Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5974d6-6c67-442b-993a-7ae5987bee62/1/UmLT8nzAW-WSS7e9iQ9-be_7SX0.mft
File:                     UmLT8nzAW-WSS7e9iQ9-be_7SX0.mft (raw, json)
Hash identifier:          srsIAbJSV4EoVLn/vXKRooGB8N3exnwzPCbulDIPGx0=
Subject key identifier:   E1:EC:3A:57:51:78:AE:B9:BD:AB:BF:58:20:0A:46:7D:A9:4F:28:23
Authority key identifier: 52:62:D3:F2:7C:C0:5B:E5:92:4B:B7:BD:89:0F:7E:6D:EF:FB:49:7D
Certificate issuer:       /CN=5262d3f27cc05be5924bb7bd890f7e6deffb497d
Certificate serial:       019D99D02E981CFFE874B8A73058E3D3A439
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmLT8nzAW-WSS7e9iQ9-be_7SX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/5974d6-6c67-442b-993a-7ae5987bee62/1/UmLT8nzAW-WSS7e9iQ9-be_7SX0.mft
Manifest number:          181F
Signing time:             Fri 17 Apr 2026 05:00:50 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:50 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:50 +0000
Files and hashes:         1: UmLT8nzAW-WSS7e9iQ9-be_7SX0.crl (hash: 5FKU4P8LM4nx8lG5tJUPawPYQoMYGoPNId1VHc5Jc+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/5974d6-6c67-442b-993a-7ae5987bee62/1/UmLT8nzAW-WSS7e9iQ9-be_7SX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/5974d6-6c67-442b-993a-7ae5987bee62/1/UmLT8nzAW-WSS7e9iQ9-be_7SX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UmLT8nzAW-WSS7e9iQ9-be_7SX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:2e:98:1c:ff:e8:74:b8:a7:30:58:e3:d3:a4:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5262d3f27cc05be5924bb7bd890f7e6deffb497d
        Validity
            Not Before: Apr 17 05:00:50 2026 GMT
            Not After : Apr 18 05:00:50 2026 GMT
        Subject: CN=e1ec3a575178aeb9bdabbf58200a467da94f2823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:80:e4:4d:9d:d6:00:f3:d5:11:de:cd:68:ba:
                    0d:45:af:cd:d7:50:06:dd:e5:a5:b8:47:b0:5e:13:
                    3f:89:ae:55:a3:1d:fb:e3:d0:0f:a8:98:dd:35:8c:
                    2f:35:84:b0:45:f9:51:e3:94:3a:8a:78:6d:13:c7:
                    ba:ab:4a:cf:34:0b:2a:9b:61:70:b6:30:e9:16:1f:
                    a9:5f:3a:df:7a:d7:27:ec:d8:fb:fa:93:9a:25:71:
                    d8:08:65:35:8d:c7:85:07:4d:95:9f:b6:25:14:36:
                    44:ad:6f:4e:de:f0:6c:fd:40:ba:fb:5c:66:16:a6:
                    49:8b:9d:bd:05:52:c1:35:3e:17:d2:50:58:37:e5:
                    c7:fa:6c:48:a2:42:ac:e9:3d:4b:27:b0:60:48:86:
                    8f:24:6a:8a:d5:54:ed:5c:18:1b:92:30:1a:c6:1c:
                    b1:f1:de:1c:eb:66:3a:d5:25:9b:66:28:49:a6:9d:
                    32:be:a3:79:62:0b:2f:f8:5f:24:04:b3:40:ac:48:
                    a1:a1:ac:b0:6e:49:97:62:ad:c9:5f:bf:31:11:51:
                    9f:74:7b:3f:c6:76:a1:dd:bf:8f:54:52:57:28:4f:
                    a3:0d:ea:6f:4d:94:b8:e8:9e:43:99:cb:75:f6:9e:
                    12:d7:76:f5:da:59:de:47:b7:bb:c8:89:b4:f3:ea:
                    06:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:EC:3A:57:51:78:AE:B9:BD:AB:BF:58:20:0A:46:7D:A9:4F:28:23
            X509v3 Authority Key Identifier:
                keyid:52:62:D3:F2:7C:C0:5B:E5:92:4B:B7:BD:89:0F:7E:6D:EF:FB:49:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmLT8nzAW-WSS7e9iQ9-be_7SX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5974d6-6c67-442b-993a-7ae5987bee62/1/UmLT8nzAW-WSS7e9iQ9-be_7SX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5974d6-6c67-442b-993a-7ae5987bee62/1/UmLT8nzAW-WSS7e9iQ9-be_7SX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:c1:6b:ec:24:1c:fb:74:7f:e0:66:82:e3:1d:0d:b1:b8:84:
         87:5c:28:0d:82:8a:f3:c4:ce:af:e8:10:43:16:aa:01:6f:d6:
         35:94:89:2f:fb:12:ac:56:ef:a4:80:e6:5e:12:f9:a5:19:cf:
         6f:4c:c0:a6:cf:35:b9:02:b6:f3:74:15:0a:bd:ac:1f:1b:0a:
         a6:6c:71:51:9f:80:09:2f:57:bd:e0:d9:ae:24:b3:22:94:c0:
         d2:6c:7e:4c:51:6c:6f:02:b8:f4:7b:26:02:89:f9:79:68:57:
         8c:d9:e6:6e:08:a1:21:ab:81:5e:49:c9:62:71:97:8b:8e:bc:
         a6:e2:cd:e0:8d:30:cf:34:28:c1:cd:cb:b1:de:8a:0f:26:99:
         a1:c7:76:f4:7c:5c:9e:36:37:ae:1d:30:e9:ff:90:14:16:ca:
         29:d3:cc:0e:e6:a4:d0:e5:53:51:f0:8d:26:fa:a7:2e:1e:44:
         12:e1:61:75:3c:67:48:19:24:32:d6:2e:67:05:37:69:9e:02:
         85:67:9b:f9:cf:0c:11:d3:5b:ce:8f:f6:cb:b3:6f:f9:f4:ae:
         03:4e:80:08:59:a2:28:da:bd:4b:ed:5a:bf:44:8c:c0:ea:a9:
         e3:f0:d4:02:dc:e8:97:ed:31:ef:ca:82:b5:f7:f2:87:7d:fe:
         4e:4f:39:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:13 2026 by rpki-client