Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
File:                     0_ULT8CViQuDHAPZliXA7lQZ01o.mft (raw, json)
Hash identifier:          JuPvjcYRhJRkVqhJkQugK944mRQuMxwcpft+QAw/w9M=
Subject key identifier:   D5:90:2C:49:D2:3C:7A:9F:E4:D5:13:6D:A0:9B:69:58:DE:6B:5A:28
Authority key identifier: D3:F5:0B:4F:C0:95:89:0B:83:1C:03:D9:96:25:C0:EE:54:19:D3:5A
Certificate issuer:       /CN=d3f50b4fc095890b831c03d99625c0ee5419d35a
Certificate serial:       019D99D0B8F88359273C6DE07541173437A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
Manifest number:          1773
Signing time:             Fri 17 Apr 2026 05:01:25 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:25 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:25 +0000
Files and hashes:         1: 0_ULT8CViQuDHAPZliXA7lQZ01o.crl (hash: lnEpJEGp4DYRqCaiT198dMq5d2S0pL8BEqBJm6Yepnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:b8:f8:83:59:27:3c:6d:e0:75:41:17:34:37:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3f50b4fc095890b831c03d99625c0ee5419d35a
        Validity
            Not Before: Apr 17 05:01:25 2026 GMT
            Not After : Apr 18 05:01:25 2026 GMT
        Subject: CN=d5902c49d23c7a9fe4d5136da09b6958de6b5a28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:71:55:58:6d:db:a0:8c:6c:89:85:0a:cc:d8:
                    c5:6e:43:b6:13:4e:8e:8b:b5:e6:fa:df:85:ac:66:
                    b8:90:4e:f3:12:50:41:d0:af:75:a8:01:35:d1:26:
                    fe:ad:5c:29:4c:0e:a1:03:36:e8:3c:e5:d8:ad:70:
                    5b:55:2a:a6:db:73:af:25:01:e2:ee:cc:e3:18:6d:
                    fb:b8:19:b8:a3:dd:59:73:43:6c:84:05:4a:13:3e:
                    5d:d9:cd:6a:dd:2d:40:4c:fa:b3:00:42:aa:a0:a5:
                    1e:7d:79:ba:15:0d:69:6a:a6:70:bf:81:af:54:00:
                    35:fa:b8:c8:eb:c6:a6:28:d9:24:d2:ac:12:50:89:
                    c1:a5:c0:5a:43:56:14:4f:9d:e4:bb:b0:1b:ee:22:
                    9c:f7:bf:7a:6d:be:9d:89:fb:67:d2:45:07:fc:06:
                    7f:0e:cd:1c:72:a9:85:bc:f9:80:eb:cc:b0:a4:1d:
                    d8:5f:33:6e:09:25:d9:3c:00:71:a3:08:5a:7e:b9:
                    89:1d:9d:42:55:20:26:fe:fa:89:17:e0:e2:22:27:
                    f3:f5:3d:90:d9:0c:17:89:ef:64:c0:d7:02:66:6d:
                    94:4d:c5:06:5c:b5:3b:79:90:73:99:be:bf:4e:8a:
                    34:60:2d:ce:be:65:51:9e:12:a8:d0:29:67:af:b6:
                    ef:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:90:2C:49:D2:3C:7A:9F:E4:D5:13:6D:A0:9B:69:58:DE:6B:5A:28
            X509v3 Authority Key Identifier:
                keyid:D3:F5:0B:4F:C0:95:89:0B:83:1C:03:D9:96:25:C0:EE:54:19:D3:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:50:cc:d3:b1:84:f2:ed:2d:66:21:74:39:97:f3:8a:e4:9f:
         40:ac:af:58:21:0a:e9:6e:a3:6e:59:8c:90:fa:1a:dc:fc:ab:
         27:d1:b9:d5:53:9e:76:48:bd:cb:bf:de:e7:0d:51:3b:56:10:
         55:19:76:5e:79:ee:2b:3c:b6:fd:d4:a8:01:5c:3e:3e:69:e8:
         b5:af:eb:2e:c7:ac:a3:2d:95:99:41:36:ac:1e:fa:2c:ef:63:
         30:3d:2a:54:7d:68:9e:e6:08:25:99:b0:64:b7:28:0e:55:cb:
         5f:cc:ce:f7:fe:d4:ee:13:8a:cb:46:49:a6:fe:85:38:48:be:
         c0:bb:8c:42:a3:38:fb:9e:83:ff:4e:e2:09:34:9e:6c:ac:d4:
         77:c4:b2:96:53:a0:7f:b4:48:eb:e1:48:97:4f:07:d1:c4:6e:
         51:fd:44:80:03:50:46:37:b5:62:f0:66:20:45:c1:54:c8:b7:
         ef:88:c9:e3:f1:f1:a4:ee:a2:30:7d:9f:cb:be:cc:ff:4e:13:
         f6:ce:0b:e5:cd:32:66:23:3f:e0:24:f4:db:a2:ec:1d:e1:93:
         f2:76:1e:59:cb:46:71:aa:93:1d:3d:23:ff:9f:89:4b:65:bc:
         e7:e2:53:d6:51:c9:d1:b2:04:e9:5e:ee:45:2c:b7:bd:9d:b5:
         de:40:1b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:56:27 2026 by rpki-client