Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
File:                     UxR_m8-R0qz49DW6ULgFBUXNH48.mft (raw, json)
Hash identifier:          qGhpUaoP+zhLQCC12psMVOOd5YZnmPRSBz2Mfv31qNI=
Subject key identifier:   E8:CC:5C:09:0A:D1:92:1C:93:28:AF:11:4F:18:7A:26:66:E3:9C:16
Authority key identifier: 53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F
Certificate issuer:       /CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f
Certificate serial:       019D9962BFA5B00458123CC19690D0CD81E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
Manifest number:          04D1
Signing time:             Fri 17 Apr 2026 03:01:18 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:18 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:18 +0000
Files and hashes:         1: 5Q7N-3fXWN3xn29Fyqm_IsIQro0.roa (hash: 5S1tBvFwi+gvAdb/PmkhPOQ/g472ZvTYAltGyhI7l3o=)
                          2: UxR_m8-R0qz49DW6ULgFBUXNH48.crl (hash: cZGyKptf1qdhQXL6ZDm3ScvQrwGpqzRa0fV7XzYAYUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:bf:a5:b0:04:58:12:3c:c1:96:90:d0:cd:81:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f
        Validity
            Not Before: Apr 17 03:01:18 2026 GMT
            Not After : Apr 18 03:01:18 2026 GMT
        Subject: CN=e8cc5c090ad1921c9328af114f187a2666e39c16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:01:70:f6:fb:85:40:d6:93:45:59:71:3d:56:
                    6e:2d:ba:8d:53:75:ba:56:34:f5:aa:1a:c4:ff:a3:
                    27:c0:2a:60:27:b1:e5:71:54:e6:76:e7:3a:a4:d8:
                    92:bf:e5:7f:db:83:56:dc:5d:2f:7d:d1:f9:44:6b:
                    58:44:35:ca:01:d0:f7:5b:ee:e4:0d:03:35:4b:24:
                    95:30:64:8d:3d:92:fd:0c:4b:ca:49:09:97:bf:e9:
                    e8:14:38:a1:1b:87:f9:68:02:7d:dc:e3:89:d4:4b:
                    24:89:cc:59:7f:91:41:b0:a2:8f:40:73:72:5a:09:
                    f5:be:60:52:c8:63:da:9e:2f:1b:da:d7:65:eb:c1:
                    bc:16:2d:34:c2:bd:a1:b7:d1:34:05:b9:3f:1b:d2:
                    51:cb:e0:77:b7:69:ae:12:54:ef:60:dc:da:d5:e0:
                    f4:3d:f6:07:26:94:f0:1f:22:77:2a:b4:20:8a:11:
                    f3:ae:47:02:4b:64:2b:5c:1c:9d:36:f8:b0:49:57:
                    1e:f1:11:70:70:3b:ab:d9:02:23:94:d1:4a:4c:e5:
                    03:7b:56:87:a7:57:90:8d:ea:b6:89:b2:f4:7b:46:
                    5f:65:72:e8:b1:30:33:b2:72:6d:26:79:04:20:04:
                    65:c9:d9:b1:89:0c:96:c1:7e:e8:aa:3c:d7:25:1b:
                    60:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:CC:5C:09:0A:D1:92:1C:93:28:AF:11:4F:18:7A:26:66:E3:9C:16
            X509v3 Authority Key Identifier:
                keyid:53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:f7:a4:a5:c7:f6:39:58:67:61:51:79:53:96:b3:ac:e3:11:
         d7:03:d3:8d:d9:14:d8:11:4b:fb:d3:c1:3a:f8:a9:5b:5d:a6:
         2b:35:01:3f:b0:57:c4:de:bb:55:5a:66:ae:3a:0b:83:0a:4d:
         f7:79:ad:99:ee:4a:80:d7:b1:9c:23:31:f7:e4:2c:9d:d6:b2:
         b1:e5:2e:59:c7:44:d5:26:5d:7b:65:b0:cc:33:94:83:f7:c0:
         b9:50:83:40:ac:50:dc:33:e7:6b:a9:82:f2:85:4d:d6:a7:2b:
         9f:26:d5:b6:90:5f:c9:f2:04:20:fc:a5:fc:17:6e:ac:73:e4:
         09:f3:6c:19:5e:57:4c:21:65:01:83:1f:1f:d2:92:4f:01:af:
         4c:4a:8e:dc:d3:c5:e1:70:60:2e:bc:ec:61:fc:fe:05:93:cd:
         1d:58:ab:2f:c2:4e:d3:cc:54:bd:8e:f5:08:b2:f6:18:29:d4:
         62:87:e2:af:2d:d6:d0:bc:13:48:5e:bd:03:45:68:eb:77:2b:
         7c:3f:20:d2:35:2f:2e:bb:38:44:44:83:84:d7:70:8b:19:27:
         d0:2e:07:7c:6d:88:6d:c5:34:7c:c2:cf:f9:cf:ed:20:45:ee:
         8a:5b:20:92:0b:79:fd:03:03:dc:45:5d:0c:3c:ba:8a:d5:0b:
         74:73:65:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:22:13 2026 by rpki-client