Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
File:                     UNSsMgllq0mREIUBoGAqaJPmP-w.mft (raw, json)
Hash identifier:          95LapBPM5otW0Q3xIJzrjcldsrXk4KFuR3ZlP5ZzAzY=
Subject key identifier:   37:50:C3:CF:32:8C:2A:E2:31:E8:2D:4C:A3:B0:96:D5:3C:95:7F:57
Authority key identifier: 50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
Certificate issuer:       /CN=50d4ac320965ab4991108501a0602a6893e63fec
Certificate serial:       019D97AA8B4741EB59123198C3B50535B6BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
Manifest number:          18C7
Signing time:             Thu 16 Apr 2026 19:00:29 +0000
Manifest this update:     Thu 16 Apr 2026 19:00:29 +0000
Manifest next update:     Fri 17 Apr 2026 19:00:29 +0000
Files and hashes:         1: UNSsMgllq0mREIUBoGAqaJPmP-w.crl (hash: v7ys8dz+McUWNkfWG3vs4JeVPKYG123zZhLeTXdIB5U=)
                          2: aSQK_Cn7Rj_Qk5VH_2zX0Del1xI.roa (hash: AJLz8V9DTfSj8uSOdLs4ccNuem/rratwpuZJ7Nlu/rU=)
                          3: tw_BqpZzxh26R1N5YCAOWWyOrCQ.roa (hash: 6Q4E50IA4gfxHi7asjcxRHabRyp2c+3fX6uruEOwttg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:aa:8b:47:41:eb:59:12:31:98:c3:b5:05:35:b6:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d4ac320965ab4991108501a0602a6893e63fec
        Validity
            Not Before: Apr 16 19:00:29 2026 GMT
            Not After : Apr 17 19:00:29 2026 GMT
        Subject: CN=3750c3cf328c2ae231e82d4ca3b096d53c957f57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:db:ba:25:93:f7:42:66:6b:12:f2:25:a3:1b:
                    6d:c5:1c:3f:f2:6a:a9:35:f7:b1:a4:d4:9d:59:aa:
                    8f:56:67:54:0d:22:1d:7f:90:01:09:d5:53:65:6d:
                    b3:b2:ad:d8:91:d2:89:41:74:39:d8:f6:f3:37:a2:
                    ac:8a:71:e5:7e:f9:54:60:95:81:35:49:29:69:29:
                    09:a0:91:46:66:7d:4a:dc:26:b0:80:d9:a2:b4:5f:
                    61:c5:f7:9a:42:47:44:ca:23:fc:09:d0:c5:89:bf:
                    d0:63:7c:fd:e4:04:05:ab:d6:a5:bd:53:3a:86:26:
                    c9:95:85:cc:08:37:87:d2:c7:d0:52:7d:5f:ef:a9:
                    93:bf:78:96:33:97:a1:15:8c:bd:ea:e8:fe:ac:35:
                    0d:11:f3:d8:e7:d3:96:1e:a1:db:80:ec:ea:f5:26:
                    3f:23:29:4a:a4:71:56:9d:70:de:f8:68:da:d2:d7:
                    83:c2:62:25:0a:ca:de:e6:cc:dc:75:74:c1:af:0c:
                    74:84:06:c5:fa:e9:ec:ae:2f:55:a6:53:3f:d8:f7:
                    06:4d:2b:e9:e5:27:6c:44:2f:2d:82:a6:77:18:52:
                    b1:b6:9c:ee:3e:58:9a:33:0d:88:9e:6f:66:4a:b2:
                    e9:be:b7:4a:e3:ef:fb:38:62:dc:59:0c:35:c9:02:
                    b7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:50:C3:CF:32:8C:2A:E2:31:E8:2D:4C:A3:B0:96:D5:3C:95:7F:57
            X509v3 Authority Key Identifier:
                keyid:50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:40:3d:ff:70:02:43:aa:19:73:fc:ed:9e:e9:f3:f0:f8:0d:
         7d:50:27:79:87:e7:f1:f7:fe:42:94:53:15:60:e7:18:66:94:
         4e:91:10:87:fd:c9:cb:39:6d:44:b7:de:af:20:0c:63:d8:04:
         35:71:c7:89:6e:98:5e:d3:bc:fe:d9:55:ff:6a:7b:15:dd:18:
         b4:3c:aa:0c:8f:ab:d8:c0:67:41:e0:b3:4f:9e:1d:03:9b:1a:
         39:4c:29:51:45:10:0a:3a:fc:12:e4:99:d4:9f:6d:88:61:b6:
         78:16:91:88:d5:48:a3:b9:55:fa:9a:13:84:53:81:95:28:21:
         ba:47:01:0a:d2:a2:6b:e8:69:27:0d:34:82:5e:40:15:a3:47:
         33:9c:1a:51:75:8c:3f:57:f0:34:08:e9:e6:7a:60:9d:1a:25:
         cd:60:1e:ea:1b:43:f4:0d:e8:ad:9c:3e:91:16:33:56:88:db:
         45:7d:42:9c:9d:d6:67:31:8c:51:cc:60:94:0d:67:e7:ff:c0:
         45:9a:4d:bb:c5:c3:bb:4c:71:9d:41:cc:92:46:4d:33:4f:54:
         fc:43:f2:ce:cd:c0:57:7f:ba:c1:88:e7:40:a8:e0:47:c6:49:
         7b:82:80:38:7f:cb:3f:7b:f8:ef:70:9a:81:f8:5c:64:9d:48:
         c2:41:3a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:44:17 2026 by rpki-client