Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
File:                     uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft (raw, json)
Hash identifier:          /o3N/6553x5cHuPX1KTst8aa7aL6ffLS2j9rOdGpAeM=
Subject key identifier:   88:53:A5:5B:62:B8:5B:FC:C8:D8:6A:BA:BE:71:B1:A0:70:0C:6B:5A
Authority key identifier: B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37
Certificate issuer:       /CN=b9930359b5469112e6e2bfae8595b05485551d37
Certificate serial:       019E216DD14B3E474205CF349EDE4798C753
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
Manifest number:          05D5
Signing time:             Wed 13 May 2026 13:01:45 +0000
Manifest this update:     Wed 13 May 2026 13:01:45 +0000
Manifest next update:     Thu 14 May 2026 13:01:45 +0000
Files and hashes:         1: q9QiwiBtUXaeGzcn9qnTTXCRaYI.roa (hash: /RSQuO4wSBepnb5WctoxBJfzvDfZfmxsmBSRIpoN6ic=)
                          2: uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl (hash: xmKx3Sydj5lkpt4P0zqkgrseHmIY44DzQDCu7dkkkas=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 13:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:21:6d:d1:4b:3e:47:42:05:cf:34:9e:de:47:98:c7:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9930359b5469112e6e2bfae8595b05485551d37
        Validity
            Not Before: May 13 13:01:45 2026 GMT
            Not After : May 14 13:01:45 2026 GMT
        Subject: CN=8853a55b62b85bfcc8d86ababe71b1a0700c6b5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e9:13:e5:f0:b2:ad:4b:a6:ab:7e:1c:d5:d7:
                    1d:f1:a3:5e:f5:68:a5:cb:c7:d0:64:ef:bf:c3:55:
                    67:6b:64:80:7d:18:66:11:34:8f:d6:b1:44:c3:24:
                    35:17:d9:a3:e1:65:e7:c3:73:7c:16:95:e4:59:71:
                    25:a0:f6:5b:81:f9:8f:88:69:21:69:f7:4b:fc:6d:
                    0e:68:46:28:0e:d3:06:58:38:84:7c:03:a8:c6:38:
                    d1:bd:6c:80:6b:be:32:0b:18:52:e1:9c:af:f0:2b:
                    17:4c:35:23:34:4a:9d:c8:8b:3a:6e:f2:ea:ff:28:
                    91:4d:61:6c:79:22:0a:9d:17:56:3a:6a:50:de:52:
                    01:22:a4:01:92:a9:c1:d6:f3:d1:11:b8:0e:4e:ba:
                    ce:51:fa:f8:f1:37:eb:d5:ef:29:15:b5:98:fe:b9:
                    3a:9a:22:f8:27:49:b3:1b:5c:ea:cb:75:d0:13:8a:
                    39:b4:35:dc:3d:ca:fb:32:bc:c1:09:ec:da:5f:c3:
                    aa:bf:bd:19:2d:0b:ef:93:c0:c7:4e:2b:94:81:66:
                    85:9d:9d:40:94:b5:43:59:76:6c:5a:00:42:7d:f3:
                    57:d0:59:bb:22:79:c6:81:e4:9a:0d:39:81:b1:e9:
                    fa:28:49:f1:35:c0:3f:9d:e6:ee:00:02:36:7e:39:
                    2c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:53:A5:5B:62:B8:5B:FC:C8:D8:6A:BA:BE:71:B1:A0:70:0C:6B:5A
            X509v3 Authority Key Identifier:
                keyid:B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:b9:fc:b5:26:b2:90:4e:e8:c2:da:21:c1:27:da:9f:1c:33:
         b1:81:5b:da:8f:c0:9a:bf:23:df:c9:79:b5:23:8b:92:d3:30:
         61:c2:92:ef:94:60:87:ea:98:3d:94:ac:4e:5a:fc:61:9c:d7:
         72:43:a6:82:6d:0a:49:e9:23:1b:85:fb:64:01:9a:d3:e9:0b:
         48:53:67:b3:80:e1:d5:b5:07:55:18:41:0d:cc:dd:e3:1d:ce:
         52:ca:2d:18:57:31:e5:cc:bc:ca:ec:7e:70:cf:75:3f:f7:f5:
         15:21:5d:d8:72:97:16:0c:0d:d3:e6:fc:10:ba:7a:ac:e5:82:
         f6:9c:f5:ff:52:9c:93:62:72:77:02:bf:f1:93:ad:53:48:fa:
         9e:77:d1:a8:c6:ea:63:d6:0a:ee:3e:ec:34:18:48:6b:f6:fb:
         88:fe:92:41:4c:8e:32:3f:53:df:8e:d2:2b:ec:7c:23:4b:f0:
         b7:17:6c:76:20:64:57:8e:70:e5:be:a0:15:a2:bb:4d:0a:cd:
         92:30:53:87:34:b8:ed:34:fc:64:e1:41:fd:60:81:4a:2d:6f:
         39:93:3b:5a:8f:56:5a:a2:3a:e8:ed:5b:25:8b:91:d9:a8:4b:
         24:05:db:7b:d3:1f:9d:11:18:4d:4c:fe:18:38:93:e0:27:81:
         c7:7e:8c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:48:44 2026 by rpki-client