Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft
File:                     UeMbSuzGWzElp7R6yQkIsKUXhIM.mft (raw, json)
Hash identifier:          sdYZuWk13/MAj6L3QKMRgxpo0frI5LKF5b+WlVWGhcI=
Subject key identifier:   6C:C5:D5:99:6F:87:A0:5B:C2:F3:83:E4:E4:B5:90:AD:50:1A:A6:D8
Authority key identifier: 51:E3:1B:4A:EC:C6:5B:31:25:A7:B4:7A:C9:09:08:B0:A5:17:84:83
Certificate issuer:       /CN=51e31b4aecc65b3125a7b47ac90908b0a5178483
Certificate serial:       019DA97A077DAD74179BCFAD14573B98C326
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeMbSuzGWzElp7R6yQkIsKUXhIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft
Manifest number:          1134
Signing time:             Mon 20 Apr 2026 06:00:39 +0000
Manifest this update:     Mon 20 Apr 2026 06:00:39 +0000
Manifest next update:     Tue 21 Apr 2026 06:00:39 +0000
Files and hashes:         1: UeMbSuzGWzElp7R6yQkIsKUXhIM.crl (hash: RAZhBw0v1/Lc6qgvn2GSgxccW9UqXn0hWIsj0tgRRsQ=)
                          2: WHzT1xNbrqBC6jtKFtgLQt_Vl6E.roa (hash: 8QkWSVBBzKymI1BjVbTns65IfcYeeeiohZFtfy32gfk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UeMbSuzGWzElp7R6yQkIsKUXhIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Apr 2026 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a9:7a:07:7d:ad:74:17:9b:cf:ad:14:57:3b:98:c3:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e31b4aecc65b3125a7b47ac90908b0a5178483
        Validity
            Not Before: Apr 20 06:00:39 2026 GMT
            Not After : Apr 21 06:00:39 2026 GMT
        Subject: CN=6cc5d5996f87a05bc2f383e4e4b590ad501aa6d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f9:9e:fe:18:71:ee:f8:43:50:04:dc:f5:d7:
                    c7:23:b2:29:f5:e3:8c:31:e3:fa:e3:a2:8b:15:20:
                    45:7f:94:ee:38:e7:18:6a:9e:89:73:c0:84:ee:b1:
                    68:c6:cf:62:83:2a:c3:aa:af:03:8c:dc:58:c6:f0:
                    94:7d:cb:36:f9:36:68:a2:a0:d4:7d:4b:53:c9:0c:
                    4c:c1:cf:06:d6:97:45:07:1a:19:7e:84:71:b5:7a:
                    03:e9:ea:e7:2b:ac:10:f4:02:c9:c4:a4:97:9f:fb:
                    ce:41:7d:ad:5a:57:67:e4:3a:e4:8b:02:54:3a:47:
                    c4:dc:58:59:bb:b0:f7:fc:8f:30:94:bf:37:4d:d2:
                    d2:df:61:79:d0:d7:e2:34:df:d1:0f:08:24:95:33:
                    ec:00:16:b7:d9:e0:2c:11:4d:38:d0:00:f7:42:a7:
                    1b:92:d8:10:9c:6e:18:1d:30:90:21:99:37:57:80:
                    87:78:a8:d7:53:8b:9a:9e:8b:0a:6c:a1:9e:74:17:
                    95:fb:0d:66:18:3c:a4:95:f0:15:9c:e7:22:f1:fc:
                    da:ce:59:54:8a:2a:5b:c7:23:93:75:67:7f:fb:f8:
                    b1:58:99:c8:12:dc:e7:a4:2d:be:ff:fe:72:46:b8:
                    9f:53:30:94:e3:96:23:8a:23:0c:78:48:68:93:fc:
                    54:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C5:D5:99:6F:87:A0:5B:C2:F3:83:E4:E4:B5:90:AD:50:1A:A6:D8
            X509v3 Authority Key Identifier:
                keyid:51:E3:1B:4A:EC:C6:5B:31:25:A7:B4:7A:C9:09:08:B0:A5:17:84:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeMbSuzGWzElp7R6yQkIsKUXhIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:f6:34:d3:b6:1e:ed:53:1b:0e:79:db:52:ca:bd:32:56:ea:
         fa:a7:75:7b:cf:84:b8:37:48:3f:77:f6:cb:c2:26:d8:1e:ad:
         dc:5f:1f:22:97:e9:41:ea:e0:fc:ab:e3:67:c5:6b:3a:53:5e:
         23:2a:99:63:76:9b:86:de:df:b0:14:ef:2e:94:5e:a1:97:47:
         18:4b:c1:8e:54:c0:cb:21:31:e2:ab:17:7a:d1:d0:1d:39:43:
         e1:55:21:c5:3b:aa:6e:16:b1:92:5f:b5:d4:fc:e6:51:1c:7d:
         4c:31:a9:05:ed:e4:04:41:a8:87:bf:23:aa:74:73:58:24:08:
         4f:9f:3a:e9:af:d5:d2:a5:f6:ca:1e:75:07:6e:f7:44:57:f3:
         0b:e2:8c:e6:a8:71:dd:68:69:69:51:f2:5a:79:e6:c6:30:d4:
         9f:81:b2:78:b2:db:4a:bb:26:2f:78:43:48:bf:78:af:bb:27:
         37:65:16:9e:80:a7:31:55:02:94:c5:e7:ac:2f:ca:57:97:36:
         80:7e:57:4a:ae:b5:2f:88:54:f5:69:6a:f2:fe:d6:c2:65:60:
         85:75:a0:a8:11:ac:05:d7:76:35:1c:9f:d3:5b:58:f8:5d:83:
         54:37:6f:0f:93:5a:5c:11:24:98:d0:fa:67:78:c6:74:0b:c9:
         a4:f9:b8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 08:40:06 2026 by rpki-client