Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
File:                     uFsMinWJOk-OHvDZpNQUeNizMng.mft (raw, json)
Hash identifier:          iENWFRW7uwtFs0RZGTq9aTjj6TG321hbagl4UTYLq8E=
Subject key identifier:   29:DB:81:82:25:E3:ED:19:21:F5:B3:CE:85:C5:D5:86:A4:BD:A3:0B
Authority key identifier: B8:5B:0C:8A:75:89:3A:4F:8E:1E:F0:D9:A4:D4:14:78:D8:B3:32:78
Certificate issuer:       /CN=b85b0c8a75893a4f8e1ef0d9a4d41478d8b33278
Certificate serial:       019D9998F5ADF324AC947B88BBA7D9EEE03D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
Manifest number:          1820
Signing time:             Fri 17 Apr 2026 04:00:31 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:31 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:31 +0000
Files and hashes:         1: 8y3Tj4TsEaNV9uqE3_Wm8d75SXY.roa (hash: yZH4sqNiTJoNNbuM1J9mJYZWJbe1HILioSLqth5sEdY=)
                          2: HVxmAfBjZ6ZLdFwLWBto8AESvAs.asa (hash: hcVfaTwHi+0pfWKV+QVinfnUuQbFH+9lvzWtmpQvDYI=)
                          3: HqKAWum-OFZ9NLI9L0i8Qooknqs.asa (hash: lOJrYcM36+x+F6jmp2VCjFJX1AVn86mOQN9gIP6YbRA=)
                          4: P1bw9rYWo49y12HRXmApS6My_8Y.roa (hash: 9AqUQgieKub166QUqwy0x3KBBuJmfSfs9fB9oABYTjM=)
                          5: uFsMinWJOk-OHvDZpNQUeNizMng.crl (hash: NBbqldbF4fBWenL/j0pRor50y3LJo0ba1Cryx/276Cg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:98:f5:ad:f3:24:ac:94:7b:88:bb:a7:d9:ee:e0:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b85b0c8a75893a4f8e1ef0d9a4d41478d8b33278
        Validity
            Not Before: Apr 17 04:00:31 2026 GMT
            Not After : Apr 18 04:00:31 2026 GMT
        Subject: CN=29db818225e3ed1921f5b3ce85c5d586a4bda30b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:72:94:21:cb:12:97:1a:57:28:ac:3d:07:82:
                    06:60:b9:81:51:e4:2f:db:9d:bf:02:43:29:37:80:
                    7c:dc:29:d1:c3:89:be:b6:49:2b:41:05:62:48:bc:
                    31:a8:6c:ca:fb:c3:75:58:0e:d2:01:93:05:e1:23:
                    49:da:55:b9:3a:38:9b:07:62:45:1d:74:90:45:3b:
                    be:4c:6d:2a:1f:22:1b:1b:5a:d8:52:06:65:8c:2f:
                    15:c3:92:01:fb:92:24:20:31:79:f1:2f:05:25:06:
                    46:ce:f7:e9:5e:22:14:00:23:d0:99:6f:7b:90:00:
                    a2:e9:bd:13:f7:82:f5:3f:8c:a0:28:2c:58:8c:dc:
                    ee:81:83:11:22:9a:7a:2b:86:40:d9:33:5b:62:5d:
                    c6:09:28:e4:74:59:8c:81:5c:70:17:22:f8:e7:fa:
                    23:e3:44:80:42:d0:e9:5a:61:6f:3a:ae:23:f9:03:
                    c0:f8:94:ff:eb:c7:e4:b5:45:1c:e3:08:ec:d2:44:
                    19:20:1e:06:ef:2a:80:36:db:be:45:1b:57:34:e9:
                    33:c6:7f:0a:63:1e:fa:af:f5:f8:75:89:97:52:19:
                    08:a0:4f:77:4c:23:58:4a:b4:5d:6d:9e:72:60:ff:
                    3c:37:ed:86:e8:6c:b5:ac:78:26:b0:2d:d3:3a:9b:
                    ff:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:DB:81:82:25:E3:ED:19:21:F5:B3:CE:85:C5:D5:86:A4:BD:A3:0B
            X509v3 Authority Key Identifier:
                keyid:B8:5B:0C:8A:75:89:3A:4F:8E:1E:F0:D9:A4:D4:14:78:D8:B3:32:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:e6:28:56:c7:49:ca:9e:1b:be:6d:6c:c2:c1:07:ec:ff:f0:
         7d:94:ab:a3:a8:60:22:a6:bf:92:9d:8d:5d:9b:bb:59:e0:17:
         d6:e8:37:02:4a:82:e6:a1:9c:8c:55:d8:f5:07:99:cd:cc:7a:
         b2:f3:69:03:b6:36:70:c5:06:e9:94:58:09:3b:a4:f6:45:9d:
         16:52:c4:b4:0d:cc:9b:d5:6d:fa:b4:56:f1:55:13:30:db:50:
         05:b6:d4:3f:0b:f6:02:cc:ce:93:c9:64:61:72:a1:0d:23:f3:
         c4:e4:f1:bb:35:63:b4:d3:46:d4:a9:8a:bc:de:bc:09:af:1e:
         c3:dc:d9:05:c9:21:d2:f5:59:18:7d:1c:5c:e3:f1:df:66:68:
         0d:a9:a7:a4:e5:c9:05:e6:29:65:01:e2:0a:1d:86:e4:fb:88:
         0b:7c:f7:8c:02:55:44:fc:a1:35:32:73:9b:93:ff:f7:3f:49:
         a0:7d:78:06:25:32:78:94:c5:49:6b:94:cb:63:83:31:79:56:
         7e:c1:f5:06:93:2d:8b:52:34:a1:ec:8e:e4:21:00:ff:d8:ac:
         41:5a:18:77:02:7e:a9:11:8f:b9:9c:43:a1:84:be:67:df:58:
         26:79:25:26:14:54:0a:39:5c:ed:91:eb:ba:95:fc:bd:80:41:
         b5:d9:5d:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmPWt8ySslHuIu6fZ7uA9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NWIwYzhhNzU4OTNhNGY4ZTFlZjBkOWE0ZDQxNDc4ZDhi
MzMyNzgwHhcNMjYwNDE3MDQwMDMxWhcNMjYwNDE4MDQwMDMxWjAzMTEwLwYDVQQD
EygyOWRiODE4MjI1ZTNlZDE5MjFmNWIzY2U4NWM1ZDU4NmE0YmRhMzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3KUIcsSlxpXKKw9B4IGYLmBUeQv
252/AkMpN4B83CnRw4m+tkkrQQViSLwxqGzK+8N1WA7SAZMF4SNJ2lW5OjibB2JF
HXSQRTu+TG0qHyIbG1rYUgZljC8Vw5IB+5IkIDF58S8FJQZGzvfpXiIUACPQmW97
kACi6b0T94L1P4ygKCxYjNzugYMRIpp6K4ZA2TNbYl3GCSjkdFmMgVxwFyL45/oj
40SAQtDpWmFvOq4j+QPA+JT/68fktUUc4wjs0kQZIB4G7yqANtu+RRtXNOkzxn8K
Yx76r/X4dYmXUhkIoE93TCNYSrRdbZ5yYP88N+2G6Gy1rHgmsC3TOpv/6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnbgYIl4+0ZIfWzzoXF1YakvaMLMB8GA1UdIwQY
MBaAFLhbDIp1iTpPjh7w2aTUFHjYszJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUZzTWluV0pPay1PSHZEWnBOUVVlTml6TW5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC84ODE5ZTItYzRlMy00YmNlLWE2MWMt
MzA1ZDQxZDUzYTY1LzEvdUZzTWluV0pPay1PSHZEWnBOUVVlTml6TW5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC84ODE5ZTItYzRlMy00YmNlLWE2MWMtMzA1ZDQxZDUzYTY1
LzEvdUZzTWluV0pPay1PSHZEWnBOUVVlTml6TW5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXuYoVsdJ
yp4bvm1swsEH7P/wfZSro6hgIqa/kp2NXZu7WeAX1ug3AkqC5qGcjFXY9QeZzcx6
svNpA7Y2cMUG6ZRYCTuk9kWdFlLEtA3Mm9Vt+rRW8VUTMNtQBbbUPwv2AszOk8lk
YXKhDSPzxOTxuzVjtNNG1KmKvN68Ca8ew9zZBckh0vVZGH0cXOPx32ZoDamnpOXJ
BeYpZQHiCh2G5PuIC3z3jAJVRPyhNTJzm5P/9z9JoH14BiUyeJTFSWuUy2ODMXlW
fsH1BpMti1I0oeyO5CEA/9isQVoYdwJ+qRGPuZxDoYS+Z99YJnklJhRUCjlc7ZHr
upX8vYBBtdld9w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:41:42 2026 by rpki-client