Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
File:                     uC57gGjErprkykw6ayCWGZp0H_I.mft (raw, json)
Hash identifier:          5ITkKnbDZklBCPqHNYs79pJGpAyN28nm2PJMDc9TayU=
Subject key identifier:   81:16:60:C6:8B:A7:BB:AE:01:92:A2:B6:C8:98:C1:6A:66:79:2A:B5
Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
Certificate issuer:       /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Certificate serial:       019DCC063ADEBD674B15E9D2B5D2FECE9B09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
Manifest number:          1577
Signing time:             Sun 26 Apr 2026 23:00:53 +0000
Manifest this update:     Sun 26 Apr 2026 23:00:53 +0000
Manifest next update:     Mon 27 Apr 2026 23:00:53 +0000
Files and hashes:         1: D9vGSctTQ6G39-Tj1KvzWEev7A0.roa (hash: dCtLdzE8AAyiXqvWxFMu+nXlWgdt/7ZcgVwWdiQ4TE4=)
                          2: J85fjuSQxz3wg1fx9HApSpky-cc.roa (hash: UxFrHM/u1QxNZlVa/F5dPFto/GBnUH2xgwkXvxIONS8=)
                          3: JSRjHuE9Dlxbd6kNUCmCyuTjzi8.roa (hash: zf3sZG8UyEv9zaK8C2m/Vb5bOTa/zuVQAu3HlY+cXHI=)
                          4: PGDw99LFu8cUJWnydQ7BWcOhXTI.roa (hash: x69/sh35YI+yTa5z+lbFr8Vns/76h1dYMvcCscIlmMQ=)
                          5: uC57gGjErprkykw6ayCWGZp0H_I.crl (hash: EIlIWKAJmQJ3ggRefNOXPkeolnhYH4e/zbrfCe7VjRo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Apr 2026 23:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cc:06:3a:de:bd:67:4b:15:e9:d2:b5:d2:fe:ce:9b:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
        Validity
            Not Before: Apr 26 23:00:53 2026 GMT
            Not After : Apr 27 23:00:53 2026 GMT
        Subject: CN=811660c68ba7bbae0192a2b6c898c16a66792ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:31:ae:9b:01:d3:11:44:b6:bb:44:4a:1e:25:
                    2b:c9:4e:39:c5:86:bb:91:cd:9c:dc:85:c0:b3:d9:
                    7d:b6:c2:f3:36:e3:74:ec:af:d4:d0:0b:94:51:bb:
                    59:1f:b3:9a:e5:72:00:4a:21:36:a2:cb:3d:d8:aa:
                    9e:83:e0:6c:22:da:fe:75:33:f6:4b:55:f8:c6:d6:
                    8a:66:8c:f8:6e:34:6f:d4:23:dd:b1:2e:73:0f:59:
                    5b:71:4a:fd:ba:b9:a0:84:aa:97:95:72:b4:ce:48:
                    08:ea:fd:a8:67:4c:e3:92:27:6d:c1:b5:80:dc:b9:
                    80:a5:fe:50:10:66:f3:eb:38:96:60:c9:a2:3e:1a:
                    53:68:b4:94:e0:e0:01:32:a9:85:a8:56:44:a8:1b:
                    0f:68:7a:20:67:a2:e0:03:64:11:69:3d:62:0d:27:
                    94:87:40:d4:1f:f6:41:41:09:e3:c2:af:53:a5:8c:
                    82:07:34:f9:bb:72:3f:dc:02:18:ae:94:0e:55:fe:
                    69:1a:0b:01:0b:f5:a3:1d:10:24:3d:30:e5:55:33:
                    2c:3b:de:64:0b:fb:fd:fb:31:aa:4a:32:21:03:0a:
                    d3:e8:94:9b:c7:0d:b6:53:2d:b3:5d:7d:19:31:3b:
                    59:a9:87:90:d7:af:8c:1a:49:06:f1:66:85:88:b1:
                    af:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:16:60:C6:8B:A7:BB:AE:01:92:A2:B6:C8:98:C1:6A:66:79:2A:B5
            X509v3 Authority Key Identifier:
                keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:93:35:cc:aa:fe:e3:c5:52:29:1a:f6:2c:04:9c:d2:27:c5:
         90:00:c7:2a:92:5f:f6:4f:06:cc:e7:9c:c6:ea:45:cf:2e:47:
         55:6f:4a:c6:b8:a8:d4:1f:ea:d0:59:f0:76:a0:77:94:34:0a:
         f4:5b:f3:50:9b:f0:28:1d:95:26:0b:be:de:dc:5e:45:54:07:
         18:49:83:68:d9:39:6e:89:64:8d:bf:5d:53:4c:02:33:8d:a9:
         a9:62:52:4f:bf:b4:c8:c5:39:6d:1f:c8:9e:1e:a8:ec:3f:e7:
         d4:53:1c:a6:60:15:d8:36:df:71:07:2e:b5:3e:12:f9:2d:a4:
         4d:a1:13:71:1e:9c:c6:e5:1a:c2:00:37:4b:b3:e5:e5:c0:30:
         78:54:e6:96:57:a3:8c:c7:4e:a1:56:3d:d2:54:e6:4c:5c:c7:
         4d:71:a3:db:28:54:f7:aa:6d:99:e8:06:2c:42:82:08:67:aa:
         c2:ff:5b:f7:ec:3f:60:1e:8b:2a:fc:55:12:6b:c8:ea:fe:9c:
         57:29:8a:e4:21:b7:80:6f:6d:de:8b:bd:ef:28:cc:1b:65:a1:
         17:44:e4:a4:ee:0c:79:e2:c4:3c:54:7d:41:ed:97:5e:0f:36:
         23:42:2f:ba:4a:a5:85:db:73:2d:d6:84:6c:f1:13:2d:be:71:
         b2:86:ec:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:17:04 2026 by rpki-client