Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
File:                     uFsMinWJOk-OHvDZpNQUeNizMng.mft (raw, json)
Hash identifier:          ukFK9fGkt2uELn/bkTDjteMwPZrxdy3SwZRZM3jhWHo=
Subject key identifier:   94:66:02:90:6F:2F:E8:DE:70:DE:11:89:FA:DC:06:E0:6D:A9:AE:D6
Authority key identifier: B8:5B:0C:8A:75:89:3A:4F:8E:1E:F0:D9:A4:D4:14:78:D8:B3:32:78
Certificate issuer:       /CN=b85b0c8a75893a4f8e1ef0d9a4d41478d8b33278
Certificate serial:       019DDD3166E90CA5C3E4FC4861923A16ADB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
Manifest number:          1843
Signing time:             Thu 30 Apr 2026 07:01:35 +0000
Manifest this update:     Thu 30 Apr 2026 07:01:35 +0000
Manifest next update:     Fri 01 May 2026 07:01:35 +0000
Files and hashes:         1: 8y3Tj4TsEaNV9uqE3_Wm8d75SXY.roa (hash: yZH4sqNiTJoNNbuM1J9mJYZWJbe1HILioSLqth5sEdY=)
                          2: HVxmAfBjZ6ZLdFwLWBto8AESvAs.asa (hash: hcVfaTwHi+0pfWKV+QVinfnUuQbFH+9lvzWtmpQvDYI=)
                          3: HqKAWum-OFZ9NLI9L0i8Qooknqs.asa (hash: lOJrYcM36+x+F6jmp2VCjFJX1AVn86mOQN9gIP6YbRA=)
                          4: P1bw9rYWo49y12HRXmApS6My_8Y.roa (hash: 9AqUQgieKub166QUqwy0x3KBBuJmfSfs9fB9oABYTjM=)
                          5: uFsMinWJOk-OHvDZpNQUeNizMng.crl (hash: FvSomB7LdbSbZgxFemHrh4+kSzYWw/2XhR+zKsVUUxQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:dd:31:66:e9:0c:a5:c3:e4:fc:48:61:92:3a:16:ad:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b85b0c8a75893a4f8e1ef0d9a4d41478d8b33278
        Validity
            Not Before: Apr 30 07:01:35 2026 GMT
            Not After : May  1 07:01:35 2026 GMT
        Subject: CN=946602906f2fe8de70de1189fadc06e06da9aed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:96:c0:83:e4:fc:fd:b2:79:1d:dd:a4:db:d7:
                    8d:26:44:17:da:3b:28:34:4b:ad:d8:3e:dc:14:fd:
                    75:43:f1:55:32:d1:7a:52:ec:1d:5c:d8:d3:b3:5c:
                    39:52:9a:1a:33:f7:9b:7c:9b:78:02:da:46:4d:10:
                    ae:d2:da:a6:1f:d1:1c:1f:a4:33:24:4f:4e:aa:ab:
                    17:ee:7e:90:f2:27:d6:47:af:14:51:cc:6d:e7:f6:
                    73:a6:2b:87:a7:52:10:e9:04:b8:16:15:b0:2a:fd:
                    58:3c:20:f5:19:02:3d:7b:16:b2:18:eb:80:30:b7:
                    5f:f4:a3:74:3e:94:53:37:7b:e1:7e:67:18:4a:af:
                    c2:0e:6f:d8:1f:3e:d1:7c:d3:70:6f:c2:8f:b6:da:
                    65:a0:01:df:43:d5:9d:fe:75:4c:2a:de:ba:09:d2:
                    31:36:56:eb:e6:cd:99:4e:dd:71:b6:a8:c4:3d:e2:
                    4c:4b:a5:35:84:76:48:aa:a6:b1:76:23:81:7c:1d:
                    cc:1a:22:21:3e:33:e0:e0:1c:a4:b3:e6:ee:27:3e:
                    01:f1:6d:4c:00:91:dc:ce:44:fc:ac:26:3c:2d:ba:
                    ef:5c:dd:47:5b:8d:e0:2f:c3:69:25:53:fb:c2:8a:
                    18:c7:bb:c6:72:2d:c5:57:2c:df:aa:ff:18:ca:f1:
                    d3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:66:02:90:6F:2F:E8:DE:70:DE:11:89:FA:DC:06:E0:6D:A9:AE:D6
            X509v3 Authority Key Identifier:
                keyid:B8:5B:0C:8A:75:89:3A:4F:8E:1E:F0:D9:A4:D4:14:78:D8:B3:32:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:6c:35:34:ff:54:da:2c:48:6e:94:6e:42:87:18:85:35:0d:
         08:62:58:67:2e:50:7c:06:d6:f5:41:2c:6f:03:23:9d:75:66:
         c9:42:8f:47:5a:49:9e:4e:55:17:74:d4:d3:5d:58:50:03:08:
         44:68:c9:18:7c:22:97:e6:03:e8:5b:30:77:7d:ca:94:eb:13:
         0f:06:92:1f:36:74:04:f0:44:12:ba:f8:32:1f:55:3b:ba:82:
         69:a3:f0:3b:ad:a4:5d:dc:1b:53:cc:19:ef:42:a8:33:9f:6a:
         03:ea:04:9d:65:4a:55:88:78:23:5f:7a:cf:00:ad:0d:d7:6d:
         23:b4:b6:b2:e1:a2:78:3f:fe:6d:08:94:71:58:b7:4f:e0:4c:
         fd:9b:37:3c:54:7f:d0:2d:a8:2a:88:2c:26:25:42:38:f2:ee:
         48:19:c7:6f:31:63:2c:86:9d:93:c1:af:91:d3:36:26:e0:ab:
         d3:36:93:52:c1:8c:25:93:a5:06:bb:e2:52:f5:1c:cd:92:c6:
         1b:a9:36:f4:d1:0f:d4:b9:e5:dc:e0:11:10:09:c2:89:d1:00:
         12:30:e4:14:e9:13:ad:53:16:48:dd:7c:89:44:b7:ff:e4:65:
         8a:c2:31:4e:2b:e3:c2:ae:5b:3a:b0:e7:6e:16:7f:e0:44:01:
         fe:87:93:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:52:02 2026 by rpki-client