Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
File:                     uybM-gcX259Wqji4aSzl3PooJec.mft (raw, json)
Hash identifier:          c0eBbbS6c5Sphhr9sw+xRkmzbtqnv8qHgO2RBGzTkNo=
Subject key identifier:   E6:6B:B2:B4:06:BA:35:59:58:9A:F5:08:A7:13:59:D9:A7:BC:CB:01
Authority key identifier: BB:26:CC:FA:07:17:DB:9F:56:AA:38:B8:69:2C:E5:DC:FA:28:25:E7
Certificate issuer:       /CN=bb26ccfa0717db9f56aa38b8692ce5dcfa2825e7
Certificate serial:       019D9EBF7845CA77A800E6471334359D011D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
Manifest number:          048F
Signing time:             Sat 18 Apr 2026 04:00:41 +0000
Manifest this update:     Sat 18 Apr 2026 04:00:41 +0000
Manifest next update:     Sun 19 Apr 2026 04:00:41 +0000
Files and hashes:         1: dbi3fG9bxI9rA-J9Egga8cnvqoo.roa (hash: Ap8z6NPW0v1Uxh7C5vK9EjLc2QYMMSk2Hr7IGcY1KpQ=)
                          2: uybM-gcX259Wqji4aSzl3PooJec.crl (hash: ZTo3d3Xiei+dFNZRkkKhC1PvVIF41wOvuLbqySU8XBM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9e:bf:78:45:ca:77:a8:00:e6:47:13:34:35:9d:01:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb26ccfa0717db9f56aa38b8692ce5dcfa2825e7
        Validity
            Not Before: Apr 18 04:00:41 2026 GMT
            Not After : Apr 19 04:00:41 2026 GMT
        Subject: CN=e66bb2b406ba3559589af508a71359d9a7bccb01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:39:45:ac:60:6b:82:fb:f0:4d:2c:b7:7e:6a:
                    3c:91:86:a5:ff:1e:ea:19:9e:18:8c:11:a5:55:82:
                    7b:b8:09:5e:81:e3:1c:27:9a:cc:e9:06:ec:80:e6:
                    21:a9:a1:51:8c:90:f1:22:64:5a:a6:9f:2a:86:73:
                    41:c2:07:a0:88:aa:f5:ff:3b:1e:d6:09:f4:bb:80:
                    38:0a:c9:35:92:2f:67:b9:d4:3c:e3:2a:66:b2:99:
                    05:0a:17:49:be:73:cc:ce:34:e3:24:9e:40:d8:7b:
                    f9:65:2e:2e:34:c1:a7:7b:93:9f:ae:77:0c:5c:a3:
                    9d:e8:2d:d3:54:64:26:99:64:bc:88:37:f0:bd:42:
                    47:1c:82:e6:fe:fa:29:8f:bf:f1:3e:9e:44:36:c3:
                    22:1c:e0:cb:a0:8c:0a:a4:3f:e4:d1:0f:3d:df:49:
                    29:2b:5d:bf:ab:59:bf:79:71:65:5c:cf:a2:b1:98:
                    62:bc:cd:f2:ac:e1:b0:c2:bd:91:85:d5:3c:be:e6:
                    d0:b4:83:7e:48:dd:69:be:86:a9:00:d7:06:2b:0f:
                    52:4e:6f:70:60:60:3b:8e:74:ae:50:5f:22:b7:95:
                    ff:d4:af:50:22:05:b6:02:59:74:ef:da:d1:f7:0a:
                    af:51:a2:44:c0:2d:9f:a9:62:10:a7:7c:d1:1a:7c:
                    a0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:6B:B2:B4:06:BA:35:59:58:9A:F5:08:A7:13:59:D9:A7:BC:CB:01
            X509v3 Authority Key Identifier:
