Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft
File:                     u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft (raw, json)
Hash identifier:          1nS5JNefdtpFJABL4EePmSiGt2ztmQVd1iEj8hxY2U8=
Subject key identifier:   D4:DA:6E:DC:2A:A3:15:2D:20:0E:43:60:6E:14:B0:18:68:57:CC:08
Authority key identifier: BB:FB:EE:4A:96:8D:F0:FA:C4:75:1B:4F:49:02:7F:A0:95:C6:52:77
Certificate issuer:       /CN=bbfbee4a968df0fac4751b4f49027fa095c65277
Certificate serial:       019DD0515284FC1E22C589D8D3311A829018
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft
Manifest number:          18E4
Signing time:             Mon 27 Apr 2026 19:01:23 +0000
Manifest this update:     Mon 27 Apr 2026 19:01:23 +0000
Manifest next update:     Tue 28 Apr 2026 19:01:23 +0000
Files and hashes:         1: lBcSFM8OK1uzZB50zlLDxjTK2xU.roa (hash: 8pSOr2u3lgeMMUD0PcPdrmLPvUU4Aqiq7ol79EVGlVg=)
                          2: u_vuSpaN8PrEdRtPSQJ_oJXGUnc.crl (hash: LMoL2VQ1RwKjgf0GFQ5pOn2Zpqe+lyVox/GMAPi6Rz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 17:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d0:51:52:84:fc:1e:22:c5:89:d8:d3:31:1a:82:90:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbfbee4a968df0fac4751b4f49027fa095c65277
        Validity
            Not Before: Apr 27 19:01:23 2026 GMT
            Not After : Apr 28 19:01:23 2026 GMT
        Subject: CN=d4da6edc2aa3152d200e43606e14b0186857cc08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6a:dc:56:ef:db:65:5a:6e:9d:1f:f7:67:4e:
                    5b:68:0a:11:4a:83:46:97:ec:e7:69:e4:05:53:b6:
                    9d:d8:30:dc:05:8b:8c:87:bd:ce:a4:0f:6c:12:d1:
                    51:2e:fa:da:70:4e:e9:3b:2f:a9:33:f1:35:1e:10:
                    e1:b8:be:1f:7e:3f:43:90:49:3e:53:71:58:30:3b:
                    34:99:b5:04:f3:71:35:eb:9f:89:c5:05:c0:80:66:
                    bc:72:49:85:a8:57:03:9d:c6:fa:34:ff:ce:a3:2d:
                    f0:1a:f0:59:34:d4:8b:96:da:bf:e4:6a:87:87:fa:
                    ff:c5:3a:99:0f:88:c3:d4:80:61:06:7f:7f:5c:f8:
                    2d:a7:60:66:ee:45:3f:8f:5b:fb:f9:9d:ed:13:c7:
                    79:66:73:86:36:3f:22:60:6d:3d:1d:ba:c1:f7:c0:
                    b2:3a:a8:07:31:0c:17:a6:06:2a:ef:b4:b7:b5:5a:
                    aa:75:86:d5:62:d5:87:8f:3b:eb:aa:0a:91:b5:11:
                    3e:7f:96:36:13:76:18:82:0f:32:56:12:ad:26:e9:
                    7b:5f:95:9a:eb:ad:35:aa:0d:a3:2d:39:f7:1d:1d:
                    85:4a:4e:11:fb:9c:86:cf:97:b5:66:35:35:bf:2b:
                    ea:fe:da:5a:46:93:95:e3:92:0c:14:5b:7b:f2:bd:
                    50:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:DA:6E:DC:2A:A3:15:2D:20:0E:43:60:6E:14:B0:18:68:57:CC:08
            X509v3 Authority Key Identifier:
                keyid:BB:FB:EE:4A:96:8D:F0:FA:C4:75:1B:4F:49:02:7F:A0:95:C6:52:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:16:cf:3f:f9:65:35:e2:21:38:34:1d:46:8b:18:ec:bd:6c:
         b0:9b:41:47:5e:0c:e2:ee:76:41:50:8a:2c:f6:d9:0c:8e:81:
         ea:bd:a1:d6:80:16:d0:01:81:4c:16:68:05:c1:41:b4:fc:30:
         a9:e1:a6:9c:6f:6e:3d:0b:b9:be:96:23:9f:19:da:5f:ab:08:
         0c:48:9f:a6:a0:d5:fa:cf:e5:61:b9:cb:0e:83:99:58:05:91:
         4e:88:85:20:25:ca:0b:0c:0a:43:cd:54:cc:81:8c:c3:c1:7c:
         ad:a8:d8:ee:bc:43:18:7f:37:45:43:63:ea:ff:b9:9e:ea:c8:
         d8:e2:31:e2:09:02:37:60:94:12:56:94:57:b6:e0:37:0b:f7:
         c1:5e:25:d7:1a:5b:6d:68:a0:fc:43:31:51:b7:c7:d6:5f:ba:
         a5:f8:63:c5:b0:6b:5e:06:8c:59:73:23:5c:dd:e2:2e:78:80:
         e6:d9:96:82:01:d4:e5:d0:8c:4d:f0:6c:aa:ed:5d:68:07:d6:
         b2:48:12:97:4f:d0:18:c9:af:0f:8b:43:bd:9c:63:bc:dd:46:
         f8:42:86:77:43:05:da:62:39:b0:40:43:5d:77:26:1b:78:f2:
         02:84:a1:c3:21:70:16:b7:a3:13:fe:66:59:0b:5e:e6:9e:95:
         bf:2c:89:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:38:36 2026 by rpki-client