e6:ec:
                    e6:09:3b:d2:96:a9:22:77:9e:32:2b:ad:7f:08:98:
                    02:24:22:b2:d9:cc:c9:cd:61:5a:16:05:06:17:e9:
                    b7:ca:c4:4e:38:b1:34:a5:fe:76:ee:b8:25:7c:60:
                    c3:1e:98:b6:f5:4b:7c:07:4b:5f:4f:46:07:d8:93:
                    80:e6:fc:25:da:29:bb:53:5d:30:a6:0e:30:30:ee:
                    55:da:2a:c4:21:6c:e5:60:15:3e:87:54:09:1a:ac:
                    2b:b0:ed:59:3c:a8:0e:82:d5:c7:f3:2f:de:55:f7:
                    8a:54:e7:29:8b:48:63:7a:09:6e:2a:f2:da:2f:5a:
                    31:b8:e1:ee:5a:ff:3b:50:07:22:35:5a:b5:47:ac:
                    9c:46:c9:97:55:1b:8f:f9:96:0f:a9:4e:66:d1:7e:
                    a4:5e:44:5d:d8:ba:5d:03:5c:54:a0:5a:e4:f9:9f:
                    64:cb:ce:af:a4:be:9f:08:9a:a8:8c:e4:59:b3:a5:
                    23:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BC:72:0F:ED:DC:DD:81:36:20:14:5C:7A:B8:40:4F:25:F1:93:81
            X509v3 Authority Key Identifier:
                keyid:53:DA:99:F9:35:18:E2:9A:94:5B:07:F6:0A:18:EF:86:E9:B3:9E:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:67:9e:8c:8f:db:0c:66:c3:9c:ae:de:aa:64:8a:58:aa:51:
         2a:1d:db:1c:ba:38:4a:33:a6:1e:f7:35:df:97:59:19:2b:bc:
         6f:19:21:41:43:11:de:b2:fa:49:bc:1d:ea:c1:50:39:92:e8:
         07:6a:ea:5d:b9:61:9b:c2:a0:d0:63:89:da:81:a3:8b:4c:d4:
         b8:90:5f:de:4e:13:e8:eb:7b:89:f9:95:1f:42:24:d4:6f:f2:
         1e:99:33:8d:12:4c:fb:60:19:bc:19:62:8b:04:43:d2:c8:f7:
         28:0f:31:f0:79:22:7b:32:30:43:23:c7:14:b1:29:02:d1:ea:
         9e:17:3f:02:28:b2:3a:47:15:25:f0:e6:dd:ab:d5:c9:8f:f0:
         6c:07:11:d3:9b:b8:5d:6f:f1:0f:74:c7:ac:55:df:c2:3a:78:
         6e:71:81:ca:74:80:43:de:cf:0a:e1:59:be:df:9e:54:8b:c2:
         23:92:da:9f:3a:bc:fe:ca:b9:56:92:f0:73:69:08:3b:8b:ea:
         78:73:a9:1a:09:a2:1b:6a:b2:cf:ba:e6:9d:34:d8:97:0f:db:
         cd:30:80:fe:d3:7b:22:a6:ba:e2:31:db:da:b5:76:51:2d:7a:
         18:94:46:2a:c5:9d:ac:d8:a4:d5:de:f5:e6:ba:73:ef:f3:80:
         e8:39:27:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:37:46 2026 by rpki-client