Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
File:                     UFBG2nJq75m-uIowyKb67-dSB1M.mft (raw, json)
Hash identifier:          wZve5mnsio70nLPhEgbAdVlJ1/xAd+YSZBVf3YVXvJ8=
Subject key identifier:   6E:BA:09:D3:09:F2:80:14:A8:13:00:00:EB:3C:31:59:86:0B:58:19
Authority key identifier: 50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53
Certificate issuer:       /CN=505046da726aef99beb88a30c8a6faefe7520753
Certificate serial:       019D996319B9A88EC0D56963C45BF501E71F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
Manifest number:          1140
Signing time:             Fri 17 Apr 2026 03:01:41 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:41 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:41 +0000
Files and hashes:         1: UFBG2nJq75m-uIowyKb67-dSB1M.crl (hash: eTtxbBSKwDVGBpCGG0xb9UOEWWP4Bds5/oO6ja216sE=)
                          2: VrllH5lvxOXiEVVSba8nkT-lWmQ.roa (hash: MptkH7rNuQFXgV7cW16D7ZIxR771HBqFh8JOnOVzIAw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:63:19:b9:a8:8e:c0:d5:69:63:c4:5b:f5:01:e7:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505046da726aef99beb88a30c8a6faefe7520753
        Validity
            Not Before: Apr 17 03:01:41 2026 GMT
            Not After : Apr 18 03:01:41 2026 GMT
        Subject: CN=6eba09d309f28014a8130000eb3c3159860b5819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:42:5d:62:fa:c9:89:ca:12:ab:f9:21:81:bb:
                    a1:e7:2d:d3:6c:7c:bb:8d:51:b2:10:a1:b6:c1:5e:
                    14:2c:eb:46:99:8a:9b:91:5a:1c:71:3c:e9:7a:cf:
                    6e:53:ec:87:cf:10:0f:23:e9:94:30:09:5e:7a:83:
                    7e:44:78:01:53:11:98:ca:fd:0a:02:e6:5c:5b:b1:
                    c5:9c:d1:ce:f3:93:74:e2:ee:55:df:00:b1:64:7f:
                    fa:f5:69:05:0a:ef:08:84:cb:a6:28:d6:69:5f:47:
                    be:f0:90:5f:91:af:21:7e:34:4c:63:1e:c8:40:a1:
                    1e:f0:c2:26:58:99:1c:36:73:05:17:d5:88:7d:78:
                    ff:b9:b0:2c:f6:99:5e:d8:66:d5:d6:0c:95:ed:5b:
                    7f:de:51:39:58:db:1e:7c:f7:ec:eb:cb:32:5d:a2:
                    eb:64:c0:9d:5f:12:af:d6:b8:10:91:5c:f8:53:13:
                    8f:9d:16:2d:59:8b:a4:fb:62:bd:5a:a5:51:57:3b:
                    3f:80:a0:22:6b:8a:09:94:8e:0e:9f:d1:99:4b:d7:
                    e1:c3:2b:63:13:ab:e7:c6:e2:34:cf:c9:84:95:a9:
                    83:7f:22:11:3d:f5:37:60:ba:08:fb:09:67:9b:b5:
                    47:c9:b5:cc:ee:bc:a9:f9:fb:0f:71:c3:00:f7:2b:
                    2e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:BA:09:D3:09:F2:80:14:A8:13:00:00:EB:3C:31:59:86:0B:58:19
            X509v3 Authority Key Identifier:
                keyid:50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:9e:d4:8f:b5:a6:74:5e:79:15:fb:f4:05:a4:b7:43:3a:9d:
         d2:ef:00:34:c8:9c:34:5c:c4:68:99:62:e8:93:c8:f4:9b:82:
         b4:07:f1:24:49:ab:78:d3:f1:66:55:2b:8b:3f:aa:9d:78:6f:
         e6:f4:d0:70:c1:b8:e3:db:e2:6f:c5:e7:04:e1:0e:5d:55:4e:
         96:47:7c:0d:43:80:82:3c:ff:c7:cf:88:d3:db:c2:00:72:49:
         7d:56:07:54:ce:10:9b:58:1c:ca:ed:d6:5d:dd:6c:20:b5:54:
         bb:16:99:a7:4c:d9:f5:66:c5:16:33:a3:22:45:5f:d6:0b:d2:
         f0:8b:69:3f:c6:e3:b2:3f:8f:fe:a1:ab:f4:1f:3b:02:a4:e5:
         a1:66:ca:ce:c8:4f:df:02:71:ae:67:48:91:92:76:87:58:8e:
         75:bd:4d:da:be:bc:48:62:c2:dc:80:83:bb:4b:0a:85:ff:b1:
         ab:cd:24:4f:d2:8a:0f:4f:b1:54:c6:ec:35:77:fe:99:af:4c:
         64:d2:ed:2b:28:7f:d5:cf:21:3e:60:72:6b:00:db:54:0a:0f:
         5f:45:7a:f4:98:28:59:56:a3:18:d3:cc:01:36:3a:dd:50:ff:
         df:ce:19:35:a7:7e:20:65:81:d5:2c:f1:13:cf:89:48:5e:0d:
         b2:98:f2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:50:49 2026 by rpki-client