Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
File:                     uGWF0IuX5nnwgovxAr6rUdza-oc.mft (raw, json)
Hash identifier:          qTf86Oz1qwrSMerki8HV23IGvmSq8BdUwv2iXcs5z6c=
Subject key identifier:   E6:6C:D4:EF:D8:5D:C6:70:DA:08:5D:EB:9E:7D:AD:90:88:24:97:8A
Authority key identifier: B8:65:85:D0:8B:97:E6:79:F0:82:8B:F1:02:BE:AB:51:DC:DA:FA:87
Certificate issuer:       /CN=b86585d08b97e679f0828bf102beab51dcdafa87
Certificate serial:       019E1EA363A3A0BDCEB53015BE6A52335CCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
Manifest number:          02C1
Signing time:             Wed 13 May 2026 00:01:24 +0000
Manifest this update:     Wed 13 May 2026 00:01:24 +0000
Manifest next update:     Thu 14 May 2026 00:01:24 +0000
Files and hashes:         1: Ga14DKlkNtPaU4_WDklMXTBEZd0.roa (hash: 51BV+zXQbnh+NfWZphUfXu97WrA83bdxjQhGkdY1730=)
                          2: uGWF0IuX5nnwgovxAr6rUdza-oc.crl (hash: x6vbFIkZrF4tsTw4VMPKrhD0viaRGis3czz486Dvw7s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 00:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:63:a3:a0:bd:ce:b5:30:15:be:6a:52:33:5c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b86585d08b97e679f0828bf102beab51dcdafa87
        Validity
            Not Before: May 13 00:01:24 2026 GMT
            Not After : May 14 00:01:24 2026 GMT
        Subject: CN=e66cd4efd85dc670da085deb9e7dad908824978a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4d:36:4b:6d:72:51:38:c6:be:1c:72:93:7c:
                    ec:66:7a:e3:cd:28:92:f3:c9:0d:d4:b1:97:1e:1a:
                    fc:89:e0:9d:25:91:21:5c:74:a8:fa:62:0f:1c:07:
                    d1:23:df:04:78:64:d6:44:67:33:b4:06:b2:ad:af:
                    92:d3:1f:6c:45:c6:ab:a3:eb:41:22:f9:d2:56:49:
                    5c:fb:6e:d3:50:06:72:10:5a:25:f1:75:0c:55:99:
                    4d:45:3d:4e:8a:7a:6e:fe:dd:b7:43:53:1a:07:33:
                    d4:1d:9c:e2:3a:36:bf:d8:12:61:9c:3c:59:ad:75:
                    01:6a:8e:df:4b:08:ae:78:75:98:ae:4e:74:8c:ec:
                    65:9a:0d:43:c6:b7:04:2a:4e:bf:b3:fe:66:4b:21:
                    a3:80:9c:00:57:8c:32:dd:c7:81:8b:86:0a:bc:bd:
                    ea:f1:70:54:5c:22:66:5c:9b:a3:09:cc:76:71:7d:
                    29:06:cb:1d:9b:18:93:ba:9a:06:84:50:3c:e3:c6:
                    68:22:7b:e4:cc:d5:e5:0a:55:a3:d9:71:7a:8b:48:
                    b9:48:6c:61:28:76:65:9c:2e:ef:5f:96:b5:b5:8f:
                    dd:a8:ff:06:62:8e:c3:99:de:ff:8c:18:d1:21:b8:
                    31:81:96:d1:42:9b:93:f9:e9:0e:21:82:15:a4:d0:
                    bb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:6C:D4:EF:D8:5D:C6:70:DA:08:5D:EB:9E:7D:AD:90:88:24:97:8A
            X509v3 Authority Key Identifier:
                keyid:B8:65:85:D0:8B:97:E6:79:F0:82:8B:F1:02:BE:AB:51:DC:DA:FA:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:1a:57:a9:f7:b1:0d:d7:cd:52:54:03:fc:30:e7:ba:32:c3:
         c8:58:33:d2:e0:a9:f7:e3:f9:35:2a:42:e3:20:ca:f7:b7:6f:
         84:63:4f:a7:ee:7a:a3:8e:13:82:bc:ef:c1:e0:e1:d3:47:c2:
         fc:47:2f:78:cd:b4:dc:b7:cd:fc:d7:5b:de:67:d3:6d:f0:ee:
         90:bf:6c:02:44:06:4e:f3:4e:8d:57:a6:83:30:66:78:d3:28:
         2a:d7:eb:4f:f0:aa:39:7c:d9:67:c5:3f:bc:22:0b:3b:67:8d:
         16:ba:1b:6b:d8:15:3d:7b:2d:35:21:5b:e1:ec:96:9a:e9:38:
         f9:c6:6a:76:dc:c8:39:8a:fa:36:26:5f:f1:d3:0d:1d:4e:b8:
         e2:73:85:27:f7:6f:f4:20:ae:af:1a:00:3a:31:0e:1b:00:18:
         ac:60:69:59:e1:2c:6e:52:66:e5:4f:af:9d:5b:1d:e9:39:3f:
         fb:09:6f:ca:3c:05:ac:53:ea:aa:7b:b4:1e:c9:fe:f3:7a:19:
         b9:cc:e6:5b:61:3a:28:da:0b:f7:f3:3f:24:3c:80:a3:e1:b9:
         79:2e:cd:e6:0f:bc:6d:35:58:a9:4b:3f:c0:7e:6d:5a:7d:93:
         07:eb:09:42:04:e2:8e:43:ee:d3:86:9f:e1:f7:d8:18:dc:9f:
         22:3f:57:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:51:49 2026 by rpki-client