Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.mft
File:                     uUgRGa_hv_Ip-s1O-cjGGw-r6vI.mft (raw, json)
Hash identifier:          uV3IPXT18hmxcXNYQXegL+aqSG+7SFS9uAw/rDDwZkE=
Subject key identifier:   27:4F:12:04:8F:46:10:2F:46:7F:A5:61:B9:9F:C3:39:5A:C0:45:8C
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Certificate issuer:       /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial:       019D9AAC555A2C7ED175403316AD874F5953
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.mft
Manifest number:          18E4
Signing time:             Fri 17 Apr 2026 09:01:18 +0000
Manifest this update:     Fri 17 Apr 2026 09:01:18 +0000
Manifest next update:     Sat 18 Apr 2026 09:01:18 +0000
Files and hashes:         1: 2YaZrEMg7LZBl_zgZzUJtJwcln8.roa (hash: HB07P7vDHjc2ngfs2qPvHHK8zBcmGcnuzjmLRG9H2/8=)
                          2: 3CP9A7OpqeZxWNDBZB2FMrFjBmo.roa (hash: OB1Cwm1j1DIX+DeUVU1jhKhvcCo26vIQ9RsLXsmaqBM=)
                          3: 6zB9mXbeCeyLJLDTvRiz3FUFQMo.roa (hash: sMU20YzSMLsJcr1dShhbvyD3Z82VwF/2ZVMc8i8SKBY=)
                          4: 8EcPjtOi5VourfckFqWnwtJzZBI.roa (hash: Ulj1oZ7JFoq0409+8WiASL80L1+7fnLWC5C6q1nR3hw=)
                          5: 9_F-ohmzuw9hqAt9IdDaoYs-_mM.roa (hash: 8numDPiPkLyyLOp9MrexvsAw0xjV1AhK6wH2Jp+kVUY=)
                          6: AkRFbnwzoztD3qDAyc0G5wKv8tE.roa (hash: IbQO77L+Ks6p3rkU6US6zJ5skdqAK1giNc7/wasG5Yk=)
                          7: FAyCV_5AMkm3Dh7cfCjXmtUZjwg.roa (hash: peTRcdeTP20Eip2O22kje1Yb5TbeukYoj6gR+Z/N6g0=)
                          8: GRUm5GfHveJTzU1B2lLlNjHppf0.roa (hash: HpFsl8NX4L5xu5KdGRgJKlork7owVsbMFMY53HnY6Sw=)
                          9: JeLE7WUu6LtNls_s6nCOOIC9pOA.roa (hash: Mkr+eVg4WLRYazKNuaLpdJQ0Vwc9H2J7Vgf0WluRsEU=)
                          10: L3DBWKbTlbf4MCtJO8CXmBG-lA0.roa (hash: rbkJMDAMnYZ7NpmTnA/fT7CynzLfjKXYz7FtvscrXFw=)
                          11: MTuNC7YxMqCq1p4XgA1qyILUuXU.roa (hash: +/gYg3JzJJ2E43y6Ufu5yuzL4TSgU/YcFEdmXyNUrgk=)
                          12: Qj8wVYz1JCVbjxzit7-E53tUNBY.roa (hash: lOuK1ltUt6BHMTjv7FnM5C8qJWpHHZufgNuQLxfmMtQ=)
                          13: WKCS9E7LsecMwc9xirBl7Kwg-64.roa (hash: G8Y5ZOsiY82ntJ1Y790c2dXR3AiID90GNfs01goPY0k=)
                          14: WVu0MFUum9kAhDujtPh81S6Gej8.roa (hash: NzJFiXqiVNf4MDC3ccb25g7foh0VZnNNX6AioPiB5g0=)
                          15: X3dyFFJkWZ_5C7a0JwroT3BzGyo.roa (hash: oojtdwuF0DNI776adrLDqDwOyCRSKnaBuQ3LrX5M380=)
                          16: YgxrMVOG7AvOCLHZdSlMSHUnFyU.roa (hash: ijRF/EOB5f7k1V0BlsNAIXkBXD94uVXkEThmH6/EVvo=)
                          17: _YMpWh2knFx17mWKMz6OWNB71wI.roa (hash: kqKfLm0dJHq7MNpL7rehc1HIyO5pN3Zo2YLh1B7cFN8=)
                          18: _f5RIellOsao5KCw2i7vFeQR7rM.roa (hash: qXGAOHQOuYNk1rdKz+v+OM93px2cELNi7NieboxK/CA=)
                          19: aylPXxqMDRfx0z59m0Qg4TkeSUU.roa (hash: AZ+EoLNJ9zrGPVF3rUJeEwtRzUmg9XrvBoLirJ7wRJM=)
                          20: ehgsBd8PJDT5qpaKxlbMYCWT_Q8.roa (hash: ouAYxXY5TAVo48ZXMv3m5IPRyC64xRrDoFKgajbVFoE=)
                          21: izsJArVTYPgXkzsVm7JYevOPbrI.roa (hash: Tyovzx3ds4LVJvPRH4maivG6LcFx8jAmSg+LlJ2SMVw=)
                          22: lTWXPz06bEAmSyhncINOkWQJjFk.roa (hash: v+buH1cwwJcmc8sezDk7Kp2hgjLe/QgwmP0vygPswHo=)
                          23: sKihYiTTeXtJMRlSivKaHc4znfk.roa (hash: 8vw/9Ifo/HeUu8hYlKJ2DwzAyaRMQWsLG25YhwxC+Wg=)
