Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
File:                     UdoAZhIua6KU0rdHk41Gx06Z-IA.mft (raw, json)
Hash identifier:          1AAiyctFRgScJ4hxqlXrjfPMprgVIlz3GlqGB5yRHmE=
Subject key identifier:   9B:13:4C:4E:86:9F:05:4D:29:AC:5C:AE:BA:7B:BC:78:11:DA:EE:92
Authority key identifier: 51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80
Certificate issuer:       /CN=51da0066122e6ba294d2b747938d46c74e99f880
Certificate serial:       019D9A3EB17FBBD371C5DF3758FB8A392D11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
Manifest number:          090F
Signing time:             Fri 17 Apr 2026 07:01:33 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:33 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:33 +0000
Files and hashes:         1: UdoAZhIua6KU0rdHk41Gx06Z-IA.crl (hash: d9n9W/w27sKhGQprahmHjFelujSkv1a+74d0gjz6yow=)
                          2: bBMlqfhZbgU4RFc29xzMS28J5Yc.roa (hash: wmFqb2uW30KLYhFd4JkMsA8poWqQ5oZsDAIy44oWkC4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:b1:7f:bb:d3:71:c5:df:37:58:fb:8a:39:2d:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51da0066122e6ba294d2b747938d46c74e99f880
        Validity
            Not Before: Apr 17 07:01:33 2026 GMT
            Not After : Apr 18 07:01:33 2026 GMT
        Subject: CN=9b134c4e869f054d29ac5caeba7bbc7811daee92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:05:b5:bf:54:10:cf:af:f6:a3:5e:e5:e5:46:
                    69:e2:06:56:b6:fd:85:5f:89:99:e2:33:e4:27:93:
                    25:49:fb:2a:f8:d0:d7:f5:56:b4:f9:e4:f2:38:f6:
                    2e:9d:fe:f6:a1:d1:d0:d2:ef:42:67:39:ac:2c:fa:
                    b4:bc:b8:aa:6f:d3:b3:a0:ed:1e:66:59:98:94:11:
                    da:a5:44:9b:88:01:08:1f:6c:6f:88:3d:c3:07:c6:
                    8c:8f:56:01:a5:81:41:2d:44:23:3a:2d:85:17:fe:
                    2c:b9:19:e1:63:af:b8:5e:8a:10:01:9f:80:4a:43:
                    09:77:39:87:e5:47:3b:93:5f:70:ce:c7:bb:34:ee:
                    4e:e6:33:91:91:28:50:6e:6c:10:aa:23:b6:8b:91:
                    87:6a:ed:3d:41:e4:e0:7c:ff:30:bc:63:fc:6e:20:
                    a6:64:ca:78:cd:28:e2:3e:e7:5c:c5:77:ea:c5:be:
                    8a:8b:26:82:cf:d8:4b:c8:f9:4a:e9:24:06:76:6c:
                    32:b7:60:0c:8b:09:e3:a3:8c:84:16:de:0d:55:86:
                    a6:0b:00:53:6c:b0:85:13:ac:fd:61:ea:61:b8:14:
                    1b:fb:00:0a:59:98:d9:43:a2:b2:a2:88:a2:f9:50:
                    05:11:14:dc:df:6d:18:0a:f4:71:a5:3a:da:7a:10:
                    cd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:13:4C:4E:86:9F:05:4D:29:AC:5C:AE:BA:7B:BC:78:11:DA:EE:92
            X509v3 Authority Key Identifier:
                keyid:51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:93:d8:aa:02:15:e9:c5:f9:f7:43:a5:bb:5a:7e:1e:52:b3:
         30:5c:8f:82:48:52:ef:d1:a7:cb:10:95:b0:fd:43:42:0a:82:
         09:dc:09:c6:7b:e8:7d:ee:59:49:5d:57:cc:2a:b0:82:44:d7:
         e4:06:34:36:50:d4:52:1d:e3:be:c5:9f:c9:b6:15:22:9d:74:
         10:a0:d4:19:40:39:34:31:26:fc:87:91:34:e4:2d:f0:31:97:
         86:40:1f:43:9e:0c:17:0d:1f:ee:cc:7c:6e:ae:ab:46:07:a1:
         1b:94:94:7e:c1:98:de:6a:2b:88:fd:c3:3c:45:c7:82:d0:16:
         43:7f:f0:3f:0e:d9:af:01:18:3f:4e:67:9f:fc:b6:5d:f3:c8:
         20:be:72:42:be:53:89:9d:00:37:cf:58:61:63:a2:55:db:cb:
         ee:04:00:2e:95:86:aa:ef:b8:66:74:e2:62:a4:00:28:be:a0:
         a3:8a:22:4c:a5:0f:41:af:6e:19:8d:cc:1b:bd:41:7c:14:56:
         db:a1:52:c3:e5:ca:77:f1:29:d4:c2:c3:47:12:3c:e0:d9:c3:
         af:f3:40:4d:f2:78:db:ed:2d:4f:10:29:ff:b1:a2:7c:19:75:
         1f:05:b3:2d:2a:77:f0:83:e5:a3:3f:83:27:47:2a:6a:19:02:
         45:78:94:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:37:24 2026 by rpki-client