Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
File:                     UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft (raw, json)
Hash identifier:          7plXMX5anBSyxXtBmoSmxLUVZRp2k4OVNtlTNFXRIQY=
Subject key identifier:   08:5C:09:F5:6C:07:3B:5E:0D:FE:02:47:15:F4:8A:B1:13:CF:A4:4A
Authority key identifier: 51:C3:CC:54:41:4F:B4:42:BE:39:D6:E1:A4:AF:72:4C:FF:EE:EE:FF
Certificate issuer:       /CN=51c3cc54414fb442be39d6e1a4af724cffeeeeff
Certificate serial:       019D98F4ABA75A51B9DA7B1C45AADC1D93CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UcPMVEFPtEK-OdbhpK9yTP_u7v8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
Manifest number:          17C6
Signing time:             Fri 17 Apr 2026 01:01:04 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:04 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:04 +0000
Files and hashes:         1: UcPMVEFPtEK-OdbhpK9yTP_u7v8.crl (hash: x+Vrw1Nd+uxBwBSJIuYRabJJ0wJz8NWxUBV7NL+foUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UcPMVEFPtEK-OdbhpK9yTP_u7v8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:ab:a7:5a:51:b9:da:7b:1c:45:aa:dc:1d:93:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51c3cc54414fb442be39d6e1a4af724cffeeeeff
        Validity
            Not Before: Apr 17 01:01:04 2026 GMT
            Not After : Apr 18 01:01:04 2026 GMT
        Subject: CN=085c09f56c073b5e0dfe024715f48ab113cfa44a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d9:96:d7:82:a1:10:3b:6c:86:88:76:62:19:
                    1c:d0:97:31:5f:92:fb:96:9d:be:25:1a:35:55:c3:
                    fb:82:d4:27:c2:ee:1d:f9:4d:1c:44:13:b8:f2:09:
                    bf:85:ec:b4:a4:09:65:bf:e0:e5:7b:13:2c:c3:b4:
                    d7:a5:b2:4b:ec:15:b3:f1:4e:76:68:4c:13:6c:6d:
                    f9:ee:d5:3c:6b:96:63:36:ea:04:03:31:1c:d9:5f:
                    dc:a6:dd:49:4c:ae:7a:bc:f8:3f:db:c6:a7:dc:f6:
                    5f:47:f7:91:77:43:24:d4:31:bc:c6:ce:89:75:48:
                    aa:92:62:fe:06:62:8d:f8:03:96:50:b8:c4:44:02:
                    16:09:13:4b:3b:92:4f:51:3f:05:55:cf:23:66:48:
                    8a:ff:e1:70:ad:25:c0:3d:aa:b9:d6:0e:64:73:f8:
                    b5:75:1f:29:28:8e:32:49:61:d6:33:c6:95:da:3c:
                    82:6d:55:ed:f4:ff:25:fe:9b:ca:a6:e0:8a:b4:7f:
                    fa:d3:eb:4e:a7:26:c3:f3:ed:2b:bf:bf:05:50:5e:
                    a6:14:10:94:5a:f5:b0:0d:43:94:1b:4c:70:94:d5:
                    be:2a:88:9f:52:34:33:08:86:33:c0:2e:a2:ca:f5:
                    1c:ce:27:5b:b2:de:72:92:ad:52:e5:33:3b:d8:86:
                    f4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:5C:09:F5:6C:07:3B:5E:0D:FE:02:47:15:F4:8A:B1:13:CF:A4:4A
            X509v3 Authority Key Identifier:
                keyid:51:C3:CC:54:41:4F:B4:42:BE:39:D6:E1:A4:AF:72:4C:FF:EE:EE:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UcPMVEFPtEK-OdbhpK9yTP_u7v8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:62:88:32:84:19:b7:95:67:03:33:2f:05:b9:77:27:88:c8:
         f6:5d:f1:18:cb:1f:7c:af:78:66:fa:b6:fd:85:b7:55:05:e7:
         9d:2e:a4:c3:0e:9e:92:fd:ea:93:d6:2e:99:d3:ea:27:34:ce:
         a3:b6:da:9d:a1:cd:50:a0:d6:13:58:59:84:fc:51:e5:5c:da:
         c9:0a:15:0e:64:4a:a5:bc:61:70:be:8a:3a:08:52:c0:18:16:
         b8:c2:d8:6e:e2:93:c5:0c:a8:5d:98:43:3e:66:24:e3:83:44:
         5e:eb:6b:39:d6:3a:10:ee:d1:55:2a:5a:18:c5:5a:70:fe:d0:
         e1:5b:96:b4:54:2b:52:6a:91:b8:ea:c2:5f:5f:f9:68:fa:44:
         51:2f:1a:0f:25:1c:3f:2c:8a:d1:6a:29:78:d8:2e:35:fc:3e:
         56:91:d7:72:bd:7d:60:28:e0:ba:06:51:ff:99:eb:0c:5f:9d:
         3e:65:23:2f:44:3d:3b:91:16:98:83:2b:d2:ed:0f:a0:7e:7a:
         59:a2:35:ce:f0:86:dc:80:d3:4a:24:87:9d:70:26:dd:3c:23:
         40:26:d1:56:73:49:c0:94:62:ae:42:64:46:b2:60:67:43:a4:
         e5:e6:9f:45:49:37:fb:db:29:0e:d7:71:41:32:42:2f:26:6f:
         9f:b2:c7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:35:00 2026 by rpki-client