Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
File:                     UEUj-IEevlqjWYURpI87rwABqOg.mft (raw, json)
Hash identifier:          u0CNss9itP1f24hcpQbp6zVG6zcCcgYXQt5dgS5y3RY=
Subject key identifier:   59:43:8A:7E:35:97:BC:B1:9F:C2:30:96:93:4D:36:6E:8B:99:05:53
Authority key identifier: 50:45:23:F8:81:1E:BE:5A:A3:59:85:11:A4:8F:3B:AF:00:01:A8:E8
Certificate issuer:       /CN=504523f8811ebe5aa3598511a48f3baf0001a8e8
Certificate serial:       019D99997E11AFCB906AC596EF8F4F61E0B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
Manifest number:          1361
Signing time:             Fri 17 Apr 2026 04:01:06 +0000
Manifest this update:     Fri 17 Apr 2026 04:01:06 +0000
Manifest next update:     Sat 18 Apr 2026 04:01:06 +0000
Files and hashes:         1: 610lUfbKAqkAzAw_mgQVL_MvKpw.roa (hash: Y6vB30I7ZhO4cnzek1W0dylwKGe+/gVJf/gvXQMZtgs=)
                          2: UEUj-IEevlqjWYURpI87rwABqOg.crl (hash: ijYo1nmFYZlpPy/qI0kL8z3mg4lFyL/TZzmQJg1xgNc=)
                          3: zLRh9u6xLJnwtdY0ORDwft0JoyA.roa (hash: +NvH+iEfI87IdOFqZwYbFUot/dODFAweRpk/UBNPhTc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:7e:11:af:cb:90:6a:c5:96:ef:8f:4f:61:e0:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=504523f8811ebe5aa3598511a48f3baf0001a8e8
        Validity
            Not Before: Apr 17 04:01:06 2026 GMT
            Not After : Apr 18 04:01:06 2026 GMT
        Subject: CN=59438a7e3597bcb19fc23096934d366e8b990553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bc:cc:ac:98:0f:84:44:11:8a:b3:96:e7:b4:
                    f6:0b:7b:75:6c:16:da:a5:af:2f:9c:e2:4e:7c:30:
                    8a:70:55:a2:16:6c:f9:5f:ea:b9:e9:ea:d6:b5:91:
                    da:6c:77:23:56:a8:fb:e4:b4:bc:ea:8e:3c:fe:5d:
                    98:18:fa:bd:16:62:e5:e6:f2:93:a4:66:0b:38:c2:
                    0d:68:2a:7c:3a:c4:1c:91:79:ff:c3:12:1e:09:06:
                    37:9b:c0:88:5b:a7:ae:c3:e2:a5:43:01:b7:b2:ea:
                    16:8b:88:d3:95:76:2f:0f:ae:5f:ad:26:b4:ee:91:
                    ca:f6:0f:2c:94:4b:b9:1a:29:ec:04:c9:1b:61:20:
                    f3:6f:53:c1:8a:90:bf:8c:2a:e5:fc:06:23:db:f7:
                    b6:eb:88:19:7e:7b:a8:8a:88:40:22:50:d9:96:0f:
                    71:21:bc:21:79:9c:66:29:a1:65:9a:c0:68:c0:11:
                    d0:5e:57:5c:1a:b2:0a:57:db:28:72:b8:c7:6c:bc:
                    25:d3:63:0c:de:8a:41:b3:f2:9a:65:f9:6c:d7:87:
                    69:74:68:50:39:e3:99:6d:7a:95:64:68:80:4e:4d:
                    84:3a:cf:2c:33:90:df:9f:49:63:ba:92:26:a3:10:
                    45:7c:a9:ae:19:95:e1:9c:e3:9e:3c:0b:93:b9:b4:
                    2f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:43:8A:7E:35:97:BC:B1:9F:C2:30:96:93:4D:36:6E:8B:99:05:53
            X509v3 Authority Key Identifier:
                keyid:50:45:23:F8:81:1E:BE:5A:A3:59:85:11:A4:8F:3B:AF:00:01:A8:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:37:54:78:c0:ea:04:f9:08:1d:1d:8d:09:bd:6f:87:77:ea:
         f3:37:36:91:a5:36:27:f0:14:f2:2b:ec:8a:18:a0:94:8c:4e:
         0c:98:15:c6:f1:3b:f6:53:4c:5d:0d:e2:74:d5:51:53:7c:64:
         8a:a7:f4:05:1b:9f:8c:6f:53:47:bd:8f:f5:a7:ab:4e:78:09:
         3f:4b:78:9f:52:97:e0:53:1c:74:43:54:4b:91:7f:b4:ee:05:
         f8:94:43:a7:0a:86:af:1a:0e:b9:5a:41:62:a1:29:a3:bb:c7:
         50:fe:bd:e1:af:b8:bc:f0:65:f6:bc:75:44:b5:db:32:58:0c:
         10:e5:64:df:db:0b:d1:f1:ae:b3:5c:53:6d:6d:ef:7a:47:03:
         c5:57:9a:19:9a:90:50:c1:4c:4c:83:08:d9:9c:31:ae:4b:34:
         52:b6:4f:b0:d2:91:2a:d1:72:3e:ce:1f:49:37:5d:43:cb:27:
         b0:68:90:a6:e3:a9:39:20:98:2e:16:0e:17:c6:8f:8a:c0:62:
         8c:cb:a7:27:5b:3d:f7:89:0f:a4:8c:cd:08:b2:66:3a:ab:24:
         82:f7:d3:a0:5d:63:0b:05:fb:61:ea:76:1e:4c:8e:40:67:0e:
         ae:bc:52:81:5a:9b:9c:41:71:c5:95:1d:a2:56:50:2f:d8:31:
         74:e4:3f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:18:05 2026 by rpki-client