Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft
File:                     Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft (raw, json)
Hash identifier:          OA5sFlLb+kjwdwvKbY0T8RyfAMR3jB4i0ipbTUGynuY=
Subject key identifier:   99:6D:1D:78:0B:5E:26:31:F4:22:51:49:BC:76:F5:5B:90:68:78:86
Authority key identifier: 51:EE:1A:67:72:5E:B4:A7:64:A5:87:BC:37:07:9D:EB:BE:81:FB:64
Certificate issuer:       /CN=51ee1a67725eb4a764a587bc37079debbe81fb64
Certificate serial:       019D99999D5DE5EA7D527137D22B39207834
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft
Manifest number:          17C4
Signing time:             Fri 17 Apr 2026 04:01:14 +0000
Manifest this update:     Fri 17 Apr 2026 04:01:14 +0000
Manifest next update:     Sat 18 Apr 2026 04:01:14 +0000
Files and hashes:         1: Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl (hash: uyzEalIe024yJy+RRnZnjNi/THNfX1dxb60JkUSs0QY=)
                          2: fyLOdege7rISvKwS6nzptMD3TJw.roa (hash: XupWMossyhFCVMRDOrwvQeOId6GsqZ/55zk7+a6M/A4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:9d:5d:e5:ea:7d:52:71:37:d2:2b:39:20:78:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ee1a67725eb4a764a587bc37079debbe81fb64
        Validity
            Not Before: Apr 17 04:01:14 2026 GMT
            Not After : Apr 18 04:01:14 2026 GMT
        Subject: CN=996d1d780b5e2631f4225149bc76f55b90687886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:10:25:fe:d9:55:52:3b:dc:8c:66:e1:7f:ac:
                    df:c0:97:2f:9d:bc:95:4e:c5:74:09:16:db:e3:e9:
                    da:2e:b7:63:09:60:c1:ec:85:7f:35:b0:2a:55:0e:
                    68:52:c7:b4:eb:56:6d:40:63:a5:89:59:42:e6:f2:
                    0a:6a:fd:eb:26:2f:6d:88:f0:0b:27:18:88:81:f5:
                    0a:24:f6:a2:7c:02:05:de:9e:db:f7:ea:a4:65:1b:
                    b4:2b:db:81:6c:03:af:eb:ea:23:97:cf:9a:c4:75:
                    b2:f8:25:2e:32:de:15:c0:01:20:35:aa:26:df:94:
                    36:71:27:9e:f2:0f:91:2c:8f:a1:92:fa:d1:a6:f1:
                    33:9a:2b:b0:9e:a6:31:d9:6e:20:7a:99:f8:e1:77:
                    0e:97:91:97:f5:ef:06:80:ae:6d:11:20:08:6b:1a:
                    07:df:bd:c5:2c:c0:7c:5c:ef:f9:10:25:d8:00:f6:
                    96:c4:32:7e:ee:37:97:c6:8d:c0:e6:7e:e1:da:8e:
                    cd:ca:1a:c0:92:90:12:15:0e:ef:69:9c:17:a6:c5:
                    a8:21:32:a9:b1:bb:0a:0b:04:aa:3f:dc:02:62:09:
                    44:01:dd:fc:49:82:cc:0f:4e:8a:71:68:52:e4:e5:
                    a3:41:d8:a2:72:26:8f:36:3b:4a:db:03:83:f2:b3:
                    91:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:6D:1D:78:0B:5E:26:31:F4:22:51:49:BC:76:F5:5B:90:68:78:86
            X509v3 Authority Key Identifier:
                keyid:51:EE:1A:67:72:5E:B4:A7:64:A5:87:BC:37:07:9D:EB:BE:81:FB:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:a0:3c:1f:08:84:84:1c:99:ca:ca:e7:3f:0c:0d:56:5a:3b:
         51:e4:ee:12:58:d5:58:30:69:a4:32:6e:b2:b4:be:2a:4e:41:
         da:35:8f:0c:1a:bb:4e:61:6e:59:fa:03:ba:ea:30:73:09:c1:
         98:25:bb:98:da:c3:c3:a9:b9:ad:7f:27:ba:89:76:5d:eb:cf:
         4b:af:e5:1b:22:6f:a0:79:0d:d9:2e:8c:7a:7e:55:49:7c:de:
         87:f3:fd:d4:0a:41:82:1d:f7:34:b0:d3:a6:13:b8:94:86:c0:
         82:d8:1e:cf:4a:88:7b:73:14:4e:8d:10:61:30:f0:21:15:0f:
         f3:4f:5e:19:89:7b:12:c3:da:aa:18:e8:3c:34:5d:3c:d3:52:
         4c:d0:cc:12:0d:cc:77:a0:22:d3:6b:c5:0f:05:0f:18:da:92:
         0c:d0:ff:59:a0:f2:34:3b:39:c2:eb:45:73:d8:ca:90:a9:90:
         4a:55:75:5d:c0:9b:39:08:27:2c:f4:fa:27:20:32:56:ab:4d:
         fa:7c:fb:96:a0:38:ae:a9:7e:8a:e0:c6:75:c8:52:89:64:33:
         a5:5a:97:4f:59:a2:5f:2e:b6:64:7d:b3:ec:2b:4c:5c:30:2a:
         e3:ad:cf:f5:59:04:45:21:80:97:3d:ad:99:59:c0:ee:b8:b2:
         cb:f7:5d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:43 2026 by rpki-client