Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
File:                     UeFdozln1BRwqW1hQcg0DyJAWBw.mft (raw, json)
Hash identifier:          dxKAZUWlqxp2vtm+LnO0P4kU6FkelfG8Ou1xxVvYMRk=
Subject key identifier:   11:B2:5B:8D:4F:0D:0F:30:97:5B:7B:DE:3F:D6:8A:F4:3A:3A:7B:5B
Authority key identifier: 51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C
Certificate issuer:       /CN=51e15da33967d41470a96d6141c8340f2240581c
Certificate serial:       019E20C818AC8D59429709588330F08AA311
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 10:00:44 +0000
Manifest this update:     Wed 13 May 2026 10:00:44 +0000
Manifest next update:     Thu 14 May 2026 10:00:44 +0000
Files and hashes:         1: 81cJ_EIt-PStE8ZvP9c7d9zPO5Y.roa (hash: VoEIe6W6A/UJnNjd89XKoAD4I+DEvz9ksYBB+LiWpIU=)
                          2: UeFdozln1BRwqW1hQcg0DyJAWBw.crl (hash: cwZ7AS52TIi0XG6IJSf38zUrOTOZjh5OTxrX2+7bf/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:c8:18:ac:8d:59:42:97:09:58:83:30:f0:8a:a3:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e15da33967d41470a96d6141c8340f2240581c
        Validity
            Not Before: May 13 10:00:44 2026 GMT
            Not After : May 14 10:00:44 2026 GMT
        Subject: CN=11b25b8d4f0d0f30975b7bde3fd68af43a3a7b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6c:fe:e2:72:0f:50:a0:99:11:d4:52:de:50:
                    69:66:8f:c5:34:10:e7:67:e0:d4:d2:3e:29:63:01:
                    7b:e5:b5:7e:2e:f3:b4:83:3a:4d:0e:77:3f:49:e4:
                    a6:fa:ac:a2:b7:80:f5:9d:3c:32:9b:c5:fa:6a:ee:
                    5c:60:f8:14:22:19:ce:e3:a3:e6:72:22:70:99:0d:
                    f4:2c:84:c5:a8:22:37:bf:b2:94:9f:5a:80:83:38:
                    c6:0e:ee:89:44:7d:8e:02:ca:02:93:61:d1:91:1b:
                    62:d6:ea:8d:f3:d6:6e:a4:76:12:e1:be:ad:67:14:
                    c2:fb:93:2f:e2:d2:30:05:3d:ae:4f:e2:19:60:f5:
                    f3:12:4e:12:d5:ac:19:63:f1:14:d4:07:98:95:95:
                    0b:7f:7a:0b:00:0e:f1:18:cc:1a:a5:a1:83:69:f8:
                    1d:02:c6:e4:66:2c:61:37:01:5d:9f:a1:f0:bd:5d:
                    40:ae:a3:53:53:1a:11:97:f6:09:db:b5:3c:93:5d:
                    f9:e4:15:66:6b:28:c2:a2:b9:a4:9b:2f:35:86:7f:
                    5f:9e:1c:b6:b2:cf:2a:c7:5c:06:01:6d:74:d3:ca:
                    74:47:36:5e:66:60:df:ee:84:ec:8a:89:9b:26:9d:
                    6e:80:29:6f:c3:87:86:82:c7:5c:95:db:34:f6:a9:
                    b3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B2:5B:8D:4F:0D:0F:30:97:5B:7B:DE:3F:D6:8A:F4:3A:3A:7B:5B
            X509v3 Authority Key Identifier:
                keyid:51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:fd:67:9d:98:26:b1:43:5e:aa:6d:3f:35:ff:8c:95:1d:5e:
         e1:a7:06:8c:99:eb:87:9e:af:a1:a7:06:8e:2a:b3:b4:d8:93:
         21:8a:05:3f:58:31:b0:50:84:e3:60:ac:59:a6:de:c6:ce:a9:
         10:d4:01:2c:38:e9:03:8b:d6:41:d6:96:a2:d2:81:3e:70:50:
         fd:18:c0:73:05:35:f5:95:c3:37:cd:ed:32:38:d3:f3:41:da:
         b3:41:be:92:2f:6d:df:e1:ab:03:d6:9c:c9:59:3d:e3:89:35:
         19:44:42:91:fb:97:d8:79:6f:04:80:36:5d:ee:47:7a:1f:b1:
         7f:8f:8e:bd:6b:29:cf:e6:97:81:e1:f3:09:0b:5d:6d:23:2e:
         8b:88:11:96:c1:42:ef:c9:dd:7e:64:50:5e:b5:a6:2f:f8:ed:
         38:25:fa:8e:91:b3:c5:e5:25:af:d9:95:af:95:74:e0:cb:d1:
         75:2c:90:18:d0:4f:a4:ef:cb:f6:90:f6:97:5e:36:2c:e4:2d:
         db:e1:11:2a:1b:cb:01:f7:dc:ba:ca:e8:48:4b:b9:89:1e:08:
         ca:10:1d:a5:e4:5b:03:35:c3:c2:c8:60:a4:a9:25:84:41:d3:
         48:6a:c5:eb:f5:d9:7e:82:6d:49:cc:47:d7:e2:5c:11:ef:50:
         41:04:d1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:04:36 2026 by rpki-client