Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
File:                     UJvGPmjJCTK0_CiZf8O_eN47N0M.mft (raw, json)
Hash identifier:          0Hkk4jlZ+Dgw/Oab/7rP0AicKy2VPAzzI768Cct7B7c=
Subject key identifier:   3B:3B:91:86:2E:65:5F:96:5C:49:C3:4A:57:1E:C1:F7:0D:1D:EF:D6
Authority key identifier: 50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43
Certificate issuer:       /CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
Certificate serial:       019E1FECA266BAD2690C2E325A7684B62F6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
Manifest number:          120E
Signing time:             Wed 13 May 2026 06:01:02 +0000
Manifest this update:     Wed 13 May 2026 06:01:02 +0000
Manifest next update:     Thu 14 May 2026 06:01:02 +0000
Files and hashes:         1: 6TGUfIQg-VBwQ1TSjbACENP0Fuk.roa (hash: KbUe0U97E5HGIjpIMaXPTxhvroq3ZGOD2BiTeZCgmUA=)
                          2: UJvGPmjJCTK0_CiZf8O_eN47N0M.crl (hash: ol8zhffQlDcz8n/usG5WfNmY9KJBL/5xiuUJEUXq+bs=)
                          3: vFIy0amMxxYp6t0XVtNNLn2R_I8.roa (hash: vax2PUgWucdwxjsswO26V1j+tAN7zRvvsr/R7FSg7S0=)
                          4: zr2faZR5YeSQwhfP1BestpJXC-c.roa (hash: l0wUse8So6p8HXiUpDrAoN5JVZGYHdfzX/5wlHsppLs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:a2:66:ba:d2:69:0c:2e:32:5a:76:84:b6:2f:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
        Validity
            Not Before: May 13 06:01:02 2026 GMT
            Not After : May 14 06:01:02 2026 GMT
        Subject: CN=3b3b91862e655f965c49c34a571ec1f70d1defd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:50:71:33:f4:d1:cb:c6:8f:5d:96:ae:44:fe:
                    78:90:71:24:b7:32:73:91:e8:3d:c4:a2:b4:ce:5f:
                    4b:66:9d:04:1a:59:e8:40:42:f5:59:7c:a9:f6:42:
                    6a:78:da:b4:c4:9b:31:33:1f:9c:57:3e:44:96:e1:
                    af:f8:05:1f:20:52:fd:76:c4:71:6f:8a:80:c5:fe:
                    9a:cd:c0:b9:c0:05:fe:63:49:f8:f9:ca:ec:a2:85:
                    58:0c:82:35:20:9c:2a:e4:8c:b5:e3:d2:5a:1d:e3:
                    a6:d4:72:48:0d:24:68:8e:3a:19:2e:96:39:de:b7:
                    d5:fd:94:57:a1:5b:37:37:e8:e5:c0:2d:22:25:c9:
                    53:ad:49:c1:3b:87:f4:da:37:73:9e:fb:c2:79:d2:
                    ee:c4:1b:2b:22:88:94:09:91:d2:06:bc:22:97:83:
                    b6:18:ec:d2:aa:50:fa:2e:f3:71:d9:7f:98:b2:12:
                    05:27:30:30:5c:95:46:54:14:ab:07:bf:e9:12:84:
                    3a:65:c3:38:2e:69:3d:01:06:75:9e:d4:54:aa:bb:
                    0c:77:c9:37:99:25:91:cd:6f:b5:a5:0d:9c:7c:70:
                    dd:e0:8f:d7:58:a3:02:a6:62:06:9e:c8:66:d3:8f:
                    d0:b1:18:81:e8:d1:d2:52:2b:6c:16:85:87:fc:77:
                    92:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:3B:91:86:2E:65:5F:96:5C:49:C3:4A:57:1E:C1:F7:0D:1D:EF:D6
            X509v3 Authority Key Identifier:
                keyid:50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:4e:e5:20:f3:50:13:8f:56:1e:c1:2f:33:17:c5:fc:7f:4b:
         ae:08:f2:d2:c6:fc:9d:ec:2d:61:3b:f6:20:d4:ae:9e:11:96:
         d1:ce:69:a8:a5:0e:f1:93:37:77:a9:1c:85:2f:25:ed:74:ee:
         c1:d2:1a:5d:98:21:52:ec:1d:52:68:d1:76:08:20:be:01:51:
         5d:ea:52:e0:a1:4c:e1:1d:b8:36:fa:34:8b:1d:d9:21:91:af:
         9b:c7:0c:8f:bd:ab:7f:bd:67:e2:e6:36:46:9c:0d:73:e9:e5:
         ea:fc:d6:d5:62:d6:8b:d0:cf:ca:ff:72:3e:ad:59:9a:c0:3a:
         02:57:2d:6d:b9:4d:f5:ff:2e:e0:2c:10:f7:73:b7:a2:c7:26:
         d1:70:f8:da:ba:b8:db:f2:c6:46:ee:7b:bf:f5:70:67:58:7c:
         97:5d:66:0c:a6:15:ee:d0:c6:4b:c0:ba:1d:46:92:c2:f2:b2:
         18:2a:66:03:4d:e0:3f:98:04:33:5f:b6:f6:b4:6d:e4:65:b0:
         26:34:95:98:cb:06:dc:24:54:60:b1:d5:26:29:fe:db:c9:bd:
         0e:d9:2d:66:df:10:8b:9f:e8:bd:ff:9d:eb:52:bd:73:1c:82:
         4e:77:9b:4d:fa:92:6f:64:39:a8:9b:60:a7:f8:93:0e:73:48:
         e4:a2:4b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:39:28 2026 by rpki-client