Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
File:                     UFEncj6gz9ByRxOykXNMqjU-IOo.mft (raw, json)
Hash identifier:          P/e5ApSIaGlhiv5Iq83N309gQh/HmztJRDbFm8d5AB0=
Subject key identifier:   73:62:2B:D8:58:8A:21:42:0A:FB:CC:76:3D:C2:23:98:F4:19:19:AF
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Certificate issuer:       /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial:       019E1F7EFE794194D55344121B2B0AD69DA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
Manifest number:          1925
Signing time:             Wed 13 May 2026 04:01:16 +0000
Manifest this update:     Wed 13 May 2026 04:01:16 +0000
Manifest next update:     Thu 14 May 2026 04:01:16 +0000
Files and hashes:         1: 8C2rNpK0bo-5H3n_8Vdac41pV-s.roa (hash: RN3A9BXDyd9+c1D+7ZirRXgWPXfUFRbvjrZAwDHi/G0=)
                          2: CDdW7nCuQzH6NAMjfPJaFceRmv8.roa (hash: 3y28X5gdOE3EjaGMFkwpZSr7meiX5mPuhbh7+VXJVdg=)
                          3: JExJtb-2H86T5l_2TNtSXSkGdK4.roa (hash: PhyjLCVkG5sspCrwOMxylvOtWm2ph/t/PSTEggPhL8U=)
                          4: PkLF5Qe23NpZ0qUxVzRcrTiMnQg.roa (hash: WhFKLI35lPl0xgI1Abtq0FpDyLm3DVBgk69s+Al9tJ0=)
                          5: UAhAd15sm6zy6_JCC2foG_CxY9Q.roa (hash: QNJtOZDMc5d6KWlXodyqH9IN72fjqjARygPkojFQzwM=)
                          6: UFEncj6gz9ByRxOykXNMqjU-IOo.crl (hash: wjRZaZl1+ZZ0j46BNMZgTMKeQMkALwZ6K1Gvb12kQ/E=)
                          7: sf2AUkxMphordGbZ3YZieGPTsCc.roa (hash: Mug8Np9415LBH+oOr+F8Q3MZzW+UFUq4lggni46fyqQ=)
                          8: zraNw8LeAWlnY3DPt_ChcLdFWU4.roa (hash: GAhTC1QluGdOik4s8WqaXoSj07QRcnsMlml1l1SiPo4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7e:fe:79:41:94:d5:53:44:12:1b:2b:0a:d6:9d:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
        Validity
            Not Before: May 13 04:01:16 2026 GMT
            Not After : May 14 04:01:16 2026 GMT
        Subject: CN=73622bd8588a21420afbcc763dc22398f41919af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8b:49:e7:04:e3:f8:be:82:70:fa:6f:67:8f:
                    4f:3d:e8:a0:eb:37:2e:89:f8:38:17:be:f4:90:a4:
                    a8:c1:90:68:f3:79:34:91:bc:61:4d:0c:7f:99:e6:
                    fe:32:d2:9e:45:ee:2a:7e:32:9e:2a:87:e0:63:13:
                    f2:51:f9:8f:7f:d5:32:4e:9e:b2:36:7f:c7:a5:2b:
                    1c:42:03:7c:3b:ac:68:b5:a5:12:50:59:41:e3:3f:
                    ed:00:03:71:5d:9c:60:c0:3d:07:26:54:ff:ba:6d:
                    e0:1e:e8:df:fc:7a:6f:1a:2b:8e:58:f5:fa:81:95:
                    c2:08:cf:f7:b0:44:c6:ad:9e:dd:02:eb:e9:2e:99:
                    17:7f:2f:17:96:5c:fb:84:a9:94:64:d8:af:ba:91:
                    46:61:57:96:31:a9:c1:c6:1f:58:51:ea:e6:76:56:
                    d8:87:19:f9:6e:fd:b6:34:df:d0:db:98:69:08:41:
                    4d:40:fe:2b:d9:df:75:29:be:db:20:87:a7:a4:11:
                    2e:2b:40:15:e7:83:12:54:5b:92:b8:61:75:3e:d0:
                    97:3b:68:98:62:17:18:8a:e9:7f:c8:a1:c9:7c:b2:
                    20:85:f4:65:63:c7:71:0a:47:b2:6a:c1:c2:ce:f0:
                    5d:59:4b:57:74:7e:7e:2b:65:7f:98:d4:83:cb:70:
                    e7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:62:2B:D8:58:8A:21:42:0A:FB:CC:76:3D:C2:23:98:F4:19:19:AF
            X509v3 Authority Key Identifier:
                keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:aa:dc:5a:94:9f:4f:ce:4d:c6:de:08:3c:47:85:7f:3c:71:
         92:51:5f:62:a4:61:74:3b:83:40:60:6c:4a:64:69:b1:3b:fa:
         f8:35:4d:96:f0:5a:05:3b:5c:26:95:8a:7c:af:fc:46:f9:8b:
         e7:ae:e9:aa:d1:20:f2:33:06:15:70:71:92:59:fc:58:b5:4d:
         e5:9c:ce:a3:72:19:d9:9a:b8:60:9e:56:39:3a:95:51:5b:68:
         26:9b:09:dd:2d:2e:5e:41:eb:2f:b3:7b:f2:88:06:f5:d5:6e:
         30:89:06:d7:27:7b:ae:e0:86:52:a8:0f:ab:3f:cc:84:8e:f8:
         27:c3:3d:18:1f:4b:60:9d:03:57:e4:83:07:b9:55:c7:60:15:
         9b:4c:54:93:6f:1e:93:ed:a9:5a:a7:1a:b9:35:f1:d1:cb:d6:
         fe:fc:58:f7:13:97:76:ef:45:1e:43:93:e9:36:ed:f1:8f:38:
         18:6f:32:15:19:de:4e:cb:11:1f:e5:d6:56:e6:54:51:52:cd:
         d3:e9:46:49:f0:ad:2c:5c:f2:40:86:4f:f7:52:b1:50:fb:e9:
         34:b9:9b:8f:4b:34:aa:7b:b9:73:17:9a:44:58:85:a8:3e:79:
         d7:85:1b:ed:8c:4d:a9:44:18:12:91:06:06:1b:0a:5b:67:3c:
         15:59:27:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:35:20 2026 by rpki-client