Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
File:                     UFQvugwXtDkeMpbENLX_8jqCm24.mft (raw, json)
Hash identifier:          kdMFvfENE4CExubY6aqrWASTQUZAf7hX+Y1Uh8fgfCE=
Subject key identifier:   0A:02:FD:F1:BF:0D:B8:D6:B6:7F:2F:12:99:A4:0B:C0:BB:99:D1:72
Authority key identifier: 50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
Certificate issuer:       /CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Certificate serial:       019DCFE379A0A531F186905694F24362B9A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
Manifest number:          1505
Signing time:             Mon 27 Apr 2026 17:01:24 +0000
Manifest this update:     Mon 27 Apr 2026 17:01:24 +0000
Manifest next update:     Tue 28 Apr 2026 17:01:24 +0000
Files and hashes:         1: UFQvugwXtDkeMpbENLX_8jqCm24.crl (hash: 8GXaS/QhwyeHj2V1J8usLTJRo1heTNVHz/zrSBOiAO8=)
                          2: brFnh3rq3SaqASoxymZGHF7hvHQ.roa (hash: lmozdC2cR8kjC76avAg5K/NKcOEBFp0Tuc3TVnelJ0g=)
                          3: r-wLcfbrV7gSA_iFZTlD40lbPxI.roa (hash: 9BuizisqfHZcVlGBCcKNw9NkVDpUfvizltmHgaebiwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 17:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cf:e3:79:a0:a5:31:f1:86:90:56:94:f2:43:62:b9:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50542fba0c17b4391e3296c434b5fff23a829b6e
        Validity
            Not Before: Apr 27 17:01:24 2026 GMT
            Not After : Apr 28 17:01:24 2026 GMT
        Subject: CN=0a02fdf1bf0db8d6b67f2f1299a40bc0bb99d172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:40:5a:a9:78:f9:a5:c7:71:35:4a:8b:a9:33:
                    ee:d5:a1:cc:19:f9:07:95:f1:b7:37:aa:e5:6f:ea:
                    03:c3:ba:49:dd:4a:20:56:b7:11:03:8e:c9:b2:b5:
                    77:20:da:e1:4d:e9:cf:17:d4:3c:ab:40:d7:b1:6c:
                    a7:a9:0f:ed:a0:6b:9d:eb:20:8d:2c:18:2b:7b:aa:
                    a8:8e:1a:14:46:b0:90:dc:88:14:4a:d2:1f:f3:4c:
                    df:05:41:b3:ec:63:58:56:da:fb:d5:18:b4:28:e1:
                    aa:9b:83:e9:22:10:7b:35:8c:7a:1f:68:dc:90:9b:
                    b9:f0:d6:3e:78:15:c9:22:37:4d:f4:b9:67:86:5f:
                    28:44:b8:b9:d4:57:23:57:d4:7d:43:23:79:39:fd:
                    f6:af:3f:19:e4:cc:0e:f8:e1:d5:f6:64:c3:5e:1a:
                    36:dc:30:2d:44:2e:05:2c:15:82:fc:6d:34:47:2a:
                    13:68:99:c2:2a:e1:39:b5:cc:94:66:9e:18:9d:82:
                    bc:09:a7:fa:cc:16:f9:9c:fb:5f:7a:b9:3e:cb:9b:
                    a3:96:6c:68:e7:b6:35:d8:f0:49:6d:f3:eb:4c:41:
                    de:34:89:0d:3a:1a:45:00:7b:b1:3b:aa:44:43:0d:
                    6a:ff:1f:5d:9d:d1:f8:87:36:74:b0:fd:56:83:33:
                    f9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:02:FD:F1:BF:0D:B8:D6:B6:7F:2F:12:99:A4:0B:C0:BB:99:D1:72
            X509v3 Authority Key Identifier:
                keyid:50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:8c:1e:81:6b:3e:07:a8:25:5a:f7:84:c0:72:08:60:28:33:
         67:78:8c:54:b0:fa:02:36:03:0e:00:88:74:42:a2:9f:5b:8d:
         e3:60:f5:1d:5c:39:58:60:b1:20:3d:f6:0d:af:ba:2d:db:b5:
         70:aa:6b:7e:00:00:b3:ec:ae:63:5e:10:a6:c9:39:ed:5c:26:
         41:f5:f4:46:b7:65:c4:1c:81:8a:56:20:65:df:49:8b:40:93:
         63:6c:55:2c:4d:f9:14:11:df:01:8b:2e:fe:f8:c7:af:76:6e:
         69:84:31:6a:19:f0:08:2b:9f:26:c8:a2:db:c9:bb:aa:aa:5c:
         c7:d3:06:61:7e:39:c6:19:0e:c5:0a:51:3e:7a:4f:db:52:31:
         a5:40:25:71:a4:f3:9c:eb:c8:8f:f0:50:ca:95:f1:27:78:c6:
         38:68:b2:f8:13:7f:fa:d0:0f:3f:19:f9:e4:f7:ad:37:0e:88:
         88:a4:52:d8:b0:64:0a:9b:16:90:a2:6b:b5:f3:b5:22:f1:68:
         12:a9:83:93:42:35:a5:9a:51:51:56:10:fb:76:93:69:c5:83:
         57:c5:7c:f1:0d:9d:b5:51:6c:8a:de:c9:92:f0:6a:50:df:07:
         fb:0d:94:2f:70:62:83:dc:32:a3:38:15:45:9c:50:3b:aa:59:
         d1:7c:c6:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3P43mgpTHxhpBWlPJDYrmiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTQyZmJhMGMxN2I0MzkxZTMyOTZjNDM0YjVmZmYyM2E4
MjliNmUwHhcNMjYwNDI3MTcwMTI0WhcNMjYwNDI4MTcwMTI0WjAzMTEwLwYDVQQD
EygwYTAyZmRmMWJmMGRiOGQ2YjY3ZjJmMTI5OWE0MGJjMGJiOTlkMTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkBaqXj5pcdxNUqLqTPu1aHMGfkH
lfG3N6rlb+oDw7pJ3UogVrcRA47JsrV3INrhTenPF9Q8q0DXsWynqQ/toGud6yCN
LBgre6qojhoURrCQ3IgUStIf80zfBUGz7GNYVtr71Ri0KOGqm4PpIhB7NYx6H2jc
kJu58NY+eBXJIjdN9Llnhl8oRLi51FcjV9R9QyN5Of32rz8Z5MwO+OHV9mTDXho2
3DAtRC4FLBWC/G00RyoTaJnCKuE5tcyUZp4YnYK8Caf6zBb5nPtferk+y5ujlmxo
57Y12PBJbfPrTEHeNIkNOhpFAHuxO6pEQw1q/x9dndH4hzZ0sP1WgzP5mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAoC/fG/DbjWtn8vEpmkC8C7mdFyMB8GA1UdIwQY
MBaAFFBUL7oMF7Q5HjKWxDS1//I6gptuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZRdnVnd1h0RGtlTXBiRU5MWF84anFDbTI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jYjJiZGQtMzI5MS00MGFmLThhODgt
NWU5Nzg3YjZhZWFhLzEvVUZRdnVnd1h0RGtlTXBiRU5MWF84anFDbTI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9jYjJiZGQtMzI5MS00MGFmLThhODgtNWU5Nzg3YjZhZWFh
LzEvVUZRdnVnd1h0RGtlTXBiRU5MWF84anFDbTI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVIwegWs+
B6glWveEwHIIYCgzZ3iMVLD6AjYDDgCIdEKin1uN42D1HVw5WGCxID32Da+6Ldu1
cKprfgAAs+yuY14Qpsk57VwmQfX0RrdlxByBilYgZd9Ji0CTY2xVLE35FBHfAYsu
/vjHr3ZuaYQxahnwCCufJsii28m7qqpcx9MGYX45xhkOxQpRPnpP21IxpUAlcaTz
nOvIj/BQypXxJ3jGOGiy+BN/+tAPPxn55PetNw6IiKRS2LBkCpsWkKJrtfO1IvFo
EqmDk0I1pZpRUVYQ+3aTacWDV8V88Q2dtVFsit7JkvBqUN8H+w2UL3Big9wyozgV
RZxQO6pZ0XzGAQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:41:38 2026 by rpki-client