                keyid:BB:26:CC:FA:07:17:DB:9F:56:AA:38:B8:69:2C:E5:DC:FA:28:25:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:26:d7:53:e3:42:01:a2:4a:23:0d:c0:e3:e7:8e:7b:e5:27:
         d0:65:c9:1b:34:9b:17:a7:2e:d0:3f:4f:e4:5c:81:2f:3a:e1:
         77:f2:f2:42:f3:fe:1b:3f:7c:01:44:35:65:29:53:c3:d0:15:
         96:15:64:90:a6:32:75:58:3b:5c:87:56:76:ec:a6:ef:8a:ae:
         fe:34:87:80:36:37:02:93:40:a9:1e:cf:bd:e6:78:e4:be:f6:
         8f:12:c0:81:18:e9:52:3e:ef:87:07:12:5a:b7:41:8b:a2:17:
         52:bf:f2:5e:bb:ac:60:0a:bd:8f:9d:6b:79:f6:43:97:26:0b:
         c7:f4:fe:97:ce:44:3c:06:4c:b5:09:e1:39:47:b0:94:40:8c:
         ac:7a:87:0e:7a:1b:e8:0f:d6:c2:2e:57:a8:7b:7f:8e:2b:3d:
         c0:2a:8b:28:bf:87:5b:a6:c0:a0:bb:66:6e:23:de:9f:11:4a:
         84:35:d6:8c:79:b2:92:8e:12:9c:97:c7:47:f2:14:0c:2b:91:
         8f:e0:b5:64:4d:8f:08:eb:e2:94:20:9b:0d:8d:0c:1c:da:0e:
         59:27:2e:c0:da:c2:c0:67:b0:0e:4a:9d:36:70:76:a0:d4:d0:
         57:b0:9e:44:d8:ef:84:07:5a:d1:2a:89:af:41:6c:e6:cd:c0:
         aa:e8:d3:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ev3hFyneoAOZHEzQ1nQEdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMjZjY2ZhMDcxN2RiOWY1NmFhMzhiODY5MmNlNWRjZmEy
ODI1ZTcwHhcNMjYwNDE4MDQwMDQxWhcNMjYwNDE5MDQwMDQxWjAzMTEwLwYDVQQD
EyhlNjZiYjJiNDA2YmEzNTU5NTg5YWY1MDhhNzEzNTlkOWE3YmNjYjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTlFrGBrgvvwTSy3fmo8kYal/x7q
GZ4YjBGlVYJ7uAlegeMcJ5rM6QbsgOYhqaFRjJDxImRapp8qhnNBwgegiKr1/zse
1gn0u4A4Csk1ki9nudQ84ypmspkFChdJvnPMzjTjJJ5A2Hv5ZS4uNMGne5OfrncM
XKOd6C3TVGQmmWS8iDfwvUJHHILm/vopj7/xPp5ENsMiHODLoIwKpD/k0Q8930kp
K12/q1m/eXFlXM+isZhivM3yrOGwwr2RhdU8vubQtIN+SN1pvoapANcGKw9STm9w
YGA7jnSuUF8it5X/1K9QIgW2All079rR9wqvUaJEwC2fqWIQp3zRGnyg6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZrsrQGujVZWJr1CKcTWdmnvMsBMB8GA1UdIwQY
MBaAFLsmzPoHF9ufVqo4uGks5dz6KCXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXliTS1nY1gyNTlXcWppNGFTemwzUG9vSmVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81NTBjMzktNDRhMi00MzFiLTkzM2Qt
Y2NiZjBlNWIyYWRkLzEvdXliTS1nY1gyNTlXcWppNGFTemwzUG9vSmVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81NTBjMzktNDRhMi00MzFiLTkzM2QtY2NiZjBlNWIyYWRk
LzEvdXliTS1nY1gyNTlXcWppNGFTemwzUG9vSmVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfCbXU+NC
AaJKIw3A4+eOe+Un0GXJGzSbF6cu0D9P5FyBLzrhd/LyQvP+Gz98AUQ1ZSlTw9AV
lhVkkKYydVg7XIdWduym74qu/jSHgDY3ApNAqR7PveZ45L72jxLAgRjpUj7vhwcS
WrdBi6IXUr/yXrusYAq9j51refZDlyYLx/T+l85EPAZMtQnhOUewlECMrHqHDnob
6A/Wwi5XqHt/jis9wCqLKL+HW6bAoLtmbiPenxFKhDXWjHmyko4SnJfHR/IUDCuR
j+C1ZE2PCOvilCCbDY0MHNoOWScuwNrCwGewDkqdNnB2oNTQV7CeRNjvhAda0SqJ
r0Fs5s3AqujTVA==
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:12:26 2026 by rpki-client