Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/UWyzDNsJEok_oG5StXA266007_g.mft
File:                     UWyzDNsJEok_oG5StXA266007_g.mft (raw, json)
Hash identifier:          hA2Vrf/s+54tK2nbgN6UY7KFC3LR/kdHJzpIw0aCSNQ=
Subject key identifier:   05:24:8C:E2:EB:B8:7C:04:6B:36:93:1B:00:32:DB:29:05:86:84:1A
Authority key identifier: 51:6C:B3:0C:DB:09:12:89:3F:A0:6E:52:B5:70:36:EB:AD:34:EF:F8
Certificate issuer:       /CN=516cb30cdb0912893fa06e52b57036ebad34eff8
Certificate serial:       019E1F7EC7835AE214D20DC70493C41EBEAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UWyzDNsJEok_oG5StXA266007_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/UWyzDNsJEok_oG5StXA266007_g.mft
Manifest number:          11
Signing time:             Wed 13 May 2026 04:01:02 +0000
Manifest this update:     Wed 13 May 2026 04:01:02 +0000
Manifest next update:     Thu 14 May 2026 04:01:02 +0000
Files and hashes:         1: UWyzDNsJEok_oG5StXA266007_g.crl (hash: +xux6h1IKle/E4asYvlnO9+hHNOMuyvD2y8dsyiQ2YA=)
                          2: dHTSZG8TdSuv5jgCShEUGqyvGiw.roa (hash: +ZC5a7s6sH7l7SttQEXeVRNgey70bU4V9g0KHoqIO/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/UWyzDNsJEok_oG5StXA266007_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/UWyzDNsJEok_oG5StXA266007_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UWyzDNsJEok_oG5StXA266007_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7e:c7:83:5a:e2:14:d2:0d:c7:04:93:c4:1e:be:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516cb30cdb0912893fa06e52b57036ebad34eff8
        Validity
            Not Before: May 13 04:01:02 2026 GMT
            Not After : May 14 04:01:02 2026 GMT
        Subject: CN=05248ce2ebb87c046b36931b0032db290586841a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:66:87:f4:45:54:a1:c6:f6:08:81:7b:a0:dc:
                    1b:b1:fb:77:78:18:6b:71:37:1d:ef:85:ae:a8:bb:
                    ad:8e:75:36:b1:da:d2:df:db:be:0d:07:c9:14:78:
                    86:45:d5:62:af:ef:0b:2f:9f:71:2c:59:26:b4:b7:
                    d9:db:01:c6:37:31:e6:a9:3b:4e:c2:bf:82:cb:94:
                    ce:a2:ae:32:2a:8e:a3:79:7c:6f:12:bc:bd:4a:75:
                    f1:ba:ed:79:d8:1f:bb:5f:5d:41:59:75:4a:a6:46:
                    bb:ab:c4:56:fd:f4:b1:0d:70:8d:a3:10:1a:ed:03:
                    0c:59:f3:6f:52:8e:2c:2b:84:ba:5a:5c:01:86:da:
                    c7:47:c9:c4:eb:f9:9c:46:3c:7e:9d:bf:35:27:fa:
                    11:6c:fc:4f:df:07:57:1b:43:eb:57:79:19:24:6b:
                    5c:a2:9b:7f:ec:d1:ee:5c:e9:15:ab:69:51:6c:11:
                    c7:48:da:62:ad:ba:53:41:64:8a:a6:8f:68:ce:25:
                    21:c5:71:32:01:c8:d8:c8:56:90:fb:67:31:bb:d1:
                    8d:0b:ed:fe:5a:0e:93:cb:52:53:02:7e:44:ed:69:
                    14:59:ec:c5:34:08:3d:c6:c1:27:4c:b1:f2:82:a2:
                    b5:1c:0f:eb:fd:43:41:ab:7f:51:3b:fa:9f:f3:79:
                    04:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:24:8C:E2:EB:B8:7C:04:6B:36:93:1B:00:32:DB:29:05:86:84:1A
            X509v3 Authority Key Identifier:
                keyid:51:6C:B3:0C:DB:09:12:89:3F:A0:6E:52:B5:70:36:EB:AD:34:EF:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWyzDNsJEok_oG5StXA266007_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/UWyzDNsJEok_oG5StXA266007_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/UWyzDNsJEok_oG5StXA266007_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:67:3b:5e:5c:11:78:15:02:da:95:1b:b6:59:42:6e:78:93:
         62:ee:bd:9d:8b:92:73:f8:26:ab:55:5c:3d:91:ee:62:4e:a1:
         00:eb:80:04:35:26:62:ce:84:32:f4:a0:d3:4e:52:a7:d9:cc:
         3b:b5:48:9e:43:2b:46:35:3c:af:bb:13:f0:7a:48:de:ab:2b:
         67:df:4e:bc:33:11:74:ff:55:2b:b7:ca:a4:48:af:35:be:37:
         35:75:95:00:d0:51:13:a8:92:5d:1d:9a:a5:ba:45:eb:3e:99:
         65:2c:91:50:1f:93:7c:f3:a4:a2:45:9d:e3:05:26:af:f5:76:
         38:5f:6c:f9:dc:22:27:9a:c8:28:0b:02:96:6e:dd:87:2a:81:
         6c:79:2b:21:4e:f9:73:62:54:c5:29:51:6e:a0:34:23:14:4a:
         11:f1:68:e7:5b:20:fd:81:fa:d9:ab:98:eb:3b:67:b2:4a:9b:
         35:71:a3:a9:53:84:34:14:e7:61:d7:ad:d9:94:8b:c3:d9:92:
         15:32:fc:2f:02:7e:2b:19:e8:4c:b2:e1:9f:93:95:8c:32:1c:
         3b:5d:d1:62:9f:c5:ef:e7:f0:52:ac:90:ad:dc:d9:71:6f:f8:
         5d:48:29:2f:b9:4f:cd:77:a4:4e:62:bc:62:ce:48:78:22:06:
         cc:ca:a1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:47:08 2026 by rpki-client