Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.mft
File:                     URG_0pCvtSDrpBT3ijl1C36Z9MU.mft (raw, json)
Hash identifier:          8j0n4irInH5Sp8DZ/zyqN84VS3CUZYsBGJQHR6b1Aq4=
Subject key identifier:   D7:19:C8:A1:F1:DD:E4:36:E3:91:00:65:4B:5D:75:01:84:C1:7C:E4
Authority key identifier: 51:11:BF:D2:90:AF:B5:20:EB:A4:14:F7:8A:39:75:0B:7E:99:F4:C5
Certificate issuer:       /CN=5111bfd290afb520eba414f78a39750b7e99f4c5
Certificate serial:       019D9A06E2B6F8AD1F7322278BAE8D8A56E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/URG_0pCvtSDrpBT3ijl1C36Z9MU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.mft
Manifest number:          05CF
Signing time:             Fri 17 Apr 2026 06:00:35 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:35 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:35 +0000
Files and hashes:         1: URG_0pCvtSDrpBT3ijl1C36Z9MU.crl (hash: cxD6gjyha5CxIhi5/MK8sAE0OHbkQ/kjQunRpruTyow=)
                          2: dSfrM8-FFVFUm-WrRcQUFuwY6Wo.roa (hash: E9Zm6PgzEcuKBh7gIYFfOkqLKVETB2A5ggtdlN8mCJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/URG_0pCvtSDrpBT3ijl1C36Z9MU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:06:e2:b6:f8:ad:1f:73:22:27:8b:ae:8d:8a:56:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5111bfd290afb520eba414f78a39750b7e99f4c5
        Validity
            Not Before: Apr 17 06:00:35 2026 GMT
            Not After : Apr 18 06:00:35 2026 GMT
        Subject: CN=d719c8a1f1dde436e39100654b5d750184c17ce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5f:79:0b:14:9f:3d:d4:52:68:11:4e:44:06:
                    29:07:3c:0f:67:b2:58:bd:a2:c2:9b:4e:1a:c2:45:
                    f7:45:0e:ea:36:fb:61:98:8c:6f:18:d3:92:cd:08:
                    6f:df:23:a3:00:93:ec:1a:30:72:6a:9c:e9:3f:b2:
                    17:fb:d1:d8:c5:c3:83:be:26:dc:ba:55:7b:16:48:
                    7d:b3:e6:d0:79:dd:0c:4d:54:ea:ff:26:5c:b8:61:
                    0b:9d:49:67:ca:0a:ed:29:f5:56:ad:a0:e7:79:f7:
                    39:74:36:e6:92:4e:9f:9a:de:b8:5e:de:59:31:af:
                    fe:ec:af:1a:af:1d:e4:53:9d:ad:b7:0f:d7:9a:5e:
                    a7:e2:2b:3d:38:69:39:0c:6e:ef:9f:54:94:5a:35:
                    5d:1d:dc:09:21:4c:08:ac:04:44:b8:0e:18:55:d5:
                    5c:0d:9f:98:dc:36:49:57:ad:91:8c:cb:90:92:ba:
                    52:dc:d5:ea:99:14:e0:4a:0d:da:c4:ac:34:cb:49:
                    30:e5:06:d8:b3:87:48:f9:a9:22:4b:17:d6:6b:e3:
                    f0:c5:f4:95:5b:61:60:6b:dc:c0:16:09:06:17:59:
                    a3:6d:9e:79:c6:ad:94:1e:a7:d9:03:df:4d:35:6a:
                    ee:5e:6d:6e:be:e8:b9:07:3b:05:5f:0e:0f:d1:e3:
                    5a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:19:C8:A1:F1:DD:E4:36:E3:91:00:65:4B:5D:75:01:84:C1:7C:E4
            X509v3 Authority Key Identifier:
                keyid:51:11:BF:D2:90:AF:B5:20:EB:A4:14:F7:8A:39:75:0B:7E:99:F4:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/URG_0pCvtSDrpBT3ijl1C36Z9MU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:00:99:f9:ab:67:ba:a3:d0:7a:06:33:c5:57:9f:dd:4d:a5:
         0e:e2:8e:be:92:83:b0:6d:75:ed:fd:c2:7c:4c:08:f9:a8:79:
         b6:4b:9c:72:cb:a9:32:1f:37:a4:5e:82:2b:79:cd:69:a8:90:
         ee:08:6a:80:9c:5a:f7:6d:a3:d6:87:2b:51:da:fe:9f:93:c7:
         49:44:7a:c3:c7:e0:11:00:6e:ed:65:12:bc:cc:7f:df:09:05:
         41:16:1d:03:88:ea:79:1a:cf:d6:74:0a:44:77:45:19:f9:ac:
         5d:ea:56:d9:25:c9:10:c6:5b:5d:0f:04:ab:90:9f:b5:80:01:
         ac:73:9c:d7:bd:d1:c5:92:90:c3:7e:d3:fb:e5:23:98:aa:82:
         db:ac:8c:25:b3:3e:94:53:2f:45:d4:1b:07:d3:d2:32:c1:c0:
         99:d2:af:be:a3:ee:96:a4:f2:ab:ce:2e:02:89:16:e1:e7:50:
         21:4b:53:2b:7b:61:6e:65:d2:85:e4:60:7a:3c:1a:31:be:23:
         a4:5e:d2:ea:ea:70:7d:3f:cf:7a:c4:92:3b:4b:39:2d:08:64:
         b3:60:55:c5:3a:4e:07:74:cb:9c:57:97:00:cd:f5:bc:22:e9:
         89:ec:4a:eb:cc:08:6a:4d:e7:b4:af:fe:d7:ce:47:66:e5:79:
         73:c0:cc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:10:08 2026 by rpki-client