Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft
File:                     uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft (raw, json)
Hash identifier:          OF4320m+1DXIpukNIH0JxyoSd5GvXBZFBKdA/R7ulZw=
Subject key identifier:   A3:88:11:91:CA:02:30:3C:34:E6:D1:58:F9:E8:C6:7C:17:30:7E:DD
Authority key identifier: B8:B3:D4:AC:E7:35:61:3E:CB:C5:91:DF:FC:29:85:F3:41:76:67:D3
Certificate issuer:       /CN=b8b3d4ace735613ecbc591dffc2985f3417667d3
Certificate serial:       019DA48B5BBDC3BE169FAF2F5443B1556553
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft
Manifest number:          01F3
Signing time:             Sun 19 Apr 2026 07:01:29 +0000
Manifest this update:     Sun 19 Apr 2026 07:01:29 +0000
Manifest next update:     Mon 20 Apr 2026 07:01:29 +0000
Files and hashes:         1: NV3S-cYsExUdRgl5V11Uj7aYoCA.asa (hash: m9YjhpG3Ej72IcJ1NL2xN/91w8rQ4C6t6YmqSlG2Q/Q=)
                          2: ZCHxju4N5_hWAUjZ5PsoUevMzO4.roa (hash: ZuY9l1MEP5ns/5zS4M4Uxiwc0zR/t3Ns6GDag16Mf6M=)
                          3: eeJX5peQ1g-nWbA9lZGu8mlVXvk.roa (hash: /dJXTuDaINBRLHLHkbz+FLFKHSjS7Mr+y/EC0teqSLs=)
                          4: hlO_AecNEmj4D79lmjDucZzwZB4.asa (hash: /6I3ZOv6LwKowpbuh2iIMzDSrB6Wbph+0AzHVvuZ8eE=)
                          5: uLPUrOc1YT7LxZHf_CmF80F2Z9M.crl (hash: XisPF+Jzg06LH84hu/6YQl1XyZ1d664jaT0H1brn5Os=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:8b:5b:bd:c3:be:16:9f:af:2f:54:43:b1:55:65:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8b3d4ace735613ecbc591dffc2985f3417667d3
        Validity
            Not Before: Apr 19 07:01:29 2026 GMT
            Not After : Apr 20 07:01:29 2026 GMT
        Subject: CN=a3881191ca02303c34e6d158f9e8c67c17307edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:68:f9:7c:ef:76:fd:ff:86:a5:dd:7f:7b:c7:
                    eb:05:0f:03:63:e7:ef:5e:b2:e6:7e:57:a7:fa:6b:
                    e1:0e:27:60:a3:e4:a1:ba:68:b6:ab:d2:5a:73:c8:
                    38:cc:95:57:83:91:57:2f:23:40:d5:0a:8c:be:c3:
                    03:48:be:d2:2a:10:fa:4a:07:c2:c4:04:4d:43:6d:
                    97:50:96:34:dd:67:a1:c4:7d:6c:67:18:f4:4f:4e:
                    6d:d6:bf:56:0f:8c:4e:49:49:b1:be:f2:9d:ca:b3:
                    cd:ec:0f:63:ab:24:fd:c8:ff:c5:03:ce:65:ef:a6:
                    93:1d:5c:64:02:11:e8:ad:59:8a:e5:b5:6e:ce:a5:
                    7a:2c:76:1a:64:80:4e:50:0d:37:7b:98:eb:f8:c4:
                    a3:6f:5c:4e:ab:6b:35:5d:fa:57:b0:31:ce:0a:69:
                    6b:7d:b6:46:64:ef:86:80:85:df:cc:ec:40:e4:c4:
                    2b:f6:f5:83:49:5d:01:e7:4e:76:ec:84:2c:61:25:
                    d5:db:7e:01:a2:7e:f9:f7:66:ad:d9:16:5c:a8:1c:
                    36:62:90:58:b3:09:c9:8a:9b:aa:f7:02:aa:e2:60:
                    f0:75:ca:3a:66:5c:c9:5d:c1:0e:67:16:38:a1:2e:
                    cf:27:ac:00:a2:5c:8a:e6:5f:ac:08:28:c8:95:8d:
                    fa:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:88:11:91:CA:02:30:3C:34:E6:D1:58:F9:E8:C6:7C:17:30:7E:DD
            X509v3 Authority Key Identifier:
                keyid:B8:B3:D4:AC:E7:35:61:3E:CB:C5:91:DF:FC:29:85:F3:41:76:67:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:d6:5d:b5:9f:d1:34:a5:64:28:eb:68:be:31:aa:44:d6:d4:
         8c:bc:f7:d8:50:59:61:b4:f6:77:77:22:a8:b7:67:29:5f:1f:
         11:cb:68:07:96:69:a5:b2:30:9d:66:af:69:36:40:fa:a4:b0:
         4d:a6:53:ab:ec:14:82:91:b9:0f:a2:f1:3d:bd:2d:e2:51:47:
         d3:c9:c5:cb:5b:93:01:d6:47:c8:e9:60:6c:48:34:46:ad:fc:
         9e:d3:f3:4b:35:4b:78:7e:bf:31:11:69:57:e6:30:97:27:d1:
         2d:fd:12:2a:d5:a0:d0:6e:26:bb:d7:ca:33:ac:65:3a:07:09:
         58:12:e0:d0:5c:d1:02:1e:21:ab:21:a2:a2:19:c1:2f:74:56:
         93:8e:c6:fa:09:b1:2f:65:1d:0c:08:67:36:4f:45:9e:6e:8d:
         63:dd:8a:f7:ae:65:87:2f:e2:3e:0f:e4:97:be:3a:a0:22:34:
         5f:b6:c7:44:11:e9:24:d1:89:5a:13:05:05:b0:7e:60:53:dd:
         f1:2e:04:29:c8:ff:91:ed:e3:af:ef:be:93:e4:43:6e:09:ee:
         2a:de:13:85:6a:24:53:96:b1:49:e9:dd:c1:80:62:22:4f:86:
         db:0c:1b:46:f2:9d:a5:b1:b3:f9:c5:78:b7:75:71:a4:9b:87:
         b9:1b:2e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:20:16 2026 by rpki-client