Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.mft
File:                     uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.mft (raw, json)
Hash identifier:          8q/xpRQ8GX7xt8XobhdiJethf0aFbC2YTPUxqC0F6xI=
Subject key identifier:   51:08:BB:12:5D:E7:B9:A3:D7:E0:15:81:B8:54:7E:6B:4E:FC:F1:B1
Authority key identifier: B8:14:34:5A:FF:D1:50:6A:F9:AF:32:EC:0D:77:39:9B:76:64:AA:3F
Certificate issuer:       /CN=b814345affd1506af9af32ec0d77399b7664aa3f
Certificate serial:       019D99D0AE581A40F4F8BABDCEBDA03FF6B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.mft
Manifest number:          0A8D
Signing time:             Fri 17 Apr 2026 05:01:23 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:23 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:23 +0000
Files and hashes:         1: 86QdkgX0ZT7S4DNuuHjrGFCh0xA.roa (hash: /zwRSRtTHoD1Z/LaEwVytkEcz+iBaapPIdZRoSCcCHI=)
                          2: uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.crl (hash: TT6WPeegY2CaJQ0Akq4wGJsrigHW1K7c5/O23lIRC7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:ae:58:1a:40:f4:f8:ba:bd:ce:bd:a0:3f:f6:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b814345affd1506af9af32ec0d77399b7664aa3f
        Validity
            Not Before: Apr 17 05:01:23 2026 GMT
            Not After : Apr 18 05:01:23 2026 GMT
        Subject: CN=5108bb125de7b9a3d7e01581b8547e6b4efcf1b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bc:2d:d6:f9:5f:4a:ad:66:86:3d:cc:85:0a:
                    b0:b3:40:40:03:fa:a1:db:77:8c:48:9a:a1:cf:f0:
                    f6:e7:b8:a3:2b:03:74:83:13:9e:12:fe:d5:ab:45:
                    4e:01:d0:1b:7a:29:ed:a9:13:8a:4c:1a:d5:6b:63:
                    e8:55:67:4b:37:c4:84:89:f1:16:f3:62:92:48:0c:
                    38:5a:97:e8:76:07:dd:ef:57:40:6e:a3:32:78:a2:
                    5d:b1:9f:8b:84:26:10:08:06:b5:ca:bf:ac:1d:cc:
                    ce:37:6d:aa:bc:4a:76:61:23:61:c0:be:b8:b4:de:
                    98:34:c9:77:a3:04:b0:f9:8c:a8:5b:b4:d0:6a:ff:
                    70:82:33:6a:ae:ed:d2:d0:c2:e0:07:af:ee:80:13:
                    f9:99:66:31:4e:76:a8:ca:0a:31:fd:b5:85:10:93:
                    6d:5b:cf:7a:e1:6e:de:13:a2:d2:ab:6b:ce:a7:1a:
                    6d:3c:cf:23:83:4a:bd:f0:3e:85:ff:b0:9e:b0:97:
                    7a:c3:50:7d:64:79:92:e1:2f:01:f7:be:30:3a:3c:
                    91:95:30:9b:72:49:9e:37:7b:b6:26:02:0d:71:2b:
                    53:de:7e:b6:15:1f:fc:58:2f:1f:f1:47:a5:a4:aa:
                    47:02:f2:db:3e:07:22:a9:fe:f6:fb:b4:61:64:01:
                    a5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:08:BB:12:5D:E7:B9:A3:D7:E0:15:81:B8:54:7E:6B:4E:FC:F1:B1
            X509v3 Authority Key Identifier:
                keyid:B8:14:34:5A:FF:D1:50:6A:F9:AF:32:EC:0D:77:39:9B:76:64:AA:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:a9:f9:ef:08:1b:70:23:73:06:8c:4a:1b:06:6d:7a:84:e0:
         b7:46:1c:43:69:cf:6b:1c:3b:9c:25:3d:24:3a:0a:5a:40:f1:
         9a:13:b0:a5:ea:ae:f7:86:84:30:2d:36:af:b8:ff:16:a7:ed:
         e9:a0:c5:25:78:f4:db:01:5b:bd:63:ed:0d:79:6f:17:91:d5:
         e5:3b:f5:45:ea:5c:e6:b8:0d:9e:15:57:28:91:9d:a2:a6:55:
         56:dc:03:56:23:e0:2d:cc:f3:83:97:96:fa:99:90:8b:67:3d:
         f8:51:8a:1b:de:bb:1c:1f:be:92:95:f3:f5:ec:4d:17:e8:f0:
         bf:f0:a0:6f:18:ed:79:86:aa:dd:3f:88:4e:8e:21:9b:6c:18:
         58:9f:0b:29:ad:2b:0d:32:ec:02:7e:fe:ce:51:59:72:ba:a1:
         a6:6c:32:dd:27:01:08:b4:f2:7b:16:f1:77:fe:62:23:54:6a:
         9e:72:47:12:dd:e9:89:e3:af:e6:ce:bd:89:65:07:a0:fd:6d:
         b4:a4:41:e9:5e:a0:ae:0e:8d:5d:d8:ed:22:29:50:76:9a:b5:
         26:a1:57:4f:46:8f:bd:d5:c6:43:25:95:41:78:72:92:8a:3d:
         0d:56:44:2b:41:14:54:50:d4:0f:66:3e:fc:3d:80:47:ad:a3:
         bf:0d:ce:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:49:38 2026 by rpki-client