Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
File:                     0uuxFmwGDbJd-U8CvS-PnabE3Us.mft (raw, json)
Hash identifier:          NJdKMdVE3UmBZdLniNSxa6s+lfhZpvZfGKgXh81pKlU=
Subject key identifier:   AD:FB:D6:74:B6:DD:1E:A8:D3:75:9F:A4:6C:83:15:EF:97:70:F2:57
Authority key identifier: D2:EB:B1:16:6C:06:0D:B2:5D:F9:4F:02:BD:2F:8F:9D:A6:C4:DD:4B
Certificate issuer:       /CN=d2ebb1166c060db25df94f02bd2f8f9da6c4dd4b
Certificate serial:       019D99D04D1FC9417BDC3CE2D7B8DBC47C35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
Manifest number:          147D
Signing time:             Fri 17 Apr 2026 05:00:58 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:58 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:58 +0000
Files and hashes:         1: 0uuxFmwGDbJd-U8CvS-PnabE3Us.crl (hash: sIVMa1c+Dv7jeA42pg5rEai4G8eNKHHSvKFSRu3MLiQ=)
                          2: 6SrhIYq9krVCM2Q_wIAA5M-Z-Lc.roa (hash: sAYJD+I7oIyAkdboyJMkSqHc+dfvfVcmdQnsD35+5Do=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:4d:1f:c9:41:7b:dc:3c:e2:d7:b8:db:c4:7c:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2ebb1166c060db25df94f02bd2f8f9da6c4dd4b
        Validity
            Not Before: Apr 17 05:00:58 2026 GMT
            Not After : Apr 18 05:00:58 2026 GMT
        Subject: CN=adfbd674b6dd1ea8d3759fa46c8315ef9770f257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3d:c2:f1:08:a4:aa:c2:0a:03:db:40:36:18:
                    50:3f:68:6e:75:bd:1f:7a:2e:8c:23:e7:06:3d:f2:
                    d9:51:5e:f9:23:0d:21:bb:b4:bf:44:37:b4:53:cc:
                    47:09:20:b2:ae:f6:21:ba:8f:0c:6d:36:12:16:b9:
                    e7:95:1c:98:68:45:6e:c0:4b:25:72:6e:11:b1:a6:
                    bb:7f:7d:f0:b9:45:32:5c:87:10:09:25:5b:23:83:
                    5c:f1:ec:ca:9c:0b:0d:82:a0:c5:71:f4:da:5d:9f:
                    d9:85:25:1e:e4:af:de:b0:e0:1f:d4:2f:6c:dd:81:
                    09:ef:45:7d:e3:1f:e3:c7:e6:e6:67:0e:c3:d8:5c:
                    8f:25:70:f0:b0:14:d3:66:bb:c8:33:aa:4d:1c:e6:
                    c3:76:56:79:ba:ea:0f:cc:bd:6e:01:b0:d0:5e:65:
                    5d:5b:7d:0d:43:ae:d4:9e:72:05:55:2d:c2:40:07:
                    b1:11:c6:81:87:b9:8f:df:e8:03:88:b3:8c:71:06:
                    ff:77:dd:76:ea:db:64:4f:30:c1:5f:91:d4:d9:d9:
                    d5:7d:26:78:b4:59:6f:87:fc:f0:f5:a0:0a:04:2f:
                    e7:4f:91:b1:f1:5e:ac:4c:50:1f:98:73:c2:e6:2b:
                    2f:35:0e:c1:58:63:22:ac:e2:10:ff:21:b9:22:fb:
                    51:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:FB:D6:74:B6:DD:1E:A8:D3:75:9F:A4:6C:83:15:EF:97:70:F2:57
            X509v3 Authority Key Identifier:
                keyid:D2:EB:B1:16:6C:06:0D:B2:5D:F9:4F:02:BD:2F:8F:9D:A6:C4:DD:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:8d:f0:bb:4b:af:fa:dd:85:d1:aa:0d:1c:f7:ec:30:77:af:
         f5:ea:d0:03:a6:1c:59:92:b6:86:28:4b:79:73:ce:3f:3f:9a:
         2d:dc:d5:d2:01:2e:a4:9e:4d:3f:d3:ac:83:f4:7c:fd:41:a0:
         66:f1:14:07:97:c0:f4:e1:1f:42:eb:aa:87:b3:60:01:58:fd:
         c8:4c:a8:a6:7f:52:b3:5a:bb:69:63:1a:59:48:fa:8c:5c:ef:
         d3:b1:fb:a0:ed:8e:47:ae:00:19:45:b7:bb:38:31:ad:f6:ef:
         46:11:4e:60:d3:68:e0:9b:d5:3b:71:54:5d:ca:16:84:47:70:
         f1:ee:29:d0:4c:f7:b1:f9:db:6a:99:4a:87:28:8e:f6:88:40:
         f5:d1:3b:37:4f:4b:aa:f0:42:1a:1f:89:4a:57:5a:71:30:aa:
         38:16:63:68:68:41:36:59:36:93:d7:75:e1:b4:0c:96:b7:9c:
         43:6a:56:4c:50:e4:df:20:b7:b8:14:04:05:cc:1d:dc:40:e3:
         4b:7f:44:c3:65:ca:2c:02:b6:4d:33:c4:63:9d:a5:11:30:4b:
         11:7e:7f:0d:29:5d:cd:a9:9a:d3:3b:66:ec:75:ab:e1:96:55:
         17:ca:64:ec:3a:04:c1:16:ce:1f:3d:34:2a:f8:8c:76:b0:b3:
         e4:34:d6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:20:00 2026 by rpki-client