Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.mft
File:                     UeY89ghzETR_MU8k4mlsf2zqbXI.mft (raw, json)
Hash identifier:          knLNNu+RSyASYbR5EoSpPjnYBzIek5m5oVh+tY7F2p0=
Subject key identifier:   A4:14:8F:63:41:40:A4:2A:DE:36:DA:9D:C5:21:CD:66:EB:35:15:73
Authority key identifier: 51:E6:3C:F6:08:73:11:34:7F:31:4F:24:E2:69:6C:7F:6C:EA:6D:72
Certificate issuer:       /CN=51e63cf6087311347f314f24e2696c7f6cea6d72
Certificate serial:       019D9DACC8501B6EF6B381EDEF7696ED6227
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeY89ghzETR_MU8k4mlsf2zqbXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.mft
Manifest number:          016E
Signing time:             Fri 17 Apr 2026 23:00:39 +0000
Manifest this update:     Fri 17 Apr 2026 23:00:39 +0000
Manifest next update:     Sat 18 Apr 2026 23:00:39 +0000
Files and hashes:         1: 64cOQxiZnrejgF_yLbuSNNh-5DY.asa (hash: /CmbqsnAzo+sIy4VN1xw/guWwGwOsWmQxl16cZjywCU=)
                          2: UeY89ghzETR_MU8k4mlsf2zqbXI.crl (hash: J0mEJcXyeGZ/4EEltLjjccf2Z7pArnRBkggPGOOYIws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UeY89ghzETR_MU8k4mlsf2zqbXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:ac:c8:50:1b:6e:f6:b3:81:ed:ef:76:96:ed:62:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e63cf6087311347f314f24e2696c7f6cea6d72
        Validity
            Not Before: Apr 17 23:00:39 2026 GMT
            Not After : Apr 18 23:00:39 2026 GMT
        Subject: CN=a4148f634140a42ade36da9dc521cd66eb351573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:59:74:e6:e5:17:fe:b0:17:e4:ba:78:d1:f4:
                    9d:60:75:f9:2e:d2:b5:8f:47:dd:21:c9:1f:98:ca:
                    b6:66:1d:74:8a:84:f9:40:f8:0e:1e:93:36:ce:b0:
                    b4:61:04:62:e3:ca:4a:fd:f1:9c:f1:4d:aa:d2:9b:
                    e6:3c:fb:cd:42:94:87:b4:3a:a7:d2:1c:22:c7:4d:
                    27:33:9d:86:61:4c:d4:4a:ce:1f:ae:ec:12:45:e1:
                    fc:56:4c:a0:7d:c0:d9:95:32:54:d6:cb:98:2e:4a:
                    c4:8d:8a:07:9d:df:47:b2:65:8f:13:6a:15:0b:04:
                    8b:11:9f:38:45:72:e9:89:0b:b5:a4:28:5c:15:e9:
                    32:41:9e:9d:13:11:96:69:0f:ce:b2:9c:04:a8:92:
                    66:46:d5:c4:9e:eb:0d:e8:2e:38:ff:e6:4e:ae:dd:
                    af:77:16:76:c1:3a:7b:18:5d:fc:23:29:3f:0d:c1:
                    41:b9:8f:fc:61:ba:47:d8:3d:d7:d9:39:dc:26:4b:
                    1e:2f:9a:ea:66:91:76:be:27:2f:b7:dc:56:a8:e2:
                    a2:2d:8e:75:fb:ca:f2:f8:9e:1d:2d:c6:71:42:da:
                    71:9c:84:db:a7:0e:ff:b6:3d:3f:63:b8:ec:2f:a9:
                    e2:0c:3b:1f:e7:93:06:8e:3e:81:27:1c:06:0d:e2:
                    91:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:14:8F:63:41:40:A4:2A:DE:36:DA:9D:C5:21:CD:66:EB:35:15:73
            X509v3 Authority Key Identifier:
                keyid:51:E6:3C:F6:08:73:11:34:7F:31:4F:24:E2:69:6C:7F:6C:EA:6D:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeY89ghzETR_MU8k4mlsf2zqbXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:ab:71:2a:a1:a7:2d:3f:0c:21:8f:28:f6:93:a6:cc:4a:12:
         e0:54:b7:47:f0:7d:4d:4f:98:7f:84:32:54:ba:da:87:eb:c5:
         0f:71:ef:b3:c7:2d:e4:9f:b7:0e:73:f0:5d:9c:9d:0a:cb:26:
         e6:c9:ba:99:5d:17:0c:d5:50:66:8d:00:6f:9d:6f:bf:f0:11:
         70:0e:7e:50:93:bd:6a:3a:38:b4:7e:ea:3d:58:e8:00:98:97:
         03:ed:12:b5:72:f2:38:03:08:63:33:00:df:04:bc:45:66:f1:
         e2:77:44:8f:97:42:11:fa:39:ab:49:35:6c:55:55:d8:26:e0:
         c2:a7:29:84:cb:84:bd:76:39:11:be:9a:62:ef:43:12:2b:92:
         fe:ea:62:14:ae:16:91:13:59:e4:75:f4:52:18:92:a0:58:d6:
         7f:97:43:ae:9d:02:3e:d3:7b:ea:81:80:a7:0a:7b:98:b3:57:
         4c:c4:75:ad:f3:10:fc:2c:c9:8e:e7:ff:57:b3:7d:06:17:3d:
         a7:64:7b:85:7f:f7:2e:6d:70:9b:b5:45:88:f3:7a:90:0f:50:
         1f:22:6b:95:49:0b:d3:f2:dc:a4:af:9a:24:99:22:5e:42:8c:
         80:8b:05:fa:e3:1f:c3:2f:0c:98:4f:56:4c:1d:fe:ea:1f:ed:
         1b:81:0a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:05:35 2026 by rpki-client