Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
File:                     0uTP5_R_UkZFRa27C7xNM0eKrrI.mft (raw, json)
Hash identifier:          fNoEP5PRqKCnfG6xieCNV15TU41e85OjOqajGFSSzVw=
Subject key identifier:   9F:D5:0F:80:B7:85:B3:76:F0:74:40:2A:26:F6:D1:37:91:F4:79:0F
Authority key identifier: D2:E4:CF:E7:F4:7F:52:46:45:45:AD:BB:0B:BC:4D:33:47:8A:AE:B2
Certificate issuer:       /CN=d2e4cfe7f47f52464545adbb0bbc4d33478aaeb2
Certificate serial:       019E1CEBF21206717E573C04FB09C5F4CDFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
Manifest number:          04E0
Signing time:             Tue 12 May 2026 16:01:25 +0000
Manifest this update:     Tue 12 May 2026 16:01:25 +0000
Manifest next update:     Wed 13 May 2026 16:01:25 +0000
Files and hashes:         1: 0uTP5_R_UkZFRa27C7xNM0eKrrI.crl (hash: P5+6CHVKEZBuww5VgpTexUXtF96gdq3b5j9brhiM16g=)
                          2: j330ZQOtQiCZJuxomPWTMdBKcHQ.roa (hash: MzEVW/Ea4Il5bIfwlWQJ+ibRovLnW9XexRlsZqbNutk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:f2:12:06:71:7e:57:3c:04:fb:09:c5:f4:cd:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2e4cfe7f47f52464545adbb0bbc4d33478aaeb2
        Validity
            Not Before: May 12 16:01:25 2026 GMT
            Not After : May 13 16:01:25 2026 GMT
        Subject: CN=9fd50f80b785b376f074402a26f6d13791f4790f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9b:2a:5a:57:c1:06:5d:fc:41:a4:01:cf:25:
                    cb:b7:5e:46:0c:99:12:62:18:20:c6:b2:c0:0a:d8:
                    4b:50:88:c9:42:5a:74:b2:0a:ae:a4:d1:4b:75:f0:
                    55:94:ba:c7:2c:63:d1:d7:b5:cc:20:7a:8f:9d:75:
                    da:21:7a:64:de:12:97:60:64:b6:0e:35:5f:52:41:
                    1c:cb:5a:25:ee:9c:3f:8d:2c:1a:57:2c:ce:f3:ee:
                    b9:85:51:8d:06:00:16:f8:68:a2:29:3a:82:47:38:
                    8c:11:8b:61:84:ca:b4:b4:bc:b8:cb:5a:bf:0e:87:
                    1c:29:0a:a6:a8:52:4d:3e:5f:1f:46:17:9c:19:fc:
                    57:2d:24:1b:0d:0e:0e:54:b4:cd:b8:7c:5a:74:b5:
                    f8:70:c9:ac:74:f4:99:3c:88:5b:d9:67:8c:19:4b:
                    bf:7e:4a:5c:eb:a5:4b:78:1c:30:13:e5:04:45:8e:
                    cd:13:cb:69:e7:66:d2:c5:e5:18:a3:0d:db:50:89:
                    f0:87:8a:75:1f:70:f6:03:30:40:ec:38:f2:79:91:
                    07:ab:54:86:3e:b0:8e:9b:cf:19:67:c4:fb:7c:fe:
                    28:78:0c:e8:c4:c8:0f:14:80:bd:ce:69:1d:3d:d8:
                    e1:4d:76:fa:eb:9b:bf:03:c5:2b:a3:6d:09:22:79:
                    1d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D5:0F:80:B7:85:B3:76:F0:74:40:2A:26:F6:D1:37:91:F4:79:0F
            X509v3 Authority Key Identifier:
                keyid:D2:E4:CF:E7:F4:7F:52:46:45:45:AD:BB:0B:BC:4D:33:47:8A:AE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:f4:6e:4c:63:12:5d:aa:87:73:6a:f1:e9:8c:8e:a4:72:c4:
         c5:27:c7:28:20:1b:59:56:70:76:46:26:00:bb:58:e3:c8:90:
         9b:14:76:5e:92:ab:97:ae:a1:db:60:f5:09:9f:eb:fe:56:9c:
         34:f9:10:4c:ca:69:dd:6c:fe:65:35:1a:ba:17:69:48:79:31:
         a5:6e:37:fd:1a:f9:94:f3:aa:0a:38:7a:cf:9c:ed:0b:1c:40:
         a9:b1:82:ef:cb:9b:a6:ef:66:20:2c:e2:27:e1:d8:dc:ad:66:
         b6:df:a9:0f:f8:58:78:31:40:e5:f3:83:35:61:f8:ef:36:db:
         b2:c7:31:98:e9:d9:29:f1:2e:ba:0f:ae:fc:d5:aa:e1:67:34:
         ec:9d:9f:a4:76:6b:ff:86:50:38:3a:3a:6f:7c:31:4c:14:ef:
         ff:07:b4:c8:ef:88:65:ef:e8:b9:d4:65:1f:10:bc:71:ab:4f:
         32:10:91:f9:93:ef:3d:9d:19:ef:61:88:e8:25:e8:98:fa:f0:
         91:7c:ec:1a:60:e7:eb:8a:52:7c:d8:35:ee:36:11:c2:68:5c:
         97:59:34:48:e2:b0:3d:6a:4d:f6:bf:f0:e8:b4:22:cb:9c:5b:
         7e:1c:7f:76:4d:61:01:0d:ef:9f:c6:c4:aa:c4:c4:5c:1c:d2:
         ab:49:41:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:52 2026 by rpki-client