Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
File:                     rUyDCxEmFIOmK2aWpMNyDorYig0.mft (raw, json)
Hash identifier:          YTkp2W/My0IUhFwgXAhocKokCcL7AUVRvfwD0cLdb6M=
Subject key identifier:   3E:D9:97:15:E4:CE:62:84:FF:D7:89:AE:B9:C5:44:F0:25:B9:7E:69
Authority key identifier: AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D
Certificate issuer:       /CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
Certificate serial:       019E1D59CC24DFE73F1E9B5F47BB0F8BE7D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
Manifest number:          17D0
Signing time:             Tue 12 May 2026 18:01:24 +0000
Manifest this update:     Tue 12 May 2026 18:01:24 +0000
Manifest next update:     Wed 13 May 2026 18:01:24 +0000
Files and hashes:         1: 5A_9S0_k2z9CIFI_8Yk78IZDaEI.roa (hash: nmz/iYmV6mKVOLZrYAox5VaizjrAFHQfQwQAyHHQgTM=)
                          2: Axc_E2xRyuIueu7MxwSrAbNKRdM.roa (hash: BDjOOm0VSjHKXhROcrzw3kdn2+1ifBZy1hpq2pHuv2A=)
                          3: PaurkzffyErdpNi4ejYNr7FnWdc.roa (hash: jPNQ7UykvWYwuvPZ1rpjnsZHusFbctpC3HqhplZrHe4=)
                          4: Uryh4fThyDLMPt3qMbkDETFPkjs.roa (hash: /xcRZ3cub7ymv3GtgsooN/HcmqZzVT8RJVzKbGyx/dQ=)
                          5: rUyDCxEmFIOmK2aWpMNyDorYig0.crl (hash: JerSSndIGt0GHn8DMt7LY8G/H+FGKIG7CGtN9fFPU50=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:cc:24:df:e7:3f:1e:9b:5f:47:bb:0f:8b:e7:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
        Validity
            Not Before: May 12 18:01:24 2026 GMT
            Not After : May 13 18:01:24 2026 GMT
        Subject: CN=3ed99715e4ce6284ffd789aeb9c544f025b97e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:3d:99:27:01:0d:93:59:5b:6b:fa:a6:5e:da:
                    77:fc:2a:0b:ad:69:3f:01:66:ab:06:ca:56:3b:31:
                    3b:c1:1f:bf:dc:19:c5:3c:7b:d3:62:08:28:a5:eb:
                    83:2d:a3:5b:20:dc:c9:81:25:ed:cb:d1:17:97:53:
                    52:b4:8a:2a:71:a9:05:fc:8b:f9:13:c6:f1:4e:67:
                    4d:89:9d:a5:88:b1:2a:33:1a:6f:7b:a7:d4:ca:66:
                    b7:90:da:2e:3c:77:da:8f:fa:86:3d:7b:06:bb:d5:
                    db:a4:e0:a4:00:b2:48:8e:21:b3:a0:a1:51:03:f4:
                    c4:05:52:f1:4b:d2:a5:5c:7f:f4:5d:10:4e:4f:48:
                    a4:3f:0a:01:af:3d:2f:7c:ba:c8:5f:1f:9a:64:8f:
                    8e:dc:0a:9f:e7:34:5f:de:26:b9:fd:57:c5:7b:ca:
                    e8:7d:d9:c2:90:ab:8a:d1:dd:bd:1f:ab:51:c6:b9:
                    5f:66:45:25:b9:df:c2:8d:b1:a2:f8:4b:03:da:70:
                    a0:b5:91:00:56:bb:95:6d:4a:4f:11:18:0c:63:d3:
                    25:8e:ac:ab:4d:d9:fd:11:b3:4c:6a:78:35:f7:29:
                    ad:6d:fc:37:b9:d8:6a:15:e2:3b:cd:0b:84:1c:0d:
                    da:07:d4:3e:7d:00:fd:3d:89:7b:eb:f2:02:16:f7:
                    82:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D9:97:15:E4:CE:62:84:FF:D7:89:AE:B9:C5:44:F0:25:B9:7E:69
            X509v3 Authority Key Identifier:
                keyid:AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:f2:e4:0b:e2:38:9f:d8:b7:04:7f:24:15:ce:86:8d:d1:4e:
         83:5d:d8:45:ae:0c:a0:ed:52:ca:5d:36:4c:68:e8:6f:b2:ab:
         74:24:29:08:c0:03:b9:4f:d8:cd:24:97:85:8c:ae:1a:82:9c:
         ca:a7:6e:a0:a5:48:64:88:84:7e:c3:aa:bc:ea:46:f1:a9:fc:
         4e:7f:6a:90:30:1b:cb:5a:8f:73:17:a1:f4:e0:dc:d3:1a:aa:
         29:da:3b:d5:19:a6:42:5a:48:ff:56:f9:97:38:ba:18:f0:a0:
         b4:16:a5:ee:75:fd:95:94:6c:dd:ec:6b:b2:0f:1b:34:b4:5d:
         77:80:87:98:b2:fb:5c:fc:81:8d:b2:62:9b:ae:ee:9e:b6:1f:
         71:c8:c9:55:09:8d:b9:a0:dc:7c:c1:d2:0e:49:4f:97:f5:3a:
         a0:18:f7:4b:1c:9f:cf:0f:53:57:39:42:33:12:15:a7:3b:e4:
         01:6a:22:b9:33:0b:ce:43:32:15:6d:c7:5b:41:75:2c:dd:4d:
         6b:96:c1:71:3e:5c:b2:bf:44:de:89:c1:2a:d6:cd:b9:88:bd:
         a2:19:18:ef:f0:4e:50:e5:ae:ac:37:0a:35:be:f0:51:f3:0d:
         20:5e:60:19:b4:e7:29:b5:15:85:a6:75:3a:70:5a:c6:17:74:
         e0:77:13:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:11:11 2026 by rpki-client