Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft
File:                     uaoBqzUmuOu4r7F7mKcSfw9UykU.mft (raw, json)
Hash identifier:          Z1xCtKfV2znknNN42Oj3BL/37piPpm/W9VL9onFBLiM=
Subject key identifier:   B6:06:B2:1D:E9:74:B2:29:52:BB:5E:4C:23:E2:4D:B4:9F:33:CC:91
Authority key identifier: B9:AA:01:AB:35:26:B8:EB:B8:AF:B1:7B:98:A7:12:7F:0F:54:CA:45
Certificate issuer:       /CN=b9aa01ab3526b8ebb8afb17b98a7127f0f54ca45
Certificate serial:       019D992B083488C763AAEFEE9677AD4068AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uaoBqzUmuOu4r7F7mKcSfw9UykU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft
Manifest number:          16A4
Signing time:             Fri 17 Apr 2026 02:00:27 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:27 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:27 +0000
Files and hashes:         1: N3jaze7YJRe2qAy_Yl4PgjOPV78.roa (hash: J9hAHBk9hnYVFJwAFN6kZ7iaHqqOjhd7Ue4bGVAtGs4=)
                          2: uaoBqzUmuOu4r7F7mKcSfw9UykU.crl (hash: 9k8BWYNIxz9GM7FrI1zzgoigRWZ8glS+mNwn6CRpL8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uaoBqzUmuOu4r7F7mKcSfw9UykU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:08:34:88:c7:63:aa:ef:ee:96:77:ad:40:68:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9aa01ab3526b8ebb8afb17b98a7127f0f54ca45
        Validity
            Not Before: Apr 17 02:00:27 2026 GMT
            Not After : Apr 18 02:00:27 2026 GMT
        Subject: CN=b606b21de974b22952bb5e4c23e24db49f33cc91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:89:d5:59:25:bc:86:c7:a3:8c:93:34:cb:c1:
                    ba:5d:e1:b7:60:42:59:da:6e:bb:d1:0d:8a:b2:b5:
                    88:d8:59:23:c8:96:d7:50:72:fb:1f:41:22:73:09:
                    94:12:8f:b8:04:15:a9:ac:48:ad:89:71:be:47:31:
                    6f:52:c1:71:ed:bd:b5:58:53:16:fe:28:d1:0c:2a:
                    3e:33:4d:f6:1f:ef:04:66:10:ca:59:6f:d4:b6:7d:
                    64:f8:0d:6c:c4:b4:c3:d5:16:a7:6a:3a:62:8f:65:
                    7d:b4:00:d7:b9:fb:24:e3:fd:2e:65:e8:59:5f:d3:
                    27:07:c4:53:1a:af:78:0f:af:67:e4:98:49:8e:dd:
                    76:e8:05:46:5e:e8:4f:3a:60:77:c2:b2:3d:70:64:
                    78:45:52:e7:d9:6d:86:a5:4e:aa:a0:53:fd:7a:85:
                    62:54:73:fd:b2:b7:9c:0b:fa:dd:7a:a8:0f:0c:3c:
                    e1:ea:15:76:d6:34:fb:63:e2:3c:c0:bc:09:88:ad:
                    1d:79:8b:0d:cd:d9:86:4a:0e:f0:ed:f1:f1:08:26:
                    c7:8e:27:94:92:72:b2:7e:b8:00:f5:6e:a4:b7:aa:
                    17:fe:53:89:4b:a6:7c:5c:a1:d3:f3:03:ff:64:99:
                    08:48:a7:b9:ee:4b:49:57:1d:fa:82:b8:db:8a:08:
                    65:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:06:B2:1D:E9:74:B2:29:52:BB:5E:4C:23:E2:4D:B4:9F:33:CC:91
            X509v3 Authority Key Identifier:
                keyid:B9:AA:01:AB:35:26:B8:EB:B8:AF:B1:7B:98:A7:12:7F:0F:54:CA:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaoBqzUmuOu4r7F7mKcSfw9UykU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:9a:5a:22:79:11:2b:dc:6f:4a:20:51:d6:ce:37:70:4e:92:
         75:79:0d:10:3b:d4:18:8f:68:52:77:33:fa:b3:c0:4b:fe:6a:
         f0:4e:fe:01:03:f7:53:f9:e4:a1:cf:6b:f0:b1:19:4b:05:ee:
         d4:d3:e4:e9:14:b1:f4:21:4e:0e:e6:59:26:f2:1c:b0:17:cf:
         ed:43:5c:c8:92:12:94:d9:6a:8a:4f:fd:14:0b:f2:87:49:14:
         25:1f:5b:32:4e:e2:c1:0c:93:d4:83:88:ab:0f:67:3d:5f:fb:
         81:33:a5:0f:ee:5c:05:c6:b2:4c:58:01:27:57:a7:7e:a2:66:
         9c:74:01:6d:d6:1d:f0:d7:1e:03:0d:82:ca:2c:14:a3:bc:90:
         c9:51:b1:69:3c:76:3d:e5:5f:03:10:96:2d:6d:f0:c9:ef:43:
         1b:01:81:e2:17:2c:98:12:66:5c:fd:07:7a:87:70:af:a2:79:
         67:e3:99:90:cf:b9:27:2b:56:65:18:87:07:b7:7f:13:88:86:
         1f:5e:d1:e9:1b:ee:4b:51:3d:15:c5:5e:18:33:26:7f:78:16:
         7d:09:76:67:61:79:73:0e:da:1f:ef:78:20:6f:5b:98:09:58:
         2c:ff:9b:f3:0b:cc:b7:a2:55:87:6a:07:c5:3c:d7:bf:27:f7:
         4d:a8:4b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:02:05 2026 by rpki-client