Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
File:                     A-uwAVKCgXNL9clLxL729umaN34.mft (raw, json)
Hash identifier:          8tEOdyqNcXliw/kwywwni9vKzXD45t5Y4iIjQQY+qME=
Subject key identifier:   9B:5E:F1:9B:30:CD:58:6A:B1:69:45:0C:34:1F:D0:28:C5:22:03:0F
Authority key identifier: 03:EB:B0:01:52:82:81:73:4B:F5:C9:4B:C4:BE:F6:F6:E9:9A:37:7E
Certificate issuer:       /CN=03ebb001528281734bf5c94bc4bef6f6e99a377e
Certificate serial:       019E1D591571C77BAEE87B1AED22D955095E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
Manifest number:          1089
Signing time:             Tue 12 May 2026 18:00:37 +0000
Manifest this update:     Tue 12 May 2026 18:00:37 +0000
Manifest next update:     Wed 13 May 2026 18:00:37 +0000
Files and hashes:         1: A-uwAVKCgXNL9clLxL729umaN34.crl (hash: 8/LsyEMS5/EtE85T+SGbx9C/BKcnwAlg2Ag/RRoagCc=)
                          2: FKqbBbCatHDV91uCIV2iSLiR4J4.roa (hash: OiRQx3xEWtooKV7KslWbkFM1gAMKnnIL8/Yhr2gA9Io=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:15:71:c7:7b:ae:e8:7b:1a:ed:22:d9:55:09:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03ebb001528281734bf5c94bc4bef6f6e99a377e
        Validity
            Not Before: May 12 18:00:37 2026 GMT
            Not After : May 13 18:00:37 2026 GMT
        Subject: CN=9b5ef19b30cd586ab169450c341fd028c522030f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d4:a4:a0:de:13:df:b6:79:70:bb:39:35:cb:
                    07:a3:57:d5:27:49:79:aa:2f:16:96:97:a0:32:f0:
                    d0:be:b7:8b:61:43:61:a2:9c:a6:a0:0c:28:34:4a:
                    e6:55:89:24:3c:46:56:4d:ce:4f:fd:13:c2:20:7c:
                    02:89:05:60:bb:7d:d8:8f:f0:7d:48:ea:9d:26:fd:
                    d1:5e:dc:f8:42:72:94:bb:e6:92:6e:33:01:7e:ba:
                    31:90:d4:f9:cc:f3:9e:a3:af:ab:f9:db:67:4a:2a:
                    38:b4:0d:bf:b4:95:90:26:24:5d:17:0d:f5:e3:e2:
                    58:62:f4:41:46:52:c3:d4:0f:70:3a:6a:5e:94:6b:
                    93:20:e2:7f:a0:90:75:cb:ce:ff:53:5d:54:2e:82:
                    71:c3:63:4a:cd:4e:65:ed:ae:24:72:24:c3:17:01:
                    0f:c6:fb:3c:d8:5e:9b:1d:60:8d:d1:2e:f5:1b:22:
                    fb:e8:40:dd:48:5d:31:ad:b7:75:79:c4:62:aa:9a:
                    ad:83:66:07:9a:d3:d6:05:0c:86:eb:15:04:df:80:
                    2e:92:84:8e:c9:c0:88:f2:26:79:73:58:a9:84:2c:
                    90:55:1e:c4:78:93:e4:1e:3f:6f:85:c4:49:39:2e:
                    db:a6:8a:c8:ca:db:64:f9:23:98:e8:34:87:ec:c7:
                    59:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:5E:F1:9B:30:CD:58:6A:B1:69:45:0C:34:1F:D0:28:C5:22:03:0F
            X509v3 Authority Key Identifier:
                keyid:03:EB:B0:01:52:82:81:73:4B:F5:C9:4B:C4:BE:F6:F6:E9:9A:37:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:6c:e2:c4:50:aa:dc:1d:5a:86:9c:09:28:c0:04:26:a1:c9:
         fc:3c:09:25:12:a3:de:ef:0d:37:11:c9:c5:1d:e5:48:79:bf:
         27:d1:10:88:d1:92:35:62:1a:ed:9c:54:0c:53:c3:26:07:e3:
         c1:75:a9:a6:08:68:3b:f9:3f:18:61:7d:fc:60:9b:88:6c:e4:
         c6:64:86:71:31:7c:c9:f2:79:3c:6a:16:48:0b:0d:1b:a4:d2:
         df:45:dd:27:7d:85:be:7e:fc:bb:00:0b:87:4a:e7:9d:1b:34:
         31:cd:53:93:0b:28:ab:4f:3a:df:35:5a:78:00:87:32:bc:d1:
         68:2b:70:25:d1:00:32:32:9b:90:41:5b:d3:18:4f:6f:48:4d:
         cc:70:f3:24:47:ba:c0:97:a7:42:f3:48:33:8f:65:bd:dc:67:
         aa:ad:3e:e9:5e:67:54:75:3b:71:8b:b4:ee:70:ea:70:ef:06:
         a0:1c:9c:fd:17:36:57:7b:53:ac:ab:7b:45:2b:76:82:0f:8d:
         88:84:46:dd:3f:9c:44:5a:6d:4e:87:8f:e9:1f:c4:45:03:eb:
         34:ab:5f:8b:cf:b8:ff:d9:ca:7e:e5:7f:bf:14:27:1b:71:2e:
         eb:f7:1f:98:7d:02:fc:f2:20:30:93:28:98:a0:4d:48:83:2e:
         5e:2e:e5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:54:10 2026 by rpki-client