Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
File:                     U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft (raw, json)
Hash identifier:          v+ZprTPtdWQfbY7s+ciqOR4if2EyQBkS08H6YvSdmaM=
Subject key identifier:   81:B9:AF:B2:B0:E3:4F:FF:2A:F9:86:C2:6F:4F:28:CD:0E:0D:57:21
Authority key identifier: 53:E3:AE:DD:91:BE:82:45:13:42:DC:D1:C9:82:83:45:DB:66:1A:5F
Certificate issuer:       /CN=53e3aedd91be82451342dcd1c9828345db661a5f
Certificate serial:       019E1F10BB131B01C9D9FC704F381F473029
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
Manifest number:          0B92
Signing time:             Wed 13 May 2026 02:00:50 +0000
Manifest this update:     Wed 13 May 2026 02:00:50 +0000
Manifest next update:     Thu 14 May 2026 02:00:50 +0000
Files and hashes:         1: U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.crl (hash: iB+vOQCM3vP64WrkltzbIE3Cyq6DMgB3CoX5UY2eM6s=)
                          2: d4Z8dyEwWVlK-z1Mt82VdRZaIcY.roa (hash: pNguw2qBCLAYUuPZ0wVkI6YbP099kM2Xh8UMvqT4t9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 02:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:bb:13:1b:01:c9:d9:fc:70:4f:38:1f:47:30:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53e3aedd91be82451342dcd1c9828345db661a5f
        Validity
            Not Before: May 13 02:00:50 2026 GMT
            Not After : May 14 02:00:50 2026 GMT
        Subject: CN=81b9afb2b0e34fff2af986c26f4f28cd0e0d5721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9c:89:60:96:22:b0:b1:fc:78:16:ff:a1:f4:
                    35:87:30:09:f0:03:b6:b7:0a:d6:d8:33:aa:a6:1f:
                    c8:42:0f:55:44:a6:cf:33:af:42:c6:f3:ba:e1:84:
                    4b:55:36:a1:21:ee:35:08:62:5b:4d:08:b6:57:c2:
                    c7:10:6d:1f:06:a2:8c:d4:be:52:a3:8b:7d:11:08:
                    3f:6a:a8:6c:9c:ee:4a:82:35:99:ae:61:89:db:62:
                    79:ee:94:a6:ef:96:a6:98:f4:5b:1c:ad:5c:62:03:
                    c6:1d:ac:d6:a5:7b:14:39:41:4d:a8:75:ec:50:8d:
                    f1:6f:12:bf:9d:f0:73:a6:ee:e2:90:7a:40:12:14:
                    0c:64:ea:d7:89:6b:bf:92:91:5e:da:2d:dd:22:3b:
                    18:7a:b6:3f:aa:ad:57:ce:0d:01:ab:eb:38:27:2e:
                    f7:cc:4b:b8:81:52:67:17:2d:5d:78:87:e0:52:cb:
                    09:b4:44:67:3b:91:04:7f:8e:6a:97:b8:cb:32:46:
                    1a:fc:4f:f3:0b:c8:8e:2a:35:91:ed:71:fe:db:d6:
                    4f:bf:df:02:c6:52:b4:09:d6:23:ea:3b:b2:84:4c:
                    d8:5f:de:4c:ef:69:cd:c0:3f:6c:14:7e:54:cb:e8:
                    57:60:89:ef:80:f5:1a:0a:7c:85:f4:2a:ac:fb:79:
                    fd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B9:AF:B2:B0:E3:4F:FF:2A:F9:86:C2:6F:4F:28:CD:0E:0D:57:21
            X509v3 Authority Key Identifier:
                keyid:53:E3:AE:DD:91:BE:82:45:13:42:DC:D1:C9:82:83:45:DB:66:1A:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:0b:af:bb:e3:7c:a1:01:6a:56:8a:07:b3:4b:5a:7b:88:5c:
         88:45:ea:b4:b3:8a:ff:14:b9:05:9d:7f:3b:27:da:45:3d:6b:
         e8:cd:c8:67:74:37:ab:fe:62:14:6a:74:71:a5:77:62:9d:08:
         35:8b:04:d4:5b:42:46:91:b1:cf:51:dd:3d:3a:7c:6b:84:3b:
         fd:77:67:90:e9:2b:40:44:93:d7:bc:0a:cf:0e:aa:bb:62:b7:
         3c:52:de:70:cc:8d:49:ea:d3:40:49:02:8f:34:8b:fc:00:d1:
         3f:53:13:6e:9a:d2:d2:46:29:b4:ec:19:39:e6:a5:6f:c8:c4:
         76:34:e2:cf:72:fd:2d:5f:63:85:05:4a:19:1b:1c:5b:f8:e8:
         e3:75:e5:f6:5f:5c:ce:f3:68:2f:97:bf:00:cd:e8:08:e2:54:
         57:3d:97:b7:be:23:f9:2b:35:5f:ce:92:ee:8c:e2:db:46:5c:
         58:b8:e6:c3:91:80:00:8f:cd:be:14:f7:c2:8b:c5:9e:1f:2a:
         28:9b:6a:2c:e4:8c:03:01:38:00:2b:e8:de:be:be:9c:5f:c7:
         24:4b:d1:20:37:c2:7f:2a:11:15:5d:d1:0a:d0:21:0f:36:2b:
         21:9f:be:25:09:8a:11:f5:76:d1:2b:52:e0:53:6d:72:bc:6e:
         a4:e3:18:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:02:26 2026 by rpki-client