Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
File:                     UfKdGEvMUP5lTd70AV3hfSRv0qM.mft (raw, json)
Hash identifier:          vsdkIluab1Esr2ju5Q6pKzAOfXKXy8Azp90vqBLSS0M=
Subject key identifier:   DB:7E:91:11:57:12:1F:6C:77:ED:33:4D:CA:AB:70:CE:3C:F1:30:DC
Authority key identifier: 51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3
Certificate issuer:       /CN=51f29d184bcc50fe654ddef4015de17d246fd2a3
Certificate serial:       019D9DAC9795B78648B29AD3D05DE863A39B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
Manifest number:          02BC
Signing time:             Fri 17 Apr 2026 23:00:27 +0000
Manifest this update:     Fri 17 Apr 2026 23:00:27 +0000
Manifest next update:     Sat 18 Apr 2026 23:00:27 +0000
Files and hashes:         1: 96UsaTKEjdZ3wGsAHj4Q93Aoh6I.asa (hash: /HHj4PFLDbsQcaDY5XUjTsmz/wfOfGvG+NtQ/eHmb0I=)
                          2: UfKdGEvMUP5lTd70AV3hfSRv0qM.crl (hash: t9ovXPQCSyrHwfZlaFaPWhQDAB0YJeH25QCudx+FYlQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:ac:97:95:b7:86:48:b2:9a:d3:d0:5d:e8:63:a3:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51f29d184bcc50fe654ddef4015de17d246fd2a3
        Validity
            Not Before: Apr 17 23:00:27 2026 GMT
            Not After : Apr 18 23:00:27 2026 GMT
        Subject: CN=db7e911157121f6c77ed334dcaab70ce3cf130dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:61:f2:be:bb:0d:a2:0b:d0:01:34:4c:15:73:
                    0c:78:74:4f:74:7a:b4:ac:ab:ff:09:f1:5c:d0:5c:
                    c9:ba:80:47:48:54:1e:53:60:2b:14:f7:40:94:c3:
                    b6:6a:53:e9:18:2a:02:0e:de:f2:53:c6:7c:8a:5e:
                    e2:3c:fc:28:d6:7b:9a:d8:6d:e3:3f:0f:aa:82:b2:
                    6c:cc:c2:d2:2a:61:e5:f9:b4:cf:34:24:70:94:42:
                    c0:8d:c2:37:cc:23:a5:95:f4:c6:16:f6:d2:1f:4e:
                    ed:ad:52:ca:a1:af:cc:43:c2:b7:da:f9:d8:f2:65:
                    99:ae:a7:c1:6e:bd:57:ec:85:c4:9b:0a:98:d0:6b:
                    c1:21:5e:58:5a:f6:5e:a7:3e:31:cd:4c:18:c8:9e:
                    b0:8a:be:9f:15:bb:ee:e0:14:36:3c:6d:d6:b6:3d:
                    8c:af:c3:f8:99:67:2a:8d:5c:4a:e5:d7:ec:77:a0:
                    d2:9e:e1:81:25:8a:27:0e:3a:4a:d2:9f:ee:bd:b5:
                    67:7e:a1:09:82:b0:40:12:ba:b5:16:33:76:fe:91:
                    84:87:da:db:f5:81:26:b4:b4:ad:93:ed:e5:90:9d:
                    6f:4a:67:20:01:aa:8f:ca:73:65:0f:8b:de:f1:fb:
                    06:4f:17:5e:60:e1:0e:76:d3:68:61:c5:48:6e:1b:
                    db:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:7E:91:11:57:12:1F:6C:77:ED:33:4D:CA:AB:70:CE:3C:F1:30:DC
            X509v3 Authority Key Identifier:
                keyid:51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:fd:5c:e4:8e:de:57:da:a1:30:d3:7b:43:23:b8:11:2a:3c:
         30:63:b5:16:dc:6e:a4:fd:fe:5d:dc:e0:ec:b7:24:a8:b4:5c:
         80:e6:55:f3:56:9b:b2:73:c2:56:16:58:eb:e6:8c:a5:f6:58:
         37:9c:ee:6c:4a:94:f7:ea:29:4c:bd:78:8e:91:d0:7f:55:b4:
         d7:5e:9e:07:79:c9:dc:19:eb:89:98:92:b3:f2:3d:e1:65:cd:
         3e:cd:e8:ae:16:a9:04:b7:f2:11:da:27:91:af:fa:aa:c8:1d:
         cc:81:1f:57:c2:e0:69:54:19:7a:0b:35:80:52:8c:e2:b8:08:
         ce:cb:01:06:31:0d:65:65:75:fd:53:42:94:60:19:26:25:4c:
         21:ca:89:7f:7f:3b:83:67:b2:be:61:5a:79:b3:85:b2:16:49:
         7e:dc:5f:be:14:c1:91:19:08:01:e7:e2:94:fb:3a:ee:72:45:
         19:ad:35:37:d1:2e:d1:f3:13:70:e0:60:8e:8d:ed:5f:a0:78:
         3e:ae:83:1b:14:cb:2f:63:9a:08:98:05:cb:8e:33:a6:26:2f:
         46:17:42:ad:33:9d:bf:96:3a:91:6f:07:2e:0f:29:99:9f:13:
         8d:37:92:38:d4:12:55:50:a8:c0:a3:e6:01:30:49:44:d2:cd:
         33:7a:ea:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:46:16 2026 by rpki-client