Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft
File:                     uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft (raw, json)
Hash identifier:          LYJK0kDaTNi5vCVYEKnnOo+5GJA95RBrNOr7+Z5wh48=
Subject key identifier:   9F:0C:D5:36:29:87:2A:98:CD:C6:AB:6D:84:FB:E2:B2:E7:20:8E:8A
Authority key identifier: B9:92:F3:8B:55:BF:C1:37:BB:9E:D0:26:FA:00:33:EE:F8:FA:7D:50
Certificate issuer:       /CN=b992f38b55bfc137bb9ed026fa0033eef8fa7d50
Certificate serial:       019D99991A76487B7FFEF2A0B0F55EE7058B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft
Manifest number:          0FA8
Signing time:             Fri 17 Apr 2026 04:00:40 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:40 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:40 +0000
Files and hashes:         1: V86zOW4S0Fjww5-KB95mFtDeXJ4.roa (hash: ByT5mUEpwlYcZ7xfUeVLy1qsi8YMupoQVKY3sZ8LDZ0=)
                          2: uZLzi1W_wTe7ntAm-gAz7vj6fVA.crl (hash: T+hjsxDqJylD6F6dT+asi7O1jAIPI3WANVfyKM45f7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:1a:76:48:7b:7f:fe:f2:a0:b0:f5:5e:e7:05:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b992f38b55bfc137bb9ed026fa0033eef8fa7d50
        Validity
            Not Before: Apr 17 04:00:40 2026 GMT
            Not After : Apr 18 04:00:40 2026 GMT
        Subject: CN=9f0cd53629872a98cdc6ab6d84fbe2b2e7208e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a2:d2:f9:9a:65:2d:2a:55:04:cd:b6:4a:e4:
                    ac:68:16:98:ba:2a:78:df:e8:23:4e:c8:5d:fd:3d:
                    86:20:e6:27:00:6d:0f:51:5f:b0:4a:d6:77:ad:4a:
                    1a:50:6f:15:13:df:87:dc:d5:c1:c0:b4:4e:f5:74:
                    df:4e:e5:51:b3:96:e4:8e:bd:16:8e:36:2e:10:29:
                    dd:71:d7:8b:5e:8b:e2:df:03:05:6b:6c:f7:47:69:
                    0f:05:0c:c7:8b:77:6c:a8:5e:89:99:b2:40:10:b2:
                    5a:29:a3:09:87:25:03:5b:51:20:01:d1:12:f8:0f:
                    e6:7c:4b:9e:3b:df:e7:b6:7a:33:07:2e:ca:ca:7c:
                    84:9d:e5:38:b4:f5:3c:8e:46:78:1d:9a:ee:41:31:
                    57:d5:b2:92:c8:2f:fc:d5:ed:e8:af:d3:d4:5c:f7:
                    2e:b2:ef:2c:75:12:52:c3:20:54:61:19:98:01:1d:
                    f1:b2:eb:f7:3c:7f:f8:5c:6a:f8:58:01:26:3e:5c:
                    22:9c:af:84:1d:b4:93:8b:71:14:49:60:2b:d7:57:
                    31:e8:8d:15:47:6f:f0:b4:23:3e:8f:60:48:1c:14:
                    8a:d7:73:e8:41:58:65:2d:46:0a:1b:f8:ed:41:ab:
                    b1:0c:b7:11:e4:0e:b0:63:11:db:22:03:c2:eb:42:
                    e3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:0C:D5:36:29:87:2A:98:CD:C6:AB:6D:84:FB:E2:B2:E7:20:8E:8A
            X509v3 Authority Key Identifier:
                keyid:B9:92:F3:8B:55:BF:C1:37:BB:9E:D0:26:FA:00:33:EE:F8:FA:7D:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZLzi1W_wTe7ntAm-gAz7vj6fVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bb4854-1c51-4bc7-8b24-9bc3e56f7af7/1/uZLzi1W_wTe7ntAm-gAz7vj6fVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:bd:26:4d:62:0c:5f:1d:c4:1c:3d:76:19:a3:ac:8b:c9:88:
         1f:80:4b:d2:08:e0:9a:b7:77:0c:fa:f3:99:e5:99:d9:91:dd:
         44:ff:ab:71:ae:8b:2d:05:a5:0e:9b:7a:bf:35:de:e2:f2:45:
         e3:be:8d:31:27:ff:0a:7d:22:cc:21:de:a1:cf:62:3c:61:b1:
         f1:0c:a1:0b:bd:0d:77:04:c9:9c:9d:3a:96:31:4d:2c:f7:6d:
         39:62:83:b8:60:d5:71:69:c7:95:7c:e9:86:5b:d4:c4:fa:04:
         a1:75:f0:24:34:53:3b:da:99:7b:82:ba:a9:94:77:08:f9:ac:
         36:a3:57:e8:41:00:b6:0e:d7:e3:81:60:9d:7f:11:d6:a6:ef:
         33:47:b2:89:60:bd:ed:d2:84:e3:79:37:b8:89:ca:db:df:e0:
         8c:96:bd:a6:bf:59:c0:a4:9f:93:a0:7d:3f:aa:4a:78:3b:9b:
         7f:68:d0:76:e5:cc:11:11:18:35:3d:c7:b8:c8:07:0d:fb:3a:
         13:41:2b:ad:29:12:a5:0d:61:06:e1:36:44:29:63:17:4e:df:
         91:a1:bc:bd:68:8b:74:30:b8:84:48:e1:79:2a:11:66:36:ab:
         b1:77:02:c9:3a:d6:b5:ab:18:7f:48:2e:51:43:fb:53:f3:00:
         37:53:e7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:15 2026 by rpki-client