                          24: tXyf14C6BVlBhG5hzXwjyepZ_Ho.roa (hash: +FfvqJYzN4HA9SavBJh5yjndygl28w9AJO0uaoLMJag=)
                          25: u7WqNNWmQvLm2ApBiH3WqiKbFv8.roa (hash: ddSXhdjqoU8AGRCQ8Zsoe0zHo4Qki3rGL0wDNBR9/lY=)
                          26: uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl (hash: r0Xvkok/6ifUNQYVCBwvFCIhdmQ4MDSD31p8ZCtZrS4=)
                          27: xHUkaCGlT6QuB7RyzdwG0QYj_Lo.roa (hash: 4007EqJZkMhf2bhN6qck9URjfrtwBxEOTcJ4ek2CBl8=)
                          28: zHuQT1h6WymF9W0YTCrGMOffBdY.roa (hash: G5XgkiF52iU56SNjiVgsr4R/Y20EWE7ywulEZTWtMSA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ac:55:5a:2c:7e:d1:75:40:33:16:ad:87:4f:59:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
        Validity
            Not Before: Apr 17 09:01:18 2026 GMT
            Not After : Apr 18 09:01:18 2026 GMT
        Subject: CN=274f12048f46102f467fa561b99fc3395ac0458c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:02:e6:ef:75:77:fe:44:fd:cf:99:18:0e:ed:
                    c4:a4:a4:43:8a:0b:af:3f:74:40:ba:88:fe:51:0b:
                    1b:0f:e6:67:d6:6b:25:d2:2b:24:5a:b7:31:30:3e:
                    d9:0e:0d:71:4d:f6:1f:a7:46:b6:18:bb:24:45:04:
                    19:8f:fe:a5:f6:ec:8c:f4:36:cb:cf:fe:23:bc:a2:
                    e6:21:4f:b2:4b:d6:3b:b9:fb:fb:ed:5e:2c:21:0c:
                    51:b8:6f:82:00:43:a5:b5:8a:3d:67:7c:30:01:c8:
                    fb:f9:2e:28:f9:6f:f1:36:3f:9a:82:fd:cc:08:89:
                    7c:32:1c:75:a5:a1:76:14:8c:7d:43:75:04:e6:19:
                    32:d5:57:af:c8:f0:66:db:5f:f6:76:bb:99:1d:6f:
                    74:5c:cb:fd:be:32:40:e8:c1:f4:35:1f:c5:66:b3:
                    fb:2a:39:b5:6b:40:47:80:7c:cb:5f:45:df:f7:47:
                    d4:e5:c7:4b:59:65:e5:3c:b2:ac:97:e7:18:a0:5c:
                    bc:b9:96:b2:03:4e:62:78:89:54:f3:26:38:56:0f:
                    24:f0:c5:90:fc:81:d9:4d:31:95:f0:4c:c0:9a:e0:
                    ae:ce:90:08:0d:17:6e:7a:45:80:65:10:e0:23:35:
                    58:31:bd:96:d1:88:f7:53:e0:8a:d9:fc:6a:46:04:
                    00:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4F:12:04:8F:46:10:2F:46:7F:A5:61:B9:9F:C3:39:5A:C0:45:8C
            X509v3 Authority Key Identifier:
                keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:0a:9b:1c:69:7f:a9:81:bc:b7:b7:fb:f5:3d:5c:aa:6c:ef:
         24:f9:ca:b7:d0:cd:91:96:dc:6e:a4:3e:20:e2:e3:a6:db:37:
         67:8c:25:1b:83:bf:e6:4e:c0:67:e1:a7:cf:09:55:07:29:e9:
         e6:37:8a:63:87:c8:bc:25:90:2b:9d:8a:20:8e:41:9a:da:8c:
         4d:13:51:6e:51:5c:67:8c:2e:42:e4:54:bc:87:06:49:dd:2c:
         3b:72:5d:23:98:af:99:af:d1:78:8f:0e:4c:38:61:bb:26:b0:
         95:85:95:7b:18:d1:9d:e1:70:2d:84:c9:bd:96:64:8e:48:86:
         30:88:0a:da:95:cc:94:a1:44:1f:05:f6:4a:8e:f3:b1:85:73:
         44:3a:63:3a:44:9a:8a:a4:97:97:9a:26:ab:3e:e0:4b:6d:af:
         c4:56:86:a2:e9:3d:b9:1d:35:fe:86:d6:98:bd:e8:6d:f0:b2:
         cf:c2:5d:4c:5f:38:72:54:50:c0:f1:23:6e:d4:d9:86:76:61:
         03:74:a2:be:e0:b1:01:8d:3d:a5:b5:2a:b0:ad:ab:f5:4a:2e:
         9a:ef:14:93:82:ba:24:a5:21:af:68:ae:08:4f:7d:4f:01:6b:
         c9:d4:fb:a2:fb:51:8a:02:65:be:e5:50:af:8d:7a:86:28:fb:
         75:f8:de:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:00:47 2026 by rpki-client