Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft
File:                     UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft (raw, json)
Hash identifier:          CCSrEV1/wpXwZ5nWh9HRehRfG9jCrly8Bmi3wyvPEKI=
Subject key identifier:   91:22:CF:F6:76:D8:41:16:D1:A0:19:82:38:46:C0:FA:98:5E:7A:44
Authority key identifier: 53:08:41:E8:2A:A4:6D:99:59:FC:78:11:B2:57:95:C5:6C:D5:06:08
Certificate issuer:       /CN=530841e82aa46d9959fc7811b25795c56cd50608
Certificate serial:       019E1F47FE1A8FDCCC2F33F7EC4067D8268E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft
Manifest number:          18EA
Signing time:             Wed 13 May 2026 03:01:12 +0000
Manifest this update:     Wed 13 May 2026 03:01:12 +0000
Manifest next update:     Thu 14 May 2026 03:01:12 +0000
Files and hashes:         1: UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl (hash: PSKmYDWY9agRsapjRgH0L/AC8Vue+NkkD6ZvgfkxSKU=)
                          2: V-wJc1_T9ZdDaXQ8Bjgp6ZwH7Ko.roa (hash: 5Q51/s2uhZseLvK62BKwJY/vcbWTvSMuqDjEqNx+KWI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 03:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:fe:1a:8f:dc:cc:2f:33:f7:ec:40:67:d8:26:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530841e82aa46d9959fc7811b25795c56cd50608
        Validity
            Not Before: May 13 03:01:12 2026 GMT
            Not After : May 14 03:01:12 2026 GMT
        Subject: CN=9122cff676d84116d1a019823846c0fa985e7a44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c5:f0:d1:e9:e3:8b:06:d3:05:6b:ca:5b:cc:
                    36:8c:c6:63:73:a3:5a:36:85:31:ab:f6:d3:24:da:
                    72:68:3c:f2:a0:33:46:97:f6:45:7c:6b:16:cb:16:
                    c0:99:09:95:ca:85:02:3b:e5:9c:5d:2b:4c:85:1f:
                    cf:57:52:46:a3:93:70:3e:a5:ab:da:f8:49:fc:b8:
                    ad:e8:c2:33:b3:a5:23:ea:b1:ba:47:e6:73:0a:a6:
                    4a:ca:cf:75:c5:6a:2a:fd:8f:32:61:c4:fc:0f:5a:
                    cf:08:62:b4:ba:89:51:40:5a:66:3d:28:5f:80:c3:
                    b2:32:dc:11:a7:b4:57:79:98:ea:89:b8:a5:5b:5f:
                    53:7c:23:ec:10:3d:8e:d3:af:78:4e:c6:ff:ca:59:
                    92:72:e0:c6:a0:8a:4a:b5:73:95:80:3f:55:d3:ea:
                    f0:ba:26:cd:65:10:69:03:32:7b:c3:bc:d4:64:09:
                    d5:98:7d:f1:a8:0e:07:ba:55:e1:86:89:a4:4e:0f:
                    d1:b2:17:d1:8d:f7:5b:af:37:ab:66:69:43:0e:e2:
                    fe:e0:c9:de:cc:72:a0:c4:22:36:a4:0f:1a:72:fb:
                    02:e3:ec:d7:7e:6a:99:31:cf:bf:7e:9a:36:aa:65:
                    c0:94:02:a6:88:1f:79:93:13:1b:1e:bf:30:e5:12:
                    52:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:22:CF:F6:76:D8:41:16:D1:A0:19:82:38:46:C0:FA:98:5E:7A:44
            X509v3 Authority Key Identifier:
                keyid:53:08:41:E8:2A:A4:6D:99:59:FC:78:11:B2:57:95:C5:6C:D5:06:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:ed:6e:fc:8f:73:65:9a:50:6d:7d:97:44:97:4f:7a:7d:38:
         3f:ec:dd:12:21:55:1b:69:5e:ec:36:7a:37:26:8a:ce:8d:da:
         20:bc:ed:28:0c:a2:ee:f7:2b:3c:bc:1d:8c:47:ef:d1:e2:dc:
         d2:07:ee:a3:b9:47:4b:79:65:b5:3a:7e:ec:f6:82:d3:6c:36:
         f7:eb:55:4c:7d:d5:dc:e4:c7:40:58:b2:76:45:93:f8:2e:64:
         79:8a:8a:fa:33:00:38:73:76:be:f3:d5:3d:33:28:62:00:44:
         53:09:6c:a5:03:45:8f:bf:46:01:db:c2:36:be:fd:a3:7b:ca:
         8e:6d:1f:bb:63:43:d5:62:20:15:07:13:61:6c:07:ea:06:56:
         bb:e9:3d:fb:3f:65:fb:ae:62:4c:08:61:4b:13:53:93:15:b7:
         11:57:3e:be:96:70:c6:ec:96:bc:e1:ac:28:2d:e5:eb:03:5a:
         5f:df:31:94:07:f2:88:53:d6:07:36:be:c8:68:1e:a6:f7:b7:
         50:dd:c1:f8:56:20:e2:ad:be:a7:63:21:00:ec:26:87:3d:39:
         d7:c5:f4:0b:f1:60:88:0f:95:ad:49:da:3a:83:d5:5f:0a:df:
         26:08:92:49:b7:52:f8:39:e3:27:9a:36:a9:93:41:97:ad:09:
         fc:86:1e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:07:08 2026 by rpki-client