Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.mft
File:                     uEboVBh_kzKVTGDgjDNRr83xCFs.mft (raw, json)
Hash identifier:          3wlJ3wVHiScfHPbyecJxEE5h9sbJRUUOe8vaQ3RHA3o=
Subject key identifier:   45:7E:3B:68:1F:11:21:05:61:32:F8:D4:8C:85:8F:27:91:BE:92:8E
Authority key identifier: B8:46:E8:54:18:7F:93:32:95:4C:60:E0:8C:33:51:AF:CD:F1:08:5B
Certificate issuer:       /CN=b846e854187f9332954c60e08c3351afcdf1085b
Certificate serial:       019D9999032C2C2F25AC50BE3D4A1CF42252
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uEboVBh_kzKVTGDgjDNRr83xCFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.mft
Manifest number:          08F2
Signing time:             Fri 17 Apr 2026 04:00:35 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:35 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:35 +0000
Files and hashes:         1: LoU6bInR-t2CDpwfpMzLYbLy3pA.roa (hash: 7e0dmQJEvRFv5WAuIm9ehE3YMHYXzzfWjHPD+c3OUhs=)
                          2: uEboVBh_kzKVTGDgjDNRr83xCFs.crl (hash: 2PafrhdcAgGxKqlOmyNkIBgEZ5/LXvRhOdtt0g6AHwE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uEboVBh_kzKVTGDgjDNRr83xCFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:03:2c:2c:2f:25:ac:50:be:3d:4a:1c:f4:22:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b846e854187f9332954c60e08c3351afcdf1085b
        Validity
            Not Before: Apr 17 04:00:35 2026 GMT
            Not After : Apr 18 04:00:35 2026 GMT
        Subject: CN=457e3b681f1121056132f8d48c858f2791be928e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:49:5b:8f:b0:bd:4a:1a:b5:c6:dc:2d:f8:51:
                    4f:c0:7a:75:c1:b2:3d:5e:6a:ee:c1:f1:51:44:c7:
                    3d:4f:a0:6e:f0:45:92:5e:e0:31:05:8f:40:ff:fc:
                    6c:d9:10:10:b7:31:bf:82:85:43:a8:60:bf:a1:98:
                    9e:7b:e9:e5:bb:23:e3:d0:1e:d8:a1:d9:53:74:e8:
                    88:00:b2:93:ed:09:bb:a9:02:52:ec:cd:15:93:29:
                    2a:a5:d9:63:f0:09:7b:af:4a:be:72:00:b0:4e:e6:
                    bc:ed:7e:60:6f:5a:12:98:c4:0b:03:24:0c:b4:68:
                    82:0f:ef:e2:c1:6c:fa:f2:e8:39:20:50:03:5f:ba:
                    fa:26:cb:c9:8c:3a:ea:e5:cc:fb:d6:f2:c6:f1:9c:
                    45:fc:8d:2c:fc:fd:9a:31:a7:9e:a1:6e:76:b6:36:
                    65:4f:e3:75:19:88:e4:15:e9:c7:be:b3:bb:57:53:
                    b5:3b:ee:b0:90:f5:71:dc:a2:47:0f:b7:6e:ec:6d:
                    65:83:c0:fb:6c:c5:2c:e3:63:ee:bb:ac:3c:63:cc:
                    7a:24:70:ff:2f:90:ac:15:b0:b6:c1:71:d8:02:c5:
                    03:47:d8:6b:5e:ca:c9:ee:63:cd:74:9f:ba:84:ff:
                    26:21:fb:89:b1:4b:fb:cd:27:a2:5c:d5:2e:a2:9f:
                    79:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:7E:3B:68:1F:11:21:05:61:32:F8:D4:8C:85:8F:27:91:BE:92:8E
            X509v3 Authority Key Identifier:
                keyid:B8:46:E8:54:18:7F:93:32:95:4C:60:E0:8C:33:51:AF:CD:F1:08:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEboVBh_kzKVTGDgjDNRr83xCFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:57:67:2a:67:f9:1e:8f:d8:78:92:7c:14:af:84:93:1f:dd:
         f3:a0:0b:43:bb:ec:c9:80:59:14:3c:d8:ed:a4:0a:7c:e4:6a:
         77:6d:17:82:98:55:c7:0b:cd:8c:81:99:5d:a1:4f:d6:2a:60:
         63:e9:a1:72:15:ee:4b:8d:a1:f3:4b:0f:e8:99:cb:1c:2f:9e:
         94:c3:0b:38:72:94:7c:5e:d8:41:c3:98:9a:93:77:82:2e:0f:
         5f:d0:01:77:86:74:5e:c6:98:4d:cb:a3:3b:2f:6c:a4:09:22:
         f5:7e:80:d6:c2:55:4c:72:4a:10:26:4e:11:77:6a:6b:02:58:
         9c:6f:e5:a6:ab:7f:1e:65:99:c8:54:9a:cc:80:cf:29:98:82:
         ec:11:88:4a:4e:5b:aa:89:70:c6:33:23:84:e9:fc:4b:cf:a4:
         15:a5:fd:5a:19:c8:3a:81:6e:36:f2:8d:f0:87:d8:2a:31:db:
         e0:f3:bf:0d:90:03:ff:b8:b1:6c:de:72:5f:0a:1f:a7:19:ee:
         a6:27:0b:d3:4c:e9:9d:2f:37:eb:97:ca:b0:9a:04:6c:f6:01:
         16:c2:f8:ce:5a:a2:cc:83:34:f0:f6:b9:55:b0:48:a2:48:81:
         bf:8d:d0:61:a8:b9:3e:77:fe:52:19:02:8b:b2:c2:5f:71:3b:
         3a:73:36:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:30 2026 by rpki-client