Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
File:                     uqrQjzbPvAAFOl7j1au3oxF8P4o.mft (raw, json)
Hash identifier:          BaBUexLKl/biG0brdvEcvVm4SQUyvK1PY99Y8gVh8SA=
Subject key identifier:   2D:AB:F2:26:DB:1F:D6:E5:E6:E8:19:62:97:AA:BB:8A:24:19:88:A5
Authority key identifier: BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A
Certificate issuer:       /CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a
Certificate serial:       019DB20F62033C37A228ED8A7C8C0F1472F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
Manifest number:          1030
Signing time:             Tue 21 Apr 2026 22:00:45 +0000
Manifest this update:     Tue 21 Apr 2026 22:00:45 +0000
Manifest next update:     Wed 22 Apr 2026 22:00:45 +0000
Files and hashes:         1: S-yBnbW2TPRdHm8Bvnkb6SKNP-E.roa (hash: thzWzHkRBVrBpMkyMju39NgzMSOUf/2SSYied1BZFaw=)
                          2: uqrQjzbPvAAFOl7j1au3oxF8P4o.crl (hash: fxUkgfrt9XKtk4dfE2ig8kz7Sv41RP6yXzo4MUj9SNk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Apr 2026 21:56:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:b2:0f:62:03:3c:37:a2:28:ed:8a:7c:8c:0f:14:72:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a
        Validity
            Not Before: Apr 21 22:00:45 2026 GMT
            Not After : Apr 22 22:00:45 2026 GMT
        Subject: CN=2dabf226db1fd6e5e6e8196297aabb8a241988a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:76:bb:0e:7a:fe:3f:c7:f2:b5:ce:14:02:62:
                    07:04:ed:30:d7:88:de:50:fc:3f:ad:0b:14:71:f9:
                    e4:73:fe:90:d2:79:be:ad:e5:c4:c1:b8:0f:f7:64:
                    ac:10:c1:ab:79:cf:d8:cb:d8:d7:9d:b4:63:d2:7f:
                    ab:2b:3d:12:21:df:d5:2d:7f:8e:95:29:c3:95:84:
                    5e:ae:51:92:70:b0:fa:8e:49:1d:b8:b3:39:34:93:
                    6d:65:9b:86:74:4a:e4:4f:11:0f:cb:ed:d0:be:0b:
                    fe:6a:bb:30:6e:76:4a:88:a1:bf:25:f5:48:d0:2d:
                    13:59:f9:6f:58:69:85:06:8e:6b:4e:4d:a3:a7:28:
                    f9:f9:de:c0:66:ff:d3:1f:e0:72:12:56:a2:8f:fd:
                    b3:f4:e0:91:51:65:c1:07:59:0e:65:1c:4c:c7:7b:
                    df:30:e2:a1:ec:5d:8a:d7:99:5f:73:33:3b:08:88:
                    ea:53:1d:dc:ef:8a:43:2d:b2:bd:57:be:79:08:d2:
                    6d:44:8f:ee:d4:b2:09:da:c9:7f:f2:df:7d:09:24:
                    2c:e2:97:f1:fd:12:35:11:db:b0:11:69:b7:e9:3a:
                    ca:68:dd:cf:72:af:b8:f7:25:d9:03:22:ea:79:9b:
                    fb:ce:48:81:cc:ac:c6:1d:d2:40:ea:6f:8d:38:ed:
                    11:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:AB:F2:26:DB:1F:D6:E5:E6:E8:19:62:97:AA:BB:8A:24:19:88:A5
            X509v3 Authority Key Identifier:
                keyid:BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:9a:c0:80:61:d1:6b:11:89:17:f1:76:dd:7f:19:1c:62:77:
         a2:44:71:80:5b:2e:dd:b5:84:97:d0:fd:26:ca:96:43:99:d0:
         c1:73:e3:52:03:38:a4:c5:e2:ba:2e:ce:ab:1b:ab:30:e4:aa:
         db:1c:9b:67:4d:05:e7:7b:f3:80:7e:f6:80:43:92:dd:e1:bb:
         2f:28:39:db:44:ec:cb:75:34:70:1b:46:fb:73:f9:a5:ed:5d:
         8a:e2:65:e9:04:f8:23:68:8f:46:15:6b:f8:e8:4c:3b:d3:c8:
         75:6b:be:5c:8b:15:1b:8e:39:6f:f2:36:1c:8b:35:cf:32:33:
         20:67:ff:d5:fe:84:bf:0f:f0:3e:4c:6c:1c:23:d8:b6:20:1d:
         aa:c5:74:03:bc:a9:56:a1:c1:98:61:b5:38:a0:97:f2:c1:61:
         33:ea:50:63:f1:44:7b:14:0d:f5:a1:f1:56:3f:3d:57:15:02:
         89:d7:bd:75:bc:22:68:b5:1b:d1:f7:19:6a:ae:69:6c:16:61:
         a9:d3:9c:cd:40:78:d3:f3:ce:5b:7c:2a:6f:81:a9:3b:6d:db:
         cc:66:26:4d:29:6d:94:75:a8:8e:1f:af:02:34:67:50:64:e6:
         1b:04:64:0b:1c:27:4e:d4:ca:d0:34:86:78:8e:5a:54:34:9f:
         b7:e3:72:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 04:08:24 2026 by rpki-client