Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
File:                     UhowB3IjwlxvN9z1lIB3jAtbEGg.mft (raw, json)
Hash identifier:          dcUgzDmAkyUfvEElzWxWxKm5DT1ElfdObh+Onx9lysw=
Subject key identifier:   97:09:06:23:27:FD:A7:BD:3C:C9:AB:BE:FF:0C:54:2A:CC:A9:33:97
Authority key identifier: 52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
Certificate issuer:       /CN=521a30077223c25c6f37dcf59480778c0b5b1068
Certificate serial:       019DA378F1E79B04AF0B9FB22FF38E6566ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
Manifest number:          066A
Signing time:             Sun 19 Apr 2026 02:01:45 +0000
Manifest this update:     Sun 19 Apr 2026 02:01:45 +0000
Manifest next update:     Mon 20 Apr 2026 02:01:45 +0000
Files and hashes:         1: 84SPRa3_ewxAnHZXEwBV1kLi3VM.roa (hash: xgIumFcFLchK1z/1Csr0/oD3z8aKLtyk1tFqPTQqxyc=)
                          2: Dq6_iNtRHTOqFtnpD_FfUWdieAw.roa (hash: IBQzY45WKqpczXTiPj5HpgwNmv+cq3rLH5Uc7T4ZlWM=)
                          3: UhowB3IjwlxvN9z1lIB3jAtbEGg.crl (hash: 0Ta9EEMRiksxd22th2W5CZ/mbhiYocLSyuS0NKfE2GY=)
                          4: _pMAzQKRKR13xl3uGDGCl2hCPIo.roa (hash: 5qQNZWBbvk2jxeJhrao+q24FJuEwboPGan3bLmujgOM=)
                          5: hCxkK3tHuqUrY0c51_Pu1X-lD1E.roa (hash: 2q6gI5yUFT+GtMB/2xyZdJMaVjKX7qKHcOOGGZrqRFs=)
                          6: mzpaYdFOnh67fknlets-KcusWr4.roa (hash: kF0xfsE+o4xiNq+jHxQbRf9whqlGH+HiIj8K0kGs300=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:78:f1:e7:9b:04:af:0b:9f:b2:2f:f3:8e:65:66:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521a30077223c25c6f37dcf59480778c0b5b1068
        Validity
            Not Before: Apr 19 02:01:45 2026 GMT
            Not After : Apr 20 02:01:45 2026 GMT
        Subject: CN=9709062327fda7bd3cc9abbeff0c542acca93397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e5:46:1f:7f:f3:e8:5a:fb:c7:bd:04:3d:99:
                    8b:6d:66:08:00:af:10:cc:81:35:fd:4b:b6:0b:32:
                    39:da:96:3d:7a:1f:0a:71:e1:f1:c7:64:84:98:ba:
                    40:45:5b:69:77:d4:99:95:90:12:d5:aa:9a:07:d3:
                    fd:75:37:00:ac:64:33:0d:60:86:de:a7:b3:bf:26:
                    5f:76:97:93:58:fc:15:5f:f0:aa:84:7b:87:77:98:
                    6c:5e:e9:8e:9c:54:ed:1d:19:8d:a9:3e:21:5b:db:
                    79:38:ed:f1:a2:48:6d:fb:f8:88:08:33:49:19:cc:
                    58:a3:0d:2b:8a:85:01:7f:94:21:99:87:00:69:15:
                    43:24:bc:cc:56:c7:8e:32:b9:3e:e5:57:66:e0:7a:
                    ab:16:6f:5f:d3:ed:80:f3:55:14:58:76:02:fb:52:
                    e2:43:04:96:b7:52:71:08:be:78:be:2f:ac:38:19:
                    b9:09:4c:5c:d3:bf:bc:13:3e:da:b6:7d:26:5d:04:
                    85:f5:d8:a3:df:e1:0a:a0:9d:77:02:7e:8b:ab:25:
                    e2:4c:5c:c3:38:8c:f8:3f:d4:bc:ab:9e:9b:15:a3:
                    30:ed:05:ba:f1:ce:38:37:fe:d2:ec:58:af:a8:b2:
                    a1:dd:e1:07:f8:98:8f:12:32:1a:47:30:bd:40:07:
                    b8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:09:06:23:27:FD:A7:BD:3C:C9:AB:BE:FF:0C:54:2A:CC:A9:33:97
            X509v3 Authority Key Identifier:
                keyid:52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:12:2c:62:6e:28:b5:b8:83:86:5c:03:31:25:a6:2c:a7:05:
         1e:ea:1c:f1:5e:52:5d:f6:7e:8f:04:bc:ed:19:3d:b6:91:b0:
         0c:2e:fa:d8:2a:40:d8:91:53:2c:7a:30:11:a5:7e:b4:e1:17:
         a7:b8:ac:aa:25:be:90:c1:16:4c:43:ac:96:c2:f8:19:a5:89:
         95:cb:6b:a1:94:03:c5:5e:f3:e6:6b:1d:aa:05:c8:46:99:34:
         e8:43:14:eb:48:09:fb:81:61:e2:4c:f1:b1:54:ce:bc:95:9d:
         c9:01:21:f2:4c:26:5d:52:ef:34:59:3c:07:79:99:d2:71:29:
         17:c0:d2:17:f7:f0:21:c5:20:cc:26:69:fc:72:29:83:09:f8:
         cd:f2:5a:9a:6a:86:0d:9d:f7:e5:44:16:55:c5:70:ee:de:11:
         8f:72:8d:6d:05:c4:0b:e7:cc:02:13:fc:fb:1a:7f:ea:31:d3:
         9a:78:9b:98:ad:96:cc:a5:24:a5:0f:b6:80:c1:37:39:7d:8c:
         8b:d4:ac:46:5b:03:31:ef:7d:6d:0d:2f:81:ab:93:80:7b:63:
         0a:52:61:03:fc:ee:cc:36:03:23:c0:03:c7:7c:c1:b9:ca:4c:
         a5:fb:ff:f9:9e:f1:35:de:f8:30:12:78:ea:b3:81:dc:39:ec:
         92:52:8d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:20 2026 by rpki-client