Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft
File:                     ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft (raw, json)
Hash identifier:          DSNDMYjt6LQBh4YJN3prN7kxmk39LqfTW7l8util7Uw=
Subject key identifier:   32:E1:26:80:98:7E:B2:39:85:43:D5:9D:7A:F1:19:91:4A:00:BA:E7
Authority key identifier: 50:B0:E7:15:71:47:A9:0C:E3:74:60:B7:19:CB:76:06:94:AB:54:14
Certificate issuer:       /CN=50b0e7157147a90ce37460b719cb760694ab5414
Certificate serial:       019DCDBD90C2184146D8F822CAB1F208A552
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft
Manifest number:          01E4
Signing time:             Mon 27 Apr 2026 07:00:45 +0000
Manifest this update:     Mon 27 Apr 2026 07:00:45 +0000
Manifest next update:     Tue 28 Apr 2026 07:00:45 +0000
Files and hashes:         1: ULDnFXFHqQzjdGC3Gct2BpSrVBQ.crl (hash: 74T2taerB/9i1dPix9u3/sciVO0U+XgKybGanyx9Tf4=)
                          2: YTZnwgX1fpqLaA8u7GzOIk6ue1k.roa (hash: mBjPd/UyUtpVQP57vDWgcX+PhPNfMg70eOHjoJqEsnc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Apr 2026 23:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cd:bd:90:c2:18:41:46:d8:f8:22:ca:b1:f2:08:a5:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50b0e7157147a90ce37460b719cb760694ab5414
        Validity
            Not Before: Apr 27 07:00:45 2026 GMT
            Not After : Apr 28 07:00:45 2026 GMT
        Subject: CN=32e12680987eb2398543d59d7af119914a00bae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:74:5b:5b:25:0b:ea:4a:c3:93:b4:f9:03:d3:
                    72:27:34:4a:bc:b2:e0:b1:f2:ac:7b:40:9e:79:f9:
                    44:66:72:fe:1f:27:93:49:dd:f2:3c:6a:7f:1e:1e:
                    95:6e:b9:fd:0c:e0:e2:5f:df:bb:83:2c:df:6d:9f:
                    a3:6f:4f:af:82:ec:48:18:3d:16:3b:c9:c0:c0:5a:
                    38:f4:6b:b2:18:6c:e4:bc:25:d9:43:dc:1d:de:9e:
                    ce:6d:a7:79:61:10:51:45:1a:de:69:5e:b0:a0:c7:
                    0d:1e:5a:8e:cd:25:dd:90:30:3f:9e:01:19:11:52:
                    52:13:e1:90:8c:47:85:3e:0d:83:75:2f:20:73:07:
                    6b:59:13:f8:d5:5a:63:6b:34:a1:92:33:38:b7:ee:
                    de:52:7a:ff:dd:ad:55:1c:6a:e6:dc:ff:9a:73:8a:
                    b9:3b:9d:ee:fb:5c:42:70:d4:f6:56:0b:b3:f8:ff:
                    09:4f:24:5f:e2:23:33:c4:4e:cc:0d:98:ff:00:5d:
                    56:af:6c:1d:30:b6:1b:df:74:cd:7e:69:3e:b6:c1:
                    e5:8d:0f:1b:3c:d5:cc:05:bc:09:83:43:97:79:5c:
                    03:03:d8:10:09:06:33:a3:ee:06:45:89:7f:49:0b:
                    74:fe:73:42:45:9f:bf:71:df:ae:b2:ab:ae:14:75:
                    56:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E1:26:80:98:7E:B2:39:85:43:D5:9D:7A:F1:19:91:4A:00:BA:E7
            X509v3 Authority Key Identifier:
                keyid:50:B0:E7:15:71:47:A9:0C:E3:74:60:B7:19:CB:76:06:94:AB:54:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:7f:63:a3:9d:20:db:68:b9:20:16:3d:33:8a:1c:41:8f:98:
         aa:a5:7a:2e:f7:af:33:e9:b5:01:20:eb:5e:17:22:78:6f:a7:
         75:d4:d6:a0:67:db:07:80:a2:d0:d7:f6:a0:0a:3a:23:2e:c1:
         44:29:74:a1:2d:cd:6f:b2:a4:43:18:69:ae:c9:49:d9:8a:88:
         f7:f4:24:21:50:41:ef:2e:f6:ab:37:e4:1e:bf:3c:a9:31:0b:
         31:97:89:b5:36:d2:c3:86:fd:98:6c:d0:63:c5:3b:04:e1:31:
         1b:ac:be:44:0c:e4:6b:25:c5:75:cf:ac:2e:bc:0e:c4:c7:87:
         99:e1:71:4d:7a:ad:18:4d:c7:73:ec:bb:0f:a0:2a:79:a5:32:
         ff:8b:bc:63:c5:6b:3d:38:cc:4f:d5:d9:c9:5e:46:cf:05:9e:
         c1:18:31:6a:ae:d9:89:72:b6:bb:a7:88:af:19:84:41:80:95:
         72:4b:e8:5e:21:d5:78:09:6e:92:0b:0b:9c:d0:f2:5a:d3:e7:
         b3:0d:79:ae:46:88:15:ba:9f:dc:c5:85:30:34:b2:ff:55:1e:
         fe:d0:d4:2d:2d:14:36:aa:7e:d8:06:b9:7a:10:f4:4f:6f:6d:
         d5:f2:99:0b:7d:a0:cf:03:58:6a:97:3d:6e:ae:82:56:2a:ab:
         cb:cb:03:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:16:14 2026 by rpki-client