Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft
File:                     UAWWzmBz6O3txRBfgU7JcZG14dU.mft (raw, json)
Hash identifier:          qpdaCxZ9G5la8HrSF+I+2MftUGku+gVjRFJVpjbY5ZA=
Subject key identifier:   A6:68:F6:43:8B:4F:26:03:26:C7:36:B0:4F:7D:BF:3E:2A:67:EE:11
Authority key identifier: 50:05:96:CE:60:73:E8:ED:ED:C5:10:5F:81:4E:C9:71:91:B5:E1:D5
Certificate issuer:       /CN=500596ce6073e8ededc5105f814ec97191b5e1d5
Certificate serial:       019DCD5021B533DF3477BF14259353A365DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft
Manifest number:          1207
Signing time:             Mon 27 Apr 2026 05:01:13 +0000
Manifest this update:     Mon 27 Apr 2026 05:01:13 +0000
Manifest next update:     Tue 28 Apr 2026 05:01:13 +0000
Files and hashes:         1: UAWWzmBz6O3txRBfgU7JcZG14dU.crl (hash: EjuOKIitk5sxP+16XZnOxXE+K21l5Tq1jPz9hEYjwdY=)
                          2: ajuDEzNJwC4r5rxMhDlnFbCct18.roa (hash: d8WaXIaoocbHmWCmpBjreywqEe6b/owRz1fe/aRzGoQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 05:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cd:50:21:b5:33:df:34:77:bf:14:25:93:53:a3:65:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500596ce6073e8ededc5105f814ec97191b5e1d5
        Validity
            Not Before: Apr 27 05:01:13 2026 GMT
            Not After : Apr 28 05:01:13 2026 GMT
        Subject: CN=a668f6438b4f260326c736b04f7dbf3e2a67ee11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:29:32:88:f6:3c:fa:7d:d9:2b:8d:24:13:87:
                    8b:16:d7:b2:09:61:8f:9c:c4:80:0f:19:73:e1:ee:
                    19:15:8b:d3:04:f0:d2:f6:2f:47:c1:a5:32:71:a1:
                    49:0c:1d:05:70:26:b6:b9:b4:32:ea:c1:9b:ad:e8:
                    8f:3f:fe:7c:08:78:98:95:09:17:9a:02:5b:1f:9a:
                    f6:93:85:06:49:66:c3:47:c2:38:66:6e:2c:56:21:
                    1d:00:a4:20:86:e6:25:6e:05:fc:f7:2a:35:72:b1:
                    d5:b2:3c:cb:48:a2:bb:2d:ea:d5:9b:c6:38:29:57:
                    3c:80:2d:48:70:1b:d5:a6:3b:da:4e:6c:94:b6:09:
                    d5:a3:66:28:ff:1d:94:90:15:18:9f:be:fc:ef:bb:
                    a8:9f:2e:69:39:6b:89:45:1a:7d:01:d1:74:14:ac:
                    19:43:32:bd:ee:a5:28:89:06:45:8e:01:4f:4f:bb:
                    8b:dd:78:41:6f:db:f6:18:a5:23:9c:29:15:53:55:
                    74:70:32:ff:f0:0c:48:a5:63:d8:fb:96:f6:8b:a6:
                    13:74:bd:40:fb:ff:ec:84:eb:71:54:54:dc:8d:5e:
                    1f:1f:3c:01:f5:94:7a:fc:24:a0:6c:22:e6:1c:a8:
                    5c:f3:68:bf:6b:28:67:95:49:57:3c:17:fd:8c:c3:
                    0e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:68:F6:43:8B:4F:26:03:26:C7:36:B0:4F:7D:BF:3E:2A:67:EE:11
            X509v3 Authority Key Identifier:
                keyid:50:05:96:CE:60:73:E8:ED:ED:C5:10:5F:81:4E:C9:71:91:B5:E1:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:f4:98:b5:8d:66:81:1b:56:b5:14:21:91:b7:a7:e3:d6:69:
         17:76:06:ba:c3:db:87:94:a5:84:d6:8d:8b:a5:a4:96:c9:0c:
         39:83:88:7e:e0:16:f3:d6:78:11:04:e3:ac:84:5f:a2:68:74:
         d3:64:e6:d8:ab:5c:68:63:86:8d:12:ee:e9:9e:ba:3d:16:a0:
         f9:2c:a6:a3:1a:8e:5f:4b:44:46:fe:47:43:96:f7:4c:b0:e1:
         56:a8:30:5b:42:cd:89:6a:a2:97:e6:d2:2b:69:b4:dc:f0:9f:
         98:c5:b9:37:f4:2f:26:94:1e:3e:65:cd:f1:dc:d1:7d:fc:19:
         1f:f8:95:02:b6:ee:6b:85:a6:fb:14:00:aa:6f:48:4a:39:6e:
         86:ef:6b:a4:09:b1:7a:17:8b:4b:88:29:55:79:a5:40:bf:5a:
         a4:79:bc:4c:ed:4d:e5:63:8e:88:41:f0:9c:6d:fd:c8:3d:06:
         71:e0:c3:89:20:8f:98:ee:ea:1e:02:22:4f:e1:b6:bf:b5:16:
         3c:81:0f:9e:af:ad:78:68:cf:da:1f:3e:0f:5e:99:83:50:0d:
         89:9d:ca:15:50:a2:4d:8c:64:56:f4:1f:7d:ac:c4:42:e9:1c:
         ee:24:32:bf:87:4b:2e:f9:e2:88:5a:93:6c:3e:37:e6:9b:0b:
         7e:84:50:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:48:42 2026 by rpki-client