Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
File:                     UbNIBPm2anHCRyWy13-UkRIYXrE.mft (raw, json)
Hash identifier:          7AHddQBuPuzwQrHYsQs/qv4KzwNL/g80r7QqOCce0fs=
Subject key identifier:   7F:E0:4A:FA:D1:A6:3E:D5:A0:56:6D:E5:24:B3:D4:BE:40:CD:60:F6
Authority key identifier: 51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1
Certificate issuer:       /CN=51b34804f9b66a71c24725b2d77f949112185eb1
Certificate serial:       019D9961F8297CEC2B989F69400464D8F30D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
Manifest number:          0C2F
Signing time:             Fri 17 Apr 2026 03:00:27 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:27 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:27 +0000
Files and hashes:         1: AL0W8JafgnmPnnZBBZOLnMOElHU.roa (hash: W7hf6DI9RRqdDA51Pz50C4flOR9nQCePHPNNbBEGwT8=)
                          2: UbNIBPm2anHCRyWy13-UkRIYXrE.crl (hash: I8jZGGzGVXCcXCRLGZnOH4iFOp6Vrgl7WBDrenHRnq8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:61:f8:29:7c:ec:2b:98:9f:69:40:04:64:d8:f3:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b34804f9b66a71c24725b2d77f949112185eb1
        Validity
            Not Before: Apr 17 03:00:27 2026 GMT
            Not After : Apr 18 03:00:27 2026 GMT
        Subject: CN=7fe04afad1a63ed5a0566de524b3d4be40cd60f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6e:1e:1f:d3:df:7f:b5:e2:a9:0f:0f:c8:ce:
                    c0:2c:a5:9d:53:23:94:0d:9b:23:6e:78:66:6e:17:
                    18:94:07:25:dc:2a:80:b4:eb:78:62:27:77:5e:1d:
                    31:a1:27:b5:0b:27:3b:62:0c:35:82:91:5f:2f:20:
                    8d:81:1b:14:15:39:d2:b4:a9:86:80:88:fb:48:55:
                    c1:f4:ea:c2:78:40:b2:66:9a:19:f0:0b:a9:0d:57:
                    53:5b:21:b6:70:a9:07:86:19:e0:a0:a2:b3:24:7a:
                    d7:e5:a4:52:32:0a:cb:b0:e3:74:c0:20:47:2b:b8:
                    08:6f:10:1d:2f:d7:73:82:6e:40:38:8a:b2:05:88:
                    47:41:36:b9:55:ef:eb:1f:f6:fe:23:5b:a5:bf:71:
                    04:73:29:7f:48:d3:27:06:83:4b:4e:ec:41:50:08:
                    c1:3a:aa:1a:3a:03:b7:d9:aa:85:6d:18:57:11:af:
                    d2:89:7a:63:d0:97:21:f4:cc:27:a8:c5:f8:97:8a:
                    4e:1e:c1:c3:12:fc:76:94:83:b4:51:d4:7b:1a:0d:
                    5f:9f:2f:da:c7:74:6f:bf:c4:07:92:23:56:0a:9b:
                    fd:64:03:fc:15:dc:ca:ae:ec:7b:c1:b5:c6:f7:2b:
                    cd:43:7c:df:99:0f:f3:6d:8c:c1:a4:91:d1:91:68:
                    6b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E0:4A:FA:D1:A6:3E:D5:A0:56:6D:E5:24:B3:D4:BE:40:CD:60:F6
            X509v3 Authority Key Identifier:
                keyid:51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:a4:04:9a:92:3d:ba:a3:07:fa:15:7e:d4:09:97:9e:7b:d1:
         a3:34:a2:75:fb:18:d3:49:31:c3:c3:b9:90:81:03:85:d2:6c:
         bc:9c:86:b6:bc:44:20:8e:c4:24:66:91:eb:29:ca:00:63:73:
         78:38:2b:7c:0d:cd:b7:18:2f:75:3d:dc:e0:a3:d6:0b:72:d8:
         62:33:e6:bb:cd:0f:4d:ac:e0:21:55:5a:bd:6b:b4:0d:fa:06:
         61:e4:04:81:5f:d8:a7:6c:d1:90:b4:0a:58:13:79:bf:8e:f2:
         e8:da:ab:86:23:be:6b:59:4d:69:56:22:57:6e:ff:d8:f9:b3:
         0d:ef:4f:77:f5:5d:7b:aa:75:ff:85:5e:b5:fb:ff:f7:de:33:
         08:75:12:eb:50:34:87:b3:7c:cd:38:b3:86:e5:82:6e:d6:ab:
         e2:54:6d:a1:54:8c:ca:55:72:5f:7e:2b:a6:61:87:30:28:f1:
         31:04:cf:36:08:e8:fa:cd:b0:4b:83:c2:e3:d4:f9:73:82:62:
         48:1b:52:cc:37:d7:3a:ff:69:ed:0a:91:57:53:d3:d8:25:5c:
         9b:1a:a4:9e:22:8a:0f:9a:76:9a:0a:79:51:a2:d0:6e:42:75:
         ff:81:f8:a5:b4:0f:2e:a0:0c:00:2b:68:3e:b9:f9:d1:0c:08:
         fb:70:ea:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:07:53 2026 by rpki-client