Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft
File:                     UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft (raw, json)
Hash identifier:          ipxGiIOlTwZJTKWS4nbNcL1NNZb9Io+QH5+0RAv0+9M=
Subject key identifier:   CA:2C:15:86:3F:AC:BC:4A:90:74:E2:85:D6:B5:A1:90:FE:6C:14:95
Authority key identifier: 52:A1:65:DC:3A:AF:BE:2C:62:E2:65:FF:10:43:27:A3:E6:75:F8:9F
Certificate issuer:       /CN=52a165dc3aafbe2c62e265ff104327a3e675f89f
Certificate serial:       019D99D0B067248AAB6473282792B99232C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UqFl3Dqvvixi4mX_EEMno-Z1-J8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft
Manifest number:          1226
Signing time:             Fri 17 Apr 2026 05:01:23 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:23 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:23 +0000
Files and hashes:         1: MA1FZ0Kd9wdwMtmBadU0hhtttm0.roa (hash: QAEnbojUEEoHhXNLCPe+Qwxb4hVhw+T32YK80jDjtFM=)
                          2: RnXeifK4Zy4z7Hr-0Qy9PPM8URc.roa (hash: HgjgyZAigQ/nEaAqI1161JCp8LT44pVwgm+Zp8Usqxs=)
                          3: StMbJtvRlQO14wUNmurXIGj_dCc.roa (hash: nRl9T6KCGuQWggl4v4cSteE2c3YQrGkaeT7wlEMK0FI=)
                          4: UqFl3Dqvvixi4mX_EEMno-Z1-J8.crl (hash: OTbTvTLQMTsmG+bkVuC72w/Y8UJ5brgIyyTgw/cTmOM=)
                          5: Z8pxDWhAuztTIIzKExdxnSnHjTs.roa (hash: 1hBbd5uxBcduETbV3q1xDGuzk2oS13nrjozvxJvpvno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UqFl3Dqvvixi4mX_EEMno-Z1-J8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:b0:67:24:8a:ab:64:73:28:27:92:b9:92:32:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52a165dc3aafbe2c62e265ff104327a3e675f89f
        Validity
            Not Before: Apr 17 05:01:23 2026 GMT
            Not After : Apr 18 05:01:23 2026 GMT
        Subject: CN=ca2c15863facbc4a9074e285d6b5a190fe6c1495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:62:33:f5:63:52:b7:43:d5:9b:49:1d:cb:72:
                    49:20:c9:51:a3:4e:a5:d0:6b:16:b2:9d:8a:e8:0a:
                    5d:c0:f1:0a:ae:62:7a:33:fa:24:43:35:2a:c7:9a:
                    b4:cf:0a:af:e2:7b:23:38:fc:23:b6:0d:c2:50:da:
                    ac:c7:4e:56:79:5b:a4:0e:5d:75:28:6b:b8:97:10:
                    a5:78:83:84:ec:bb:00:4b:b9:9e:ad:f9:60:63:ab:
                    5f:a0:e9:3e:8a:6b:31:a6:67:3b:04:a9:b9:ac:28:
                    89:c4:21:e3:74:1e:14:83:0b:72:ab:96:2d:15:e8:
                    d3:c9:74:f0:f3:86:e4:fb:c6:b6:9c:75:bd:c1:17:
                    a6:be:32:58:87:92:3f:df:3b:cc:64:03:6d:4d:98:
                    f2:af:2b:1f:ee:53:58:ff:03:83:6d:5f:70:3d:ce:
                    77:f0:69:b2:d0:58:a5:5b:10:14:90:33:72:29:56:
                    95:4a:89:f2:d6:98:54:5d:d1:36:fe:e0:42:87:5c:
                    91:28:23:3a:fe:08:7c:03:6a:e9:6c:d1:5b:03:68:
                    1e:fe:06:4b:84:d2:3d:be:8a:94:65:40:2e:cb:2f:
                    15:2d:7c:a3:e2:70:15:41:5f:97:27:53:18:84:7e:
                    fc:a8:4f:23:48:b9:fc:6d:f2:18:72:55:85:e4:f9:
                    54:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:2C:15:86:3F:AC:BC:4A:90:74:E2:85:D6:B5:A1:90:FE:6C:14:95
            X509v3 Authority Key Identifier:
                keyid:52:A1:65:DC:3A:AF:BE:2C:62:E2:65:FF:10:43:27:A3:E6:75:F8:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqFl3Dqvvixi4mX_EEMno-Z1-J8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:eb:6c:60:28:96:03:ce:12:e6:c5:c8:70:b7:09:6a:ff:0c:
         b7:e3:cb:d0:23:9d:ba:37:c3:15:c9:41:86:f4:5a:25:8d:db:
         c2:b7:95:49:a2:e8:60:e1:3a:52:13:5d:05:fc:55:7e:4d:54:
         8c:bd:7a:ce:d8:75:b4:73:71:75:75:2c:f5:67:af:3b:68:c2:
         3b:99:e4:cd:9f:73:e7:8c:b6:41:f6:8e:e2:5b:c1:09:53:38:
         5d:b5:9c:66:db:eb:c9:ac:cd:cf:b8:f2:ad:0b:01:62:aa:99:
         87:45:52:92:16:f7:2c:4e:2b:13:c6:9a:58:b6:be:ae:42:38:
         67:83:ca:72:de:65:02:a0:81:19:b9:2e:98:96:a3:b3:49:d7:
         72:c0:19:69:d9:f6:02:c1:ce:64:eb:6e:b9:4e:6e:fb:90:60:
         7b:9f:52:e9:f5:13:e2:ed:a5:aa:b8:e6:0c:ce:36:d1:6d:94:
         dc:f3:8d:bd:e3:b1:2c:dd:ec:56:29:ec:7b:8e:49:dc:89:27:
         22:ba:b1:55:41:83:94:6b:da:26:59:20:19:09:db:e2:8e:6d:
         8c:42:fa:5b:0d:82:b1:45:e0:23:56:0c:70:21:ae:0e:4e:78:
         ba:74:57:db:52:aa:24:c8:43:d0:89:11:39:2a:c9:27:e5:45:
         ce:2e:55:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:39:24 2026 by rpki-client