Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
File:                     UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft (raw, json)
Hash identifier:          mGLUzgCBpgs3lG0e1BBtE4T5ZNTSmYxcdjLkmxtl9A0=
Subject key identifier:   90:C8:46:29:CF:EE:80:35:73:AC:EE:B3:2D:23:3C:51:DD:18:4B:6C
Authority key identifier: 53:38:02:E6:29:65:D4:58:4E:59:8D:59:B7:6A:92:8B:E5:AF:D9:71
Certificate issuer:       /CN=533802e62965d4584e598d59b76a928be5afd971
Certificate serial:       019DA453CF05311DF7CE07D338C1B334536F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
Manifest number:          046A
Signing time:             Sun 19 Apr 2026 06:00:48 +0000
Manifest this update:     Sun 19 Apr 2026 06:00:48 +0000
Manifest next update:     Mon 20 Apr 2026 06:00:48 +0000
Files and hashes:         1: UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl (hash: Ek1a1fH0GXxlXrnHCHAmx4vdn/5vV82pleWEyB6NtOA=)
                          2: _ui81FBBiuw7bXFjjAu-AlY8ago.roa (hash: +W47PKSUEyOgp5p8G/Toro+Z87dMONYhdZgP4gDGUPI=)
                          3: ra_bl9yXslRJGJzxTDV_d-BlUpQ.roa (hash: wtAAXjDyWZtJfFcEXNFbtV3UJ/ZOa4GX5loIbK1mn74=)
                          4: wFmuZt6OG-oR7DBeq01Ww8HvPa4.roa (hash: a0H1kPyDShFzTVMDinn/3X1ONbp+NjLhweJzA1FQdjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:53:cf:05:31:1d:f7:ce:07:d3:38:c1:b3:34:53:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533802e62965d4584e598d59b76a928be5afd971
        Validity
            Not Before: Apr 19 06:00:48 2026 GMT
            Not After : Apr 20 06:00:48 2026 GMT
        Subject: CN=90c84629cfee803573aceeb32d233c51dd184b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8f:b0:0a:ad:3f:8d:a7:43:5c:66:9b:db:eb:
                    a7:a3:6e:0b:79:f3:ae:04:5f:cb:08:53:e5:19:ee:
                    3f:c9:58:6e:53:43:34:fc:b1:e1:8b:c1:92:e4:64:
                    05:7e:12:5b:f0:44:ac:03:df:fe:88:62:32:30:ea:
                    6f:37:1f:b6:5b:c3:9a:7a:95:ad:40:f4:f0:19:eb:
                    22:db:f5:c1:91:df:0b:a9:36:6d:5c:0a:51:48:95:
                    73:26:1b:b3:da:5f:9c:c9:46:cb:81:f2:1e:53:cc:
                    15:03:87:f5:d5:ea:6e:99:2d:3a:86:2d:a0:64:0b:
                    4d:f3:fe:cc:04:40:f1:82:d0:97:76:80:92:59:eb:
                    a2:55:b5:9c:17:92:6a:54:99:c0:a7:c0:31:fa:2b:
                    6c:28:8a:1e:29:47:a6:90:ae:cb:55:01:96:1c:31:
                    58:78:ce:19:06:0e:8d:6d:03:e2:93:97:5d:ae:5b:
                    f2:fb:63:b4:63:d0:37:43:13:52:50:4b:fc:33:95:
                    88:7d:8f:53:59:04:52:d1:66:08:43:ef:b5:14:52:
                    bc:36:71:b6:5d:0a:e2:92:00:b4:55:57:3c:f0:d6:
                    14:13:0c:dd:7f:68:54:03:d2:cf:0d:8d:75:4f:ed:
                    52:8f:8f:16:75:44:86:1f:5e:f6:11:ce:1c:fe:07:
                    00:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C8:46:29:CF:EE:80:35:73:AC:EE:B3:2D:23:3C:51:DD:18:4B:6C
            X509v3 Authority Key Identifier:
                keyid:53:38:02:E6:29:65:D4:58:4E:59:8D:59:B7:6A:92:8B:E5:AF:D9:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:c2:34:83:a4:41:90:1a:2e:96:2a:f7:79:d0:2b:84:6e:b8:
         35:b8:65:49:23:b3:71:dc:83:ea:4a:10:4d:f5:89:22:d2:f0:
         bd:51:0d:50:09:35:ea:20:c4:c4:85:f4:a8:ca:34:44:4e:8d:
         46:84:0d:02:6f:0c:da:cb:1b:47:49:88:d7:d3:53:07:4c:0f:
         f7:f8:5f:b9:43:4b:71:2b:ce:b1:13:8f:90:61:33:cf:4d:9c:
         d0:3d:7d:5f:1e:89:cb:17:46:0e:5a:ca:69:93:5d:31:99:cc:
         21:c3:32:9b:94:6c:46:78:42:e6:ba:34:d6:21:ff:c6:52:33:
         22:bc:c2:49:f9:63:11:86:91:62:57:f8:87:88:33:17:95:89:
         66:46:06:c0:f0:26:29:5f:e1:9b:02:db:ca:b4:a6:f3:db:fc:
         3f:45:3d:42:53:a4:62:2c:a5:45:e1:b5:54:06:6f:78:f4:af:
         d9:4e:05:c0:e5:2f:67:41:9b:65:3c:9c:b7:60:43:c9:bc:40:
         5a:cb:03:d9:ff:f2:a3:cd:d8:0d:87:ca:84:cf:52:05:f3:2c:
         29:76:30:36:73:41:94:14:67:e9:a3:6c:15:51:d3:3a:b8:d3:
         3b:9a:9f:be:bf:8e:2c:a9:1c:14:cf:be:4d:1e:47:f7:39:3d:
         85:ab:7f:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kU88FMR33zgfTOMGzNFNvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMzgwMmU2Mjk2NWQ0NTg0ZTU5OGQ1OWI3NmE5MjhiZTVh
ZmQ5NzEwHhcNMjYwNDE5MDYwMDQ4WhcNMjYwNDIwMDYwMDQ4WjAzMTEwLwYDVQQD
Eyg5MGM4NDYyOWNmZWU4MDM1NzNhY2VlYjMyZDIzM2M1MWRkMTg0YjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY+wCq0/jadDXGab2+uno24LefOu
BF/LCFPlGe4/yVhuU0M0/LHhi8GS5GQFfhJb8ESsA9/+iGIyMOpvNx+2W8OaepWt
QPTwGesi2/XBkd8LqTZtXApRSJVzJhuz2l+cyUbLgfIeU8wVA4f11epumS06hi2g
ZAtN8/7MBEDxgtCXdoCSWeuiVbWcF5JqVJnAp8Ax+itsKIoeKUemkK7LVQGWHDFY
eM4ZBg6NbQPik5ddrlvy+2O0Y9A3QxNSUEv8M5WIfY9TWQRS0WYIQ++1FFK8NnG2
XQrikgC0VVc88NYUEwzdf2hUA9LPDY11T+1Sj48WdUSGH172Ec4c/gcAJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDIRinP7oA1c6zusy0jPFHdGEtsMB8GA1UdIwQY
MBaAFFM4AuYpZdRYTlmNWbdqkovlr9lxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXpnQzVpbGwxRmhPV1kxWnQycVNpLVd2MlhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wMWE3M2EtOGRhMC00OGI5LWFhZWQt
YTIzYzEzMWMwZDM4LzEvVXpnQzVpbGwxRmhPV1kxWnQycVNpLVd2MlhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8wMWE3M2EtOGRhMC00OGI5LWFhZWQtYTIzYzEzMWMwZDM4
LzEvVXpnQzVpbGwxRmhPV1kxWnQycVNpLVd2MlhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABsI0g6RB
kBoulir3edArhG64NbhlSSOzcdyD6koQTfWJItLwvVENUAk16iDExIX0qMo0RE6N
RoQNAm8M2ssbR0mI19NTB0wP9/hfuUNLcSvOsROPkGEzz02c0D19Xx6JyxdGDlrK
aZNdMZnMIcMym5RsRnhC5ro01iH/xlIzIrzCSfljEYaRYlf4h4gzF5WJZkYGwPAm
KV/hmwLbyrSm89v8P0U9QlOkYiylReG1VAZvePSv2U4FwOUvZ0GbZTyct2BDybxA
WssD2f/yo83YDYfKhM9SBfMsKXYwNnNBlBRn6aNsFVHTOrjTO5qfvr+OLKkcFM++
TR5H9zk9hat/0A==
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:19:08 2026 by rpki-client