Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft
File:                     uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft (raw, json)
Hash identifier:          hNibUk78CsgobuRJ197h7eSv5fGEVtSzprOWdOIL7XU=
Subject key identifier:   51:6E:A8:10:4C:3A:6D:29:79:E0:FF:EC:51:75:28:B7:83:D1:5D:29
Authority key identifier: BB:2C:F1:ED:10:5C:5C:1D:C5:27:BC:D0:F1:49:FE:94:49:EB:D3:26
Certificate issuer:       /CN=bb2cf1ed105c5c1dc527bcd0f149fe9449ebd326
Certificate serial:       019DCF0754940392A920EC7A10002EC98094
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft
Manifest number:          1805
Signing time:             Mon 27 Apr 2026 13:00:57 +0000
Manifest this update:     Mon 27 Apr 2026 13:00:57 +0000
Manifest next update:     Tue 28 Apr 2026 13:00:57 +0000
Files and hashes:         1: CuUCOVoBNa4lfloeWs6XIVB_B4Y.roa (hash: TuLZ7u/Cx0w1+WEAiUv8OozNkGlySiKUJnI2uVfgxus=)
                          2: uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.crl (hash: x5AS1PAFR5pb79iNLNP0xYpMw0S6iQY+9QNJ6FQIvWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cf:07:54:94:03:92:a9:20:ec:7a:10:00:2e:c9:80:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb2cf1ed105c5c1dc527bcd0f149fe9449ebd326
        Validity
            Not Before: Apr 27 13:00:57 2026 GMT
            Not After : Apr 28 13:00:57 2026 GMT
        Subject: CN=516ea8104c3a6d2979e0ffec517528b783d15d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b8:0e:ae:59:99:c6:c2:d9:90:54:ba:ca:12:
                    92:12:fd:06:10:68:83:75:ac:a4:18:40:3e:51:cb:
                    71:b5:13:36:da:13:af:27:06:49:8e:a0:dc:fd:45:
                    46:47:4c:cb:bd:90:8e:1b:8e:0a:1d:52:a1:de:d2:
                    77:dd:f9:0f:03:06:b5:85:c0:39:c2:a8:bb:bd:6c:
                    1b:d9:e9:b2:e8:0a:60:8e:7b:4a:66:e7:2a:16:4c:
                    1a:7d:b3:ec:8e:ae:f2:cc:f7:b5:be:c6:d0:13:35:
                    02:4a:a9:07:3a:d6:a3:66:89:ef:20:11:cd:fb:6c:
                    10:9f:94:e8:ec:4b:11:ca:91:bc:0e:dc:b8:a9:3c:
                    37:fe:68:d9:ad:da:28:79:6c:70:1f:62:c2:93:0f:
                    b8:d5:b6:4d:11:9a:ee:56:c5:db:db:c6:1f:f0:f2:
                    d2:53:62:c1:be:cc:d7:ed:5c:49:a3:e2:1d:0b:7d:
                    ac:52:01:2d:d3:71:c0:97:aa:b4:cf:e9:d9:1a:e6:
                    ad:e7:bf:2d:48:c9:98:85:14:b8:ae:c0:4d:61:81:
                    02:54:69:a7:2f:a7:27:0d:86:de:53:f8:72:29:1b:
                    04:54:20:4f:f2:45:cf:fd:7d:70:13:c4:e2:15:ef:
                    9a:f9:1c:40:f7:3b:78:e2:76:70:b7:7e:3f:cd:77:
                    79:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:6E:A8:10:4C:3A:6D:29:79:E0:FF:EC:51:75:28:B7:83:D1:5D:29
            X509v3 Authority Key Identifier:
                keyid:BB:2C:F1:ED:10:5C:5C:1D:C5:27:BC:D0:F1:49:FE:94:49:EB:D3:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:8e:8e:55:16:70:d0:9a:cc:50:33:79:92:7f:d1:2b:6c:01:
         aa:61:04:db:3a:16:b0:8a:49:21:18:47:5e:5a:0d:d7:87:53:
         2c:df:62:ad:66:41:c0:09:53:7a:41:26:8f:46:41:f7:4f:a3:
         95:69:a1:36:84:8c:4e:78:13:0f:0c:de:b8:b2:7a:b0:9c:4a:
         40:cd:79:e3:bc:33:1e:f8:71:8b:1a:40:f1:45:c9:52:20:6f:
         a1:71:7b:2c:d1:eb:fe:8d:8e:04:aa:57:64:f6:52:74:36:52:
         09:1c:84:b8:b3:bd:90:27:af:37:9a:d0:6a:81:89:6b:88:35:
         2d:bf:d1:a2:27:69:d1:bb:a8:32:e8:f4:70:b9:83:72:28:b8:
         a4:34:80:84:3f:0f:0f:1e:46:17:40:64:b5:a2:ed:76:ed:94:
         53:d8:b0:f8:54:23:c7:6a:c3:4e:41:15:fa:83:6a:f1:21:98:
         27:5b:c7:79:ff:e5:88:f9:4e:df:13:87:20:89:68:a5:c7:6e:
         92:3d:42:cf:38:44:36:43:a0:92:10:f4:5c:0f:42:6f:46:73:
         58:24:e0:b0:8a:62:b2:2e:ff:ed:0e:96:60:8f:28:4b:3a:f1:
         22:74:26:eb:83:56:e8:72:e0:76:9e:0f:c7:b9:86:ca:b7:6b:
         99:62:be:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:06:08 2026 by rpki-client