Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
File:                     uFh0CVxMlCK5NZdacVZPB3HNKS4.mft (raw, json)
Hash identifier:          wjuUKYHnJHjR2FzWCFgnd18GXl0FZp6QiTabr3D8isE=
Subject key identifier:   26:C3:F3:F6:12:19:D3:DA:FF:2B:EF:FA:B5:29:5D:D5:AD:97:1A:0B
Authority key identifier: B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
Certificate issuer:       /CN=b85874095c4c9422b935975a71564f0771cd292e
Certificate serial:       019DA29CFF67E43E53648AB26D4BC52FCA0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
Manifest number:          085F
Signing time:             Sat 18 Apr 2026 22:01:31 +0000
Manifest this update:     Sat 18 Apr 2026 22:01:31 +0000
Manifest next update:     Sun 19 Apr 2026 22:01:31 +0000
Files and hashes:         1: onylvAnaX1xJT4oQ_18209fUiQo.roa (hash: uJ5yGGvZ7mIQiDhU+Wu/R2iMU5zPKWhZCJOHY75uE3g=)
                          2: uFh0CVxMlCK5NZdacVZPB3HNKS4.crl (hash: JOuoaX7sWrYzn2LVwnjyl0ilYK+mgVXki4lEoAfYRAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 17:59:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a2:9c:ff:67:e4:3e:53:64:8a:b2:6d:4b:c5:2f:ca:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b85874095c4c9422b935975a71564f0771cd292e
        Validity
            Not Before: Apr 18 22:01:31 2026 GMT
            Not After : Apr 19 22:01:31 2026 GMT
        Subject: CN=26c3f3f61219d3daff2beffab5295dd5ad971a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:59:a7:d1:78:71:93:77:55:87:85:8f:5c:13:
                    ff:c6:7b:4c:0c:40:f5:c9:34:2f:6c:85:78:aa:87:
                    26:38:66:eb:da:19:60:fd:00:0e:87:cd:4c:2f:45:
                    a3:f5:d1:92:84:33:14:0e:3d:0f:e1:f1:2f:15:b4:
                    44:71:66:5a:ce:67:e8:41:b8:fe:63:91:d2:ef:c6:
                    1d:83:49:5a:5b:d0:5f:ca:5b:db:e9:20:ac:03:f0:
                    21:17:4d:b3:cb:25:ed:22:f1:92:69:98:b1:a4:25:
                    8f:a2:84:53:d3:57:bd:3f:c8:2a:96:36:dd:b4:7a:
                    57:a6:96:b4:4f:0f:dd:2f:25:2d:0c:ac:ed:29:00:
                    dc:db:3e:6d:1b:f7:81:08:21:9a:d4:54:ca:0b:9a:
                    c4:e2:39:a3:e4:35:d5:69:10:78:3c:3e:e8:e2:82:
                    b2:cb:d0:38:11:53:e5:fe:d4:b3:84:fe:d5:3e:48:
                    f3:21:d4:eb:3c:71:77:aa:69:b9:6b:0d:1e:93:7b:
                    88:f6:a6:57:04:9c:f7:96:71:3a:3f:a6:e0:da:70:
                    9d:42:33:dc:8e:42:ae:6c:1b:59:e3:34:61:4b:5f:
                    05:fd:f2:95:96:ee:fe:ce:3a:e8:a3:7a:7c:90:6b:
                    b5:81:3d:a0:ef:81:ab:78:88:7f:7b:dd:74:5b:af:
                    10:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C3:F3:F6:12:19:D3:DA:FF:2B:EF:FA:B5:29:5D:D5:AD:97:1A:0B
            X509v3 Authority Key Identifier:
                keyid:B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ae:27:78:c6:f2:4c:4c:6a:38:49:d6:4d:a1:0a:86:13:d0:
         99:7f:1b:0f:6f:d9:e5:45:21:83:03:63:f7:04:a7:f9:e5:bb:
         e7:03:cb:6c:a4:42:6a:d4:83:1c:70:2c:1f:52:e9:ad:47:db:
         2c:8b:61:04:b5:e8:5d:15:b4:d2:37:4f:4b:c3:57:3f:de:25:
         1e:54:d7:8f:a6:d6:cd:89:43:ed:bf:27:e7:5e:fe:ce:38:a2:
         0a:cd:53:40:84:5c:70:fc:9b:47:f5:10:6f:76:93:8e:b5:82:
         58:40:ff:be:28:6b:2a:26:fe:23:f8:6f:34:fc:22:dd:1f:59:
         f7:05:29:02:48:fb:80:16:9b:f2:ba:15:eb:df:bb:1b:0c:91:
         43:e7:85:c6:94:f3:e7:bf:d2:21:3d:6d:45:db:e1:7c:a7:3c:
         e1:ee:59:70:04:85:a2:79:6b:8a:b2:3e:e4:db:09:0a:b2:79:
         6e:e4:7e:0f:cd:31:23:88:0d:19:57:6d:ad:a2:84:1a:e7:42:
         86:71:99:28:19:f1:12:90:69:57:1f:c9:f0:9f:d4:4c:a4:d0:
         d8:f5:ed:53:7d:76:3e:8e:36:49:a2:3c:0c:9e:a3:92:96:0b:
         2e:64:51:6f:c3:6e:54:19:0c:af:fa:cc:eb:a5:64:90:6b:51:
         c5:dc:f5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 00:55:15 2026 by rpki